last executing test programs:

11m4.184469596s ago: executing program 32 (id=1429):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r1, 0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02)

8m41.807223041s ago: executing program 4 (id=2661):
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000002c0)=0xc, 0x4)
recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)

8m41.506926959s ago: executing program 4 (id=2664):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc141100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

8m41.04650644s ago: executing program 4 (id=2668):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x200}, 0x8)

8m40.336074268s ago: executing program 33 (id=2670):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x42beaa2ce6d9610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="8000010018000000180034801400350069703665727370616e"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100, 0x0, 0x8000000}, 0x2800804c)

8m40.326261218s ago: executing program 4 (id=2673):
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0], 0xff, 0x5b7, &(0x7f0000002940)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020)

8m39.935622088s ago: executing program 4 (id=2678):
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

8m37.509287087s ago: executing program 4 (id=2692):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00')
r1 = fanotify_init(0x4, 0x2)
fanotify_mark(r1, 0x1, 0x8000039, r0, 0x0)
io_setup(0x9, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)

8m37.051572589s ago: executing program 34 (id=2692):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00')
r1 = fanotify_init(0x4, 0x2)
fanotify_mark(r1, 0x1, 0x8000039, r0, 0x0)
io_setup(0x9, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)

8m14.432891594s ago: executing program 6 (id=2830):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000400)=[@nested_amd_inject_event={0x180, 0x38, {0x1, 0x7c, 0x4, 0xfffffffffffffffd, 0x1}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x58})
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

8m14.091109232s ago: executing program 6 (id=2833):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200200, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000240)="3633e0", 0x3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c)
shutdown(r0, 0x1)

8m13.954633366s ago: executing program 6 (id=2836):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x6}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20045080}, 0x8840)

8m13.590214915s ago: executing program 6 (id=2839):
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0], 0xff, 0x5b7, &(0x7f0000002940)="$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")
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

8m13.183011335s ago: executing program 6 (id=2841):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x763, 0xa8182)
r1 = memfd_create(&(0x7f0000000800)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\xe0\x9f\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xd6\xb5\x15\xb8\xb29T}?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xeb\x95Z\xe5w^\xd8\xe7J\x80\b\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xcaS\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x92\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x88\xd9.\xcd\\\xda^\x8b\x8b\x05\x00\x00\x00\x00\x00\x00v\xcf\xee+\xab\x9c\x00B\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\a\x94\xdfW<GE\xf1\xcd\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xae2-A:v\xad\x0f\x15\x98\xd4S\xdf*7W\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\xf8\xff\xff\xff\xff\xff\xff\xff]\x11)u\xd7\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kK0\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xf3y\xc1\xb3.\xd8J\x06Y\xee\x8fq\xfaYz\xf9\x9b:\x81\"\x97-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90OP\xaaFY\xb4\a\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5\x00\x00\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc\x00\x00\xd3k8\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x80\x00\x00\x00\xc3I^\xd7\xfd\x91\xf7\x00\x00\x00\x00\xf3lg\x85\xb7~\x7f\xaf\xb2\x9e]\x01\x8aY\x05\xcb\xf8\x86\xbe~\xffg\xbe<\xf0\xa1\x82,\x92\xeb', 0x5)
pwritev(r1, 0x0, 0x0, 0xb62, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
msgget(0x2, 0x47a5f2ebe3f1275b)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)

8m12.474783272s ago: executing program 6 (id=2847):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf8e9}}]}]}}]}, 0x40}}, 0x0)

8m11.819868108s ago: executing program 35 (id=2847):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf8e9}}]}]}}]}, 0x40}}, 0x0)

7m51.190003305s ago: executing program 7 (id=2848):
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0], 0xff, 0x5b7, &(0x7f0000002940)="$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")
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

7m50.758155065s ago: executing program 7 (id=2933):
r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000340)="2e11", 0x2}], 0x1, 0x4, 0xa)

7m50.263691357s ago: executing program 7 (id=2936):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x4b, 0x10}, 0xc)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='W#Q', 0x3}], 0x1}}], 0x3, 0x0)
shutdown(r0, 0x1)

7m49.632666503s ago: executing program 36 (id=2936):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x4b, 0x10}, 0xc)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='W#Q', 0x3}], 0x1}}], 0x3, 0x0)
shutdown(r0, 0x1)

7m30.432466854s ago: executing program 3 (id=3065):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0)
write(r1, 0x0, 0x0)

7m30.17669219s ago: executing program 3 (id=3068):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
shutdown(r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044054)
r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

7m29.968512136s ago: executing program 3 (id=3069):
fanotify_init(0xf00, 0x1000)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4040041}, 0x810)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4004)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001200)=@deltclass={0x434, 0x29, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x13, 0x6}, {0x7, 0xffec}, {0x6, 0x8}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x5768, 0x4, 0x6, 0xf8, 0x40, 0x8, 0x40, 0x80000001, 0x5222, 0x1, 0x4, 0x5, 0x100, 0x2, 0xa6, 0x2, 0xcab5, 0x6, 0x0, 0x8, 0x5, 0x7, 0x40, 0x1, 0x7, 0x5, 0xf, 0x2, 0x0, 0x3d, 0xaf4f, 0x3, 0xe, 0x0, 0x5, 0x8, 0x3, 0x399, 0xc, 0x1ff, 0xc, 0x7, 0x6, 0x6, 0x4, 0x7ff, 0x2c, 0x401, 0x0, 0x4, 0x8, 0x8, 0x356, 0x7fffffff, 0xfc65, 0x6, 0x1, 0x4, 0x7, 0x1, 0x3, 0x7, 0x9, 0x8, 0x1, 0x5, 0xfffffff9, 0x7, 0x262, 0x6, 0x60b, 0x204, 0x6, 0x2, 0xd, 0x6a71, 0x5, 0x0, 0x5, 0x400, 0x6, 0xb, 0x8001, 0x561, 0x6, 0x2, 0xe, 0xc, 0x0, 0x0, 0x1155, 0x1, 0x7, 0xde1, 0x5, 0x8, 0x0, 0x4, 0x89, 0x7, 0xfffffffc, 0x9, 0x2, 0x1, 0x4, 0x4, 0xfff, 0x9, 0x401, 0x4, 0x4d, 0xffffffdc, 0x6, 0x9, 0x9, 0x10000000, 0xc, 0x1000, 0x1, 0x9, 0x1, 0x80000001, 0x0, 0x7, 0x1, 0x8, 0x1d, 0x9f, 0x5, 0x88, 0x8, 0x5, 0x8001, 0x6962, 0x800, 0x1000, 0x3, 0x325, 0x8, 0x1, 0xc, 0x8, 0x4, 0x4, 0x5, 0x4, 0x68f1, 0x4de, 0x4, 0xe4, 0x3, 0x7, 0x3, 0x8, 0x69484c88, 0xfffffff8, 0x9, 0x1, 0x1000, 0x9, 0x6, 0x6, 0x5, 0x5abc, 0x275, 0x10001, 0xc787, 0x9, 0xa, 0xd659, 0xfff, 0x10001, 0x7fff, 0x6, 0xfffffffe, 0x7, 0x581, 0x7, 0x4, 0x789, 0xe95d, 0x8, 0x8, 0x8, 0x41d5806b, 0x9, 0xe, 0x10, 0x7ff, 0x4af9, 0x6bf070d4, 0x80000000, 0xcf4, 0xc796, 0x1, 0x2, 0x4, 0x1c4, 0x5, 0x7, 0x8, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x87, 0x0, 0x2, 0x1000, 0x0, 0x297e419b, 0x80000001, 0xffffff39, 0x7, 0x200, 0xb21c, 0x80, 0x4, 0xb, 0x6703, 0xc7b, 0xf48, 0x6, 0x8, 0x1, 0x2, 0x3, 0x101, 0xe0b, 0x1, 0x502f, 0x1, 0x4, 0x9, 0xfffffff7, 0x3, 0x9, 0x3, 0xdfc7, 0x0, 0x9, 0x8, 0x2, 0x7fff, 0x10001, 0x4, 0x73f, 0xcfca, 0xd, 0xd3a, 0x9, 0xc2f3, 0x8, 0x3]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x101}}]}, 0x38}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

7m29.491099828s ago: executing program 3 (id=3072):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"})
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
syz_open_pts(r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
read$FUSE(0xffffffffffffffff, &(0x7f0000003f80)={0x2020}, 0x2020)

7m29.184761105s ago: executing program 3 (id=3073):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x9)
socket$nl_generic(0x11, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000500)=0x2)
ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1)
close_range(r1, 0xffffffffffffffff, 0x0)

7m28.880696132s ago: executing program 3 (id=3076):
sched_setscheduler(0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38)

7m13.739913194s ago: executing program 37 (id=3076):
sched_setscheduler(0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38)

6m33.422262884s ago: executing program 9 (id=3237):
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x17bb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6m31.448925573s ago: executing program 9 (id=3240):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000640)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x4000, 0x255, 0x0, r7}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ffffe, 0x4000, 0x2104, 0x31d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x0, 0x0, 0x26}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x81fc, 0x2, 0x311, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0xe, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0xe0b, 0x0, 0x0}}, 0x0)

6m30.000485668s ago: executing program 9 (id=3247):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setresuid(0xee00, 0xee00, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4080001}, 0x20000000)

6m29.728828115s ago: executing program 9 (id=3249):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)

6m28.182237873s ago: executing program 9 (id=3252):
r0 = socket(0x2, 0x3, 0x5)
sendto$inet(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000000)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
recvfrom$l2tp(r0, 0x0, 0x0, 0x100, 0x0, 0x0)

6m27.852780791s ago: executing program 9 (id=3255):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, &(0x7f0000005980)=0xe8)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x40)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0)

6m12.284897973s ago: executing program 38 (id=3255):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$eJzslM9K80AUxc9M+rX0Q1fuBHFhwbpomqQqbkSKL1DwH+6MNpZqaksbwdaVuPUB3Lr1FboRfBF1JUKXriPJTJuptFUELeL9LW7OZO7c3LmBA4Ig/ixPj68PVy/tcw3ABFJIyPfPWpTDlfzTQnJ/KrN+276+v1yrzVQH1fT9z38/BuAur8Hrne0/nZLPTfCe3gLHgtQ7YNCl3gPHttQOGHalPlJ0NcjX9cOy6+gHVbcYCCMIZhCsIOTe99e5YCgq/TFlv9FsHduu69S/UXw0v06eY1XpT/1f3dkYyvxMcJhS58CwIfUKEt3ZiJEo95+ORfW1H74/CRIkfpuI/Mm/YZhX/Cmm+EfWq9SyjWYrU67YJafknFhWbtlYNIwlKxsakYgj/C8Z+tN/pf6/IblxFseZ7Xl1U8Te2hJxkOPy0P840nNiHXh/fGg3Yp/JcyxUaW1EOkEQxNiYBYNv+wqT0kX7sArjbpQgCIIgCIIgCIIgiC/zFgAA///dqHHL")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, &(0x7f0000005980)=0xe8)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x40)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0)

4m44.04470588s ago: executing program 2 (id=3544):
listen(0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x4, 0x19, 0x0, r1}, 0x0, &(0x7f00000000c0), &(0x7f0000000000))
r2 = socket$netlink(0x10, 0x3, 0x15)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

4m43.879997114s ago: executing program 2 (id=3546):
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e)
syz_emit_ethernet(0x76, &(0x7f0000000880)={@link_local, @random="0000fc00", @val={@val={0x88a8, 0x3}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x7, 0x4, 0x1, 0x6, 0x60, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0xe2, 0x0, 0x1, 0x1, 0x1, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6}, 0x2, {0x9c, 0xbd, 0x0, 0x19, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
lseek(0xffffffffffffffff, 0x101, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f00010300000000480000"], 0x114}], 0x1}, 0x24044010)
socket$nl_generic(0x10, 0x3, 0x10)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)

4m43.692837439s ago: executing program 2 (id=3547):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r1, 0x9)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)
readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f00000033c0)=""/4083, 0xff3}, {0x0}, {&(0x7f00000043c0)=""/4098, 0x1002}, {0x0}, {&(0x7f0000000c80)=""/207, 0xcf}], 0x6)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40)

4m42.731608022s ago: executing program 2 (id=3549):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)

4m39.620661469s ago: executing program 2 (id=3559):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0)
bind$802154_raw(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000004400010029bd70000400000002000000043f3ffe00010000427d5fd7db25b5f59166afa517a46f282035f99263f5005f5af5faf8ca73a8e878ea117144c673ecb951"], 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x81)
r3 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18ab", 0x2}], 0x1}}], 0x4, 0x40480c0)
close_range(r4, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

4m35.580710008s ago: executing program 2 (id=3566):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)

4m34.512944874s ago: executing program 39 (id=3566):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)

4.710306934s ago: executing program 0 (id=4845):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c", 0x3}], 0x1}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r5, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x0, 0x80000000, 0x0, 0x20410, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50)
nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x9, 0x9bfb, {{0x2e, 0x4, 0x2, 0x9, 0xb8, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @private=0xa010102, @broadcast, @broadcast]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x5, "0f6070"}, {0x1, 0x5, '.?\a'}, {0x5, 0xa, "27cd4f41801f73e3"}, {0x5, 0x3, "ff"}, {0x5, 0xb, "8778932bdacbdf6015"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', <r7=>0x0, 0x29, 0x0, 0xca, 0x1, 0x10, @loopback, @mcast1, 0x7, 0x1, 0x7ff, 0x9}})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r6], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4)
listen(r9, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)

4.406867372s ago: executing program 0 (id=4849):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, 0x0)

3.755451848s ago: executing program 0 (id=4854):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101840, 0x92)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

3.152074292s ago: executing program 0 (id=4860):
r0 = msgget$private(0x0, 0x1c0)
mq_open(0x0, 0x40, 0x170, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x10, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044565d, &(0x7f0000000100)=@multiplanar_mmap={0x3, 0x0, 0x4, 0x800000, 0x6, {}, {0x2, 0xc, 0xf7, 0x9, 0x1, 0xfb, "ea89bf5b"}, 0x5, 0x1, {&(0x7f0000000180)=[{0x0, 0x9, {0x2}, 0xf7}, {0x3, 0x0, {0x9}, 0x4}]}, 0x9})
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x1, 0x8000000, r1, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0xfffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5})

2.950486897s ago: executing program 8 (id=4861):
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02"], 0x70, 0x800)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)

2.82709529s ago: executing program 8 (id=4862):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, 0x0)

2.553272317s ago: executing program 1 (id=4864):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
recvmmsg(0xffffffffffffffff, &(0x7f0000008840), 0x0, 0x40000001, 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0)
close(r2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)

2.548998867s ago: executing program 5 (id=4865):
ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000340)={0xffffff40, 0x0, @ofdm={0x1, 0xa, 0x15, 0x4, 0x0, 0x3, 0x4}})

2.164594137s ago: executing program 8 (id=4866):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff00000007058102"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
read$char_usb(r2, &(0x7f0000000600)=""/64, 0x40)

2.164126717s ago: executing program 5 (id=4867):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c", 0x3}], 0x1}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r5, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x0, 0x80000000, 0x0, 0x20410, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50)
nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x9, 0x9bfb, {{0x2e, 0x4, 0x2, 0x9, 0xb8, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @private=0xa010102, @broadcast, @broadcast]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x5, "0f6070"}, {0x1, 0x5, '.?\a'}, {0x5, 0xa, "27cd4f41801f73e3"}, {0x5, 0x3, "ff"}, {0x5, 0xb, "8778932bdacbdf6015"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', <r7=>0x0, 0x29, 0x0, 0xca, 0x1, 0x10, @loopback, @mcast1, 0x7, 0x1, 0x7ff, 0x9}})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r6], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4)
listen(r9, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)

1.706653428s ago: executing program 5 (id=4868):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'rti802\x00', [0x100, 0xf, 0xd0, 0x2, 0x5, 0x100, 0x8, 0x20000000, 0x8, 0xb, 0x2000, 0xffffffff, 0x1, 0x1401, 0x10001, 0x1, 0x0, 0x800008, 0xfe9, 0x0, 0x7, 0x2, 0x7, 0x9, 0x48, 0x9, 0xa, 0x6a77, 0x5, 0x7, 0x8]})
ioctl$COMEDI_LOCK(r0, 0x6405)

1.582934571s ago: executing program 1 (id=4869):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101840, 0x92)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1.468689134s ago: executing program 5 (id=4870):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1)
socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00')
open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f10001", @ANYRES64=r1], 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
socket$packet(0x11, 0x2, 0x300)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcbc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x4c)

1.20374509s ago: executing program 8 (id=4871):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'})

1.018882655s ago: executing program 8 (id=4872):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$XFS_IOC_SCRUB_METADATA(r1, 0x5b14, 0x0)

1.007590155s ago: executing program 1 (id=4873):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='disable\n', 0x8)
write(r0, &(0x7f0000000140)='set io 0-0\n', 0xb)
write(r0, &(0x7f0000000180)='activate\n', 0x9)
r1 = openat(r0, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2002, 0x0)
write(r1, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f)
read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020)

831.67534ms ago: executing program 5 (id=4874):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, 0x0)

752.385431ms ago: executing program 1 (id=4875):
ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000340)={0xffffff40, 0x0, @ofdm={0x1, 0xa, 0x15, 0x4, 0x0, 0x3, 0x4}})

608.683175ms ago: executing program 1 (id=4876):
r0 = socket(0x28, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8)
r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3, 0x8, 0x4}, 0x30, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = socket(0x28, 0x5, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, r5, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x20040841}, 0x8000)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc01c5868, &(0x7f0000000480)={r2, &(0x7f0000000380)='/\'G\x00', 0x8040, &(0x7f00000003c0)={@_ha_fsid={[0xdc9, 0x9f4]}, {0x31fa, 0x3, 0x3, 0x7}}, 0x8000, &(0x7f0000000400), &(0x7f0000000440)=0x20})
listen(r3, 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000340))
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r6 = accept4$unix(r3, 0x0, 0x0, 0x800)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
recvfrom$unix(r6, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0)

604.244795ms ago: executing program 0 (id=4877):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000080))
socket$igmp(0x2, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cfg\x00', 0x9e)
mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cfg/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0)
read$FUSE(r1, &(0x7f00000008c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
r4 = syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000100)={0x2, 0x2, 0x3, 0x0, 0x694})
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002900)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000002a00)=0xe4)
lstat(&(0x7f0000002a40)='./cfg\x00', &(0x7f0000002a80))
write$FUSE_STATX(r1, &(0x7f0000002b00)={0x130, 0x0, r2, {0xce, 0x3, 0x0, '\x00', {0x8000, 0xfffffa04, 0x8000000000000001, 0x4, r5, r3, 0x1000, '\x00', 0x7, 0x7ff, 0x200000000000, 0x6, {0x5, 0x9}, {0x4, 0x6}, {0xffffffffffffffff, 0x3}, {0x6, 0x5}, 0xf, 0x5, 0x802, 0x8000004}}}, 0x130)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
write(r1, &(0x7f0000000280)="75b214", 0x3)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x8, 0xc, 0x9, @vifc_lcl_addr=@local, @multicast2}, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
socket$inet_smc(0x2b, 0x1, 0x0)
io_setup(0x20fe, &(0x7f0000000540))

508.027097ms ago: executing program 1 (id=4878):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
setuid(0xee01)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x48634000)
mlockall(0x3)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x1489a, 0x0)

344.627181ms ago: executing program 0 (id=4879):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000150a010400000000000000200a0000030909000000797a31000000000900020073797a30000000000900010073797a3100000000730008002f578452008bd7137842e3d514774740d410313dbb9907ea97dd3e5bc186a1a70e563280f435416b06e272b3f744421f7322fa14e594858147fcb6fc2369ab20b52a8d966a2b522d3463458d813c291260943f94ddf787499f26e55dc17b69ad8a9ebb77850cdb74e5bf821101b1ed00"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4c008)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x70bd29, 0x20003, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

286.145303ms ago: executing program 8 (id=4880):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc802)
socket$netlink(0x10, 0x3, 0xb)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0xfffffffe, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfff, 0x1, 0x4000, 0x4}, 0x4, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x20048844)

0s ago: executing program 5 (id=4881):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

kernel console output (not intermixed with test programs):

 recommended to keep mac addresses unique to avoid problems!
[  463.454961][T14208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  463.494589][T14208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.559401][T14208] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.675104][T14208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.733221][T14208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.783646][T14208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.837153][T14208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.902546][T14208] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.975917][T14208] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.008871][T14208] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.032911][T14208] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.057002][T14208] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.096946][T14497] netlink: 'syz.3.2923': attribute type 13 has an invalid length.
[  464.117540][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2923'.
[  464.140522][T14497] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  464.396948][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.461253][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.589302][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.630922][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.008016][T14518] loop7: detected capacity change from 0 to 736
[  465.154929][T14033] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  465.666902][T14533] IPv6: addrconf: prefix option has invalid lifetime
[  466.237768][ T1327] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.674949][ T1327] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.849152][T14557] 9pnet_fd: Insufficient options for proto=fd
[  467.404332][ T1327] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.690770][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  467.704726][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  467.719442][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  467.732832][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  467.740491][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  467.747789][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  467.913307][ T1327] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.936771][T14583] overlayfs: failed to clone upperpath
[  468.193521][ T5785] Bluetooth: hci4: command 0x0406 tx timeout
[  469.151099][T14575] chnl_net:caif_netlink_parms(): no params data found
[  469.333703][T14618] loop5: detected capacity change from 0 to 128
[  469.461138][T14621] IPv6: addrconf: prefix option has invalid lifetime
[  469.845686][   T51] Bluetooth: hci1: command tx timeout
[  469.902022][T14618] syz.5.2960: attempt to access beyond end of device
[  469.902022][T14618] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128
[  470.793591][T14575] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.827516][T14575] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.879019][T14575] bridge_slave_0: entered allmulticast mode
[  470.916480][T14575] bridge_slave_0: entered promiscuous mode
[  470.980620][T14575] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.046795][T14575] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.087412][T14575] bridge_slave_1: entered allmulticast mode
[  471.153557][T14575] bridge_slave_1: entered promiscuous mode
[  471.520290][T14575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.578229][T14656] loop5: detected capacity change from 0 to 512
[  471.596691][T14575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  471.759816][T14660] sch_tbf: burst 19872 is lower than device lo mtu (32783) !
[  471.931554][   T51] Bluetooth: hci1: command tx timeout
[  472.406333][T14575] team0: Port device team_slave_0 added
[  472.476464][T14575] team0: Port device team_slave_1 added
[  472.568966][T14674] bond1: entered allmulticast mode
[  473.227129][T14575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  473.280165][T14575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.409858][T14575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  473.484519][T14575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  473.518391][T14575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.646886][T14575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.001720][   T51] Bluetooth: hci1: command tx timeout
[  474.163211][ T1327] hsr_slave_0: left promiscuous mode
[  474.183516][ T1327] hsr_slave_1: left promiscuous mode
[  474.211063][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  474.240651][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_0
[  474.262985][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  474.285315][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_1
[  474.308596][ T1327] bridge_slave_1: left allmulticast mode
[  474.345608][ T1327] bridge_slave_1: left promiscuous mode
[  474.364657][ T1327] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.388250][ T1327] bridge_slave_0: left allmulticast mode
[  474.398640][ T1327] bridge_slave_0: left promiscuous mode
[  474.410794][ T1327] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.439814][ T1327] veth1_macvtap: left promiscuous mode
[  474.460595][ T1327] veth0_macvtap: left promiscuous mode
[  474.468962][ T1327] veth1_vlan: left promiscuous mode
[  474.476891][ T1327] veth0_vlan: left promiscuous mode
[  475.365042][T14738] 9pnet_fd: Insufficient options for proto=fd
[  475.737563][T14747] overlayfs: failed to clone lowerpath
[  475.849886][ T1327] team0 (unregistering): Port device team_slave_1 removed
[  475.938862][ T1327] team0 (unregistering): Port device team_slave_0 removed
[  476.009939][ T1327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  476.076574][ T1327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  476.088186][   T51] Bluetooth: hci1: command tx timeout
[  476.690563][ T1327] bond0 (unregistering): Released all slaves
[  476.854946][T14758] 9pnet_fd: Insufficient options for proto=fd
[  476.980744][T14760] 9pnet_fd: Insufficient options for proto=fd
[  477.080652][T14575] hsr_slave_0: entered promiscuous mode
[  477.176312][T14575] hsr_slave_1: entered promiscuous mode
[  477.205442][T14575] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  477.252042][T14575] Cannot create hsr debugfs directory
[  478.012193][T14786] 9pnet_fd: Insufficient options for proto=fd
[  478.226463][T14575] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  478.301703][T14791] 9pnet_fd: Insufficient options for proto=fd
[  478.313257][T14575] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  478.365560][T14575] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  478.485839][T14575] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  478.879270][T14575] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.006300][T14575] 8021q: adding VLAN 0 to HW filter on device team0
[  479.082580][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.089832][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state
[  479.130814][T14814] loop2: detected capacity change from 0 to 128
[  479.199925][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.207147][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state
[  479.359829][T14817] 9pnet_fd: Insufficient options for proto=fd
[  480.250897][T14842] syzkaller0: entered promiscuous mode
[  480.281893][T14842] syzkaller0: entered allmulticast mode
[  480.375508][T14575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.405882][T14850] IPv6: addrconf: prefix option has invalid lifetime
[  481.515619][T14575] veth0_vlan: entered promiscuous mode
[  481.603486][T14575] veth1_vlan: entered promiscuous mode
[  481.766902][T14575] veth0_macvtap: entered promiscuous mode
[  481.820998][T14575] veth1_macvtap: entered promiscuous mode
[  481.870224][T14885] syzkaller0: entered promiscuous mode
[  481.905737][T14885] syzkaller0: entered allmulticast mode
[  481.970148][T14575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  482.046053][T14575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.098630][T14575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  482.139658][T14575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.175849][T14575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  482.213842][T14575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.266138][T14575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  482.439753][T14575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.495050][T14575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.554950][T14575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.617588][T14575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.706813][T14575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  482.816720][T14575] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.863524][T14575] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.906046][T14575] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.948060][T14575] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  483.251836][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.287613][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.392262][T14922] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  483.475419][T14695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.518865][T14695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.769954][T14929] syzkaller0: entered promiscuous mode
[  483.794625][T14929] syzkaller0: entered allmulticast mode
[  485.978378][T14968] loop8: detected capacity change from 0 to 32768
[  485.989795][T14994] loop2: detected capacity change from 0 to 2048
[  486.248360][T15002] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  486.378442][T14968] JBD2: Ignoring recovery information on journal
[  486.667222][T14968] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  487.086130][T14575] ocfs2: Unmounting device (7,8) on (node local)
[  487.218420][T15026] fuse: Bad value for 'fd'
[  487.875923][T15037] syzkaller0: entered promiscuous mode
[  487.926468][T15037] syzkaller0: entered allmulticast mode
[  488.196499][T15043] loop5: detected capacity change from 0 to 512
[  488.317812][T15043] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  488.636678][T15043] EXT4-fs (loop5): 1 orphan inode deleted
[  488.677455][T11980] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  488.700082][T15043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  488.758501][T11980] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1
[  489.049624][T13546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.895719][T15067] fuse: Bad value for 'fd'
[  490.058719][T15047] loop2: detected capacity change from 0 to 32768
[  490.247434][T15047] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  490.323313][T15047] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  490.675107][T15047] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  490.773832][   T56] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  490.822547][   T56] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  490.832944][T15062] loop5: detected capacity change from 0 to 32768
[  490.916397][T15062] JBD2: Ignoring recovery information on journal
[  491.090589][   T56] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 268ms
[  491.155735][T15062] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  491.195109][   T56] gfs2: fsid=syz:syz.0: jid=0: Done
[  491.262415][T15047] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  491.377538][T15047] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  492.682224][T15098] syzkaller0: entered promiscuous mode
[  492.688472][T15098] syzkaller0: entered allmulticast mode
[  493.379270][T15112] fuse: Bad value for 'fd'
[  494.127762][T13546] ocfs2: Unmounting device (7,5) on (node local)
[  494.890540][T15141] syzkaller0: entered promiscuous mode
[  494.953024][T15141] syzkaller0: entered allmulticast mode
[  495.841042][T15154] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  495.900813][T15156] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  497.139021][T15175] syzkaller0: entered promiscuous mode
[  497.164017][T15175] syzkaller0: entered allmulticast mode
[  497.958798][T15191] loop2: detected capacity change from 0 to 128
[  498.032399][T15191] EXT4-fs (loop2): Test dummy encryption mode enabled
[  498.170293][T15191] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  499.096549][   T56] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  499.311658][   T56] usb 6-1: Using ep0 maxpacket: 16
[  499.348067][   T56] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.425933][   T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  499.528327][   T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  499.607718][   T56] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  499.700931][   T56] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  499.817091][   T56] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  499.867300][   T56] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  499.951713][   T56] usb 6-1: Manufacturer: syz
[  500.047067][   T56] usb 6-1: config 0 descriptor??
[  500.547454][T15234] syzkaller0: entered promiscuous mode
[  500.577449][T15221] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  500.682393][   T56] rc_core: IR keymap rc-hauppauge not found
[  500.714340][   T56] Registered IR keymap rc-empty
[  500.736967][T15234] syzkaller0: entered allmulticast mode
[  500.751489][   T56] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  500.851522][   T56] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  500.954500][   T56] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  501.064064][   T56] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input5
[  501.250814][   T56] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  501.382346][   T56] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  501.451498][   T56] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  501.553656][   T56] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  501.661662][   T56] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  501.722555][   T56] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  501.794271][   T56] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  501.847874][T15250] jffs2: notice: (15250) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  501.878929][   T56] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  501.927522][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  501.942148][   T56] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  501.949524][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  502.001787][   T56] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  502.062736][   T56] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  502.145785][   T56] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  502.297729][   T56] usb 6-1: USB disconnect, device number 2
[  503.329984][T14095] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  504.358101][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  504.369677][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  504.379391][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  504.392969][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  504.400514][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  504.409666][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  504.684488][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'.
[  504.768898][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'.
[  504.930961][T15285] syzkaller0: entered promiscuous mode
[  505.080609][T15285] syzkaller0: entered allmulticast mode
[  506.481614][ T5785] Bluetooth: hci2: command tx timeout
[  506.587181][T15320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3145'.
[  506.836032][T15276] chnl_net:caif_netlink_parms(): no params data found
[  507.291474][T15259] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  507.323623][T15276] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.381516][T15276] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.451712][T15276] bridge_slave_0: entered allmulticast mode
[  507.459621][T15276] bridge_slave_0: entered promiscuous mode
[  507.528136][T15259] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  507.561264][T15276] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.582968][T15259] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  507.627825][T15276] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.680383][T15259] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  507.701683][T15276] bridge_slave_1: entered allmulticast mode
[  507.772737][T15276] bridge_slave_1: entered promiscuous mode
[  507.829836][T15259] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  507.888278][T15348] syzkaller0: entered promiscuous mode
[  507.900418][T15259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.938371][T15348] syzkaller0: entered allmulticast mode
[  507.958479][T15259] usb 3-1: Product: syz
[  507.994983][T15259] usb 3-1: Manufacturer: syz
[  507.999627][T15259] usb 3-1: SerialNumber: syz
[  508.150185][T15259] cdc_ncm 3-1:1.0: skipping garbage
[  508.165077][T15276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.500616][T15276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  508.564489][ T5785] Bluetooth: hci2: command tx timeout
[  508.787596][T15276] team0: Port device team_slave_0 added
[  508.855037][T15276] team0: Port device team_slave_1 added
[  509.151607][T15259] cdc_ncm 3-1:1.0: bind() failure
[  509.190438][T15276] batman_adv: batadv0: Adding interface: batadv_slave_0
[  509.250757][T15259] cdc_ncm: probe of 3-1:1.1 failed with error -71
[  509.259277][T15276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.323010][T15259] cdc_mbim: probe of 3-1:1.1 failed with error -71
[  509.380046][T15259] usbtest: probe of 3-1:1.1 failed with error -71
[  509.492508][T15259] usb 3-1: USB disconnect, device number 8
[  509.508731][T15276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  510.900985][ T5785] Bluetooth: hci2: command tx timeout
[  511.872944][T15276] batman_adv: batadv0: Adding interface: batadv_slave_1
[  511.915367][T15276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  512.061084][T15276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  512.107995][T15378] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3155'.
[  512.396676][T15276] hsr_slave_0: entered promiscuous mode
[  512.554770][T15276] hsr_slave_1: entered promiscuous mode
[  512.605126][T15276] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  512.654085][T15276] Cannot create hsr debugfs directory
[  512.961569][ T5785] Bluetooth: hci2: command tx timeout
[  513.031327][T15399] syzkaller0: entered promiscuous mode
[  513.048634][T15399] syzkaller0: entered allmulticast mode
[  513.696848][T15259] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  514.013551][T15418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  514.132081][T15259] usb 6-1: Using ep0 maxpacket: 16
[  514.168548][T15259] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  514.236325][T15259] usb 6-1: config 0 interface 0 has no altsetting 0
[  514.269040][T15259] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  514.319511][T15259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.338603][   T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.384197][T15259] usb 6-1: config 0 descriptor??
[  514.598663][   T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.855743][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  514.984663][   T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.001559][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  515.055027][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  515.111559][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  516.661107][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  516.867046][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  516.942298][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  516.949856][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.049068][T15428] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  517.089834][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.159042][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.222285][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.229372][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.279392][   T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.343782][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.410980][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.474657][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.512062][T15441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3167'.
[  517.532670][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.539915][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.643655][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.650868][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.811695][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.818808][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.937118][T15276] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  517.944274][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  517.997566][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  518.084378][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  518.102467][T15276] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  518.172646][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  518.180193][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  518.285200][T15276] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  518.313308][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  518.360533][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  518.404903][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  518.445178][T15455] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.487345][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  518.533582][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  518.616864][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  518.655554][T15276] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  518.704389][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  518.771216][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  518.822941][T15460] syzkaller0: entered promiscuous mode
[  518.828614][T15460] syzkaller0: entered allmulticast mode
[  518.846497][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  518.905962][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  519.001651][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  519.008805][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  519.127839][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  519.191930][T15259] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[  519.290811][T15259] cypress 0003:04B4:07B1.0001: hidraw0: USB HID v0.05 Device [HID 04b4:07b1] on usb-dummy_hcd.5-1/input0
[  519.377842][T15467] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3174'.
[  519.437911][T15259] usb 6-1: USB disconnect, device number 3
[  519.545621][T15467] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.553734][T15467] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.656599][T15468] fido_id[15468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  520.423044][T15276] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.054095][T15276] 8021q: adding VLAN 0 to HW filter on device team0
[  521.137051][   T28] audit: type=1326 audit(521.068:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.2.3182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08bb9e0d9 code=0x7ffc0000
[  521.427492][T15500] nvmet: adding nsid 1 to subsystem testnqn
[  521.452687][   T28] audit: type=1326 audit(521.068:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.2.3182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08bb9e0d9 code=0x7ffc0000
[  521.514142][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.521675][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.542046][T15500] nvmet: failed to open block device (null): (-22)
[  521.605823][   T28] audit: type=1326 audit(521.068:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.2.3182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08bb9e0d9 code=0x7ffc0000
[  521.641825][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.649204][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.759906][   T28] audit: type=1326 audit(521.068:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.2.3182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08bb9e0d9 code=0x7ffc0000
[  521.928044][   T28] audit: type=1326 audit(521.118:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.2.3182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc08bb9e0d9 code=0x7ffc0000
[  522.092092][   T28] audit: type=1326 audit(521.118:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.2.3182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08bb9e0d9 code=0x7ffc0000
[  522.191638][   T28] audit: type=1326 audit(521.118:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.2.3182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08bb9e0d9 code=0x7ffc0000
[  522.412276][   T28] audit: type=1326 audit(521.118:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.2.3182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08bb9e0d9 code=0x7ffc0000
[  522.557913][   T28] audit: type=1326 audit(521.118:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.2.3182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc08bb9e0d9 code=0x7ffc0000
[  522.729557][   T28] audit: type=1326 audit(521.118:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.2.3182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08bb9e0d9 code=0x7ffc0000
[  523.155797][T15520] loop2: detected capacity change from 0 to 256
[  524.937034][T15520] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  524.953315][T15520] exFAT-fs (loop2): failed to load alloc-bitmap
[  524.959901][T15520] exFAT-fs (loop2): failed to recognize exfat type
[  525.480890][T15276] 8021q: adding VLAN 0 to HW filter on device batadv0
[  526.159470][T15536] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.167006][T15536] bridge0: port 2(bridge_slave_1) entered listening state
[  526.174747][T15536] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.182015][T15536] bridge0: port 1(bridge_slave_0) entered listening state
[  526.413474][   T56] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  526.611476][   T56] usb 3-1: Using ep0 maxpacket: 32
[  527.773243][   T56] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  528.257973][   T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  528.302800][   T56] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  528.359822][   T56] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00
[  528.409031][   T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.474615][   T56] usb 3-1: config 0 descriptor??
[  528.510683][   T61] hsr_slave_0: left promiscuous mode
[  528.549984][   T61] hsr_slave_1: left promiscuous mode
[  528.578739][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  528.617354][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  528.645799][   T61] bridge_slave_1: left allmulticast mode
[  528.667458][   T61] bridge_slave_1: left promiscuous mode
[  528.693480][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.904747][   T56] elecom 0003:056E:011C.0002: unknown main item tag 0x0
[  528.932913][   T61] bridge_slave_0: left allmulticast mode
[  528.938880][   T56] elecom 0003:056E:011C.0002: unknown main item tag 0x4
[  529.245076][   T61] bridge_slave_0: left promiscuous mode
[  529.266787][T13089] IPVS: starting estimator thread 0...
[  529.275790][   T56] elecom 0003:056E:011C.0002: hidraw0: USB HID v0.00 Device [HID 056e:011c] on usb-dummy_hcd.2-1/input0
[  529.290954][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.370348][   T56] usb 3-1: USB disconnect, device number 9
[  529.401978][T15562] IPVS: using max 32 ests per chain, 76800 per kthread
[  529.448338][   T61] veth1_macvtap: left promiscuous mode
[  529.489162][   T61] veth0_macvtap: left promiscuous mode
[  529.621054][T15563] fido_id[15563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  530.433219][   T61] bond3 (unregistering): Released all slaves
[  530.518679][   T61] bond2 (unregistering): Released all slaves
[  530.600500][   T61] bond1 (unregistering): Released all slaves
[  532.107408][   T61] team0 (unregistering): Port device team_slave_1 removed
[  532.299929][   T61] team0 (unregistering): Port device team_slave_0 removed
[  532.461120][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  532.625468][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  533.880468][   T61] bond0 (unregistering): Released all slaves
[  534.023670][T15546] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  534.033019][T15546] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  534.041601][T15546] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[  534.697917][T15276] veth0_vlan: entered promiscuous mode
[  534.797942][T15276] veth1_vlan: entered promiscuous mode
[  534.969408][T15276] veth0_macvtap: entered promiscuous mode
[  535.030459][T15276] veth1_macvtap: entered promiscuous mode
[  535.130114][T15276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  535.214119][T15628] loop2: detected capacity change from 0 to 128
[  535.247230][T15276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.275417][T15628] EXT4-fs (loop2): Test dummy encryption mode enabled
[  535.323947][T15276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  535.355405][T15628] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  535.370574][T15276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.543477][T15276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  535.876356][T15276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.959662][T15276] batman_adv: batadv0: Interface activated: batadv_slave_0
[  536.049012][T15276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.156930][T15276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.156950][T15276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.156962][T15276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.156975][T15276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.156983][T15276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.157989][T15276] batman_adv: batadv0: Interface activated: batadv_slave_1
[  536.178220][T15276] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.178288][T15276] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.178314][T15276] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.178332][T15276] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.303632][T14095] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  536.759023][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.759041][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.798221][T15656] fuse: Bad value for 'group_id'
[  536.846405][T15375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.846424][T15375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.845321][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  540.457464][T15700] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  540.679542][T15704] loop9: detected capacity change from 0 to 512
[  540.728000][T15706] file system registered
[  540.909299][T15704] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  541.093307][T15704] EXT4-fs error (device loop9): ext4_quota_enable:7140: comm syz.9.3228: Bad quota inum: 2, type: 1
[  541.170086][T15704] EXT4-fs warning (device loop9): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[  541.241111][T13546] ffs_data_put(): freeing
[  541.420857][T15276] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  541.687166][T15721] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  541.729753][T15725] fuse: Bad value for 'group_id'
[  542.666220][   T28] kauditd_printk_skb: 86 callbacks suppressed
[  542.666232][   T28] audit: type=1800 audit(542.598:570): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3235" name="attr_allow_any_host" dev="configfs" ino=45040 res=0 errno=0
[  542.727803][T15739] nvmet: failed to open block device (null): (-22)
[  544.237725][T15745] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  544.244799][T15745] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  544.523980][   T28] audit: type=1800 audit(542.648:571): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3235" name="enable" dev="configfs" ino=45041 res=0 errno=0
[  544.671630][T15745] vhci_hcd vhci_hcd.0: Device attached
[  544.720562][T15746] vhci_hcd: connection closed
[  544.744793][ T3457] vhci_hcd: stop threads
[  544.814820][ T3457] vhci_hcd: release socket
[  544.871490][ T3457] vhci_hcd: disconnect device
[  544.913008][T15762] netlink: 'syz.5.3241': attribute type 4 has an invalid length.
[  545.654486][T15776] fuse: Bad value for 'group_id'
[  545.908160][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3244'.
[  546.075642][   T28] audit: type=1800 audit(546.008:572): pid=15784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3246" name="attr_allow_any_host" dev="configfs" ino=45194 res=0 errno=0
[  546.111155][T15784] nvmet: failed to open block device (null): (-22)
[  546.207162][   T28] audit: type=1800 audit(546.038:573): pid=15784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3246" name="enable" dev="configfs" ino=45195 res=0 errno=0
[  547.762912][T15795] hub 8-0:1.0: USB hub found
[  547.769656][T15795] hub 8-0:1.0: 1 port detected
[  547.934521][T15797] loop5: detected capacity change from 0 to 256
[  548.474575][   T28] audit: type=1800 audit(548.408:574): pid=15819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3256" name="attr_allow_any_host" dev="configfs" ino=45296 res=0 errno=0
[  548.508881][T15819] nvmet: failed to open block device (null): (-22)
[  548.617332][   T28] audit: type=1800 audit(548.438:575): pid=15819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3256" name="enable" dev="configfs" ino=45297 res=0 errno=0
[  549.474530][T15845] loop9: detected capacity change from 0 to 16
[  549.486788][T15845] erofs: (device loop9): mounted with root inode @ nid 36.
[  549.519343][ T5785] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  549.569399][T15845] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  549.583654][   T28] audit: type=1800 audit(549.518:576): pid=15845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3255" name="file2" dev="loop9" ino=89 res=0 errno=0
[  551.493175][T15849] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  551.501844][T15849] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  551.510398][T15849] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  551.584798][T15259] IPVS: starting estimator thread 0...
[  551.711549][T15854] IPVS: using max 32 ests per chain, 76800 per kthread
[  551.877673][T15834] loop5: detected capacity change from 0 to 32768
[  551.978266][T15834] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR
[  551.978742][T15834] (syz.5.3260,15834,0):ocfs2_initialize_super:2283 ERROR: status = -12
[  552.147676][T15834] (syz.5.3260,15834,0):ocfs2_fill_super:1178 ERROR: status = -12
[  552.734705][T15866] netlink: 'syz.2.3265': attribute type 10 has an invalid length.
[  552.742844][T15866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3265'.
[  552.806065][T15866] team0: Port device geneve0 added
[  552.876377][   T28] audit: type=1800 audit(552.808:577): pid=15870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3266" name="attr_allow_any_host" dev="configfs" ino=45460 res=0 errno=0
[  552.909917][T15870] nvmet: failed to open block device (null): (-22)
[  553.025319][   T28] audit: type=1800 audit(552.838:578): pid=15870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3266" name="enable" dev="configfs" ino=45461 res=0 errno=0
[  553.080647][T15874] loop5: detected capacity change from 0 to 512
[  553.312727][T15874] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.3267: bg 0: block 4: invalid block bitmap
[  553.504243][T15881] overlayfs: conflicting lowerdir path
[  554.822951][T15874] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  554.915780][T15874] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3267: invalid indirect mapped block 1 (level 1)
[  556.322620][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  556.332194][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  556.611475][T15888] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  556.618114][T15888] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  556.671234][T15874] EXT4-fs (loop5): 1 truncate cleaned up
[  556.726305][T15874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  556.783080][T15888] vhci_hcd vhci_hcd.0: Device attached
[  556.833355][T15889] vhci_hcd: connection closed
[  556.836031][ T1120] vhci_hcd: stop threads
[  556.911834][ T1120] vhci_hcd: release socket
[  556.953650][ T1120] vhci_hcd: disconnect device
[  556.965720][   T42] rpcbind: server 127.0.0.1 not responding, timed out
[  557.016518][T13546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  557.818968][   T28] audit: type=1800 audit(557.748:579): pid=15913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3276" name="attr_allow_any_host" dev="configfs" ino=45561 res=0 errno=0
[  557.881648][T15913] nvmet: failed to open block device (null): (-22)
[  557.993008][   T28] audit: type=1800 audit(557.788:580): pid=15913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3276" name="enable" dev="configfs" ino=45562 res=0 errno=0
[  558.171642][   T28] audit: type=1326 audit(557.908:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.5.3277" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42d39e0d9 code=0x7ffc0000
[  558.263581][T15921] overlayfs: conflicting lowerdir path
[  558.342173][   T28] audit: type=1326 audit(557.908:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.5.3277" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42d39e0d9 code=0x7ffc0000
[  558.551964][   T28] audit: type=1326 audit(557.908:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.5.3277" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42d39e0d9 code=0x7ffc0000
[  558.735155][   T28] audit: type=1326 audit(557.908:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.5.3277" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42d39e0d9 code=0x7ffc0000
[  559.077471][T15930] loop8: detected capacity change from 0 to 32768
[  559.106058][T15930] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.3282 (15930)
[  559.147510][T15930] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  559.158102][T15930] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[  559.168276][T15930] BTRFS info (device loop8): use zlib compression, level 3
[  559.175674][T15930] BTRFS info (device loop8): turning on sync discard
[  559.182417][T15930] BTRFS info (device loop8): using free space tree
[  559.206921][   T28] audit: type=1326 audit(557.918:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.5.3277" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fb42d39e0d9 code=0x7ffc0000
[  559.276836][T15911] loop2: detected capacity change from 0 to 32768
[  559.401478][T15911] JBD2: Ignoring recovery information on journal
[  559.408861][   T28] audit: type=1326 audit(557.918:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.5.3277" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42d39e0d9 code=0x7ffc0000
[  559.517110][T15930] BTRFS info (device loop8): enabling ssd optimizations
[  559.624795][T15911] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  559.681577][   T28] audit: type=1326 audit(557.918:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.5.3277" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42d39e0d9 code=0x7ffc0000
[  561.148820][   T28] audit: type=1326 audit(557.918:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.5.3277" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42d39e0d9 code=0x7ffc0000
[  561.365445][T14575] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  561.422524][T14095] ocfs2: Unmounting device (7,2) on (node local)
[  561.884643][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3286'.
[  561.935265][T15978] overlayfs: conflicting lowerdir path
[  562.008581][T15976] gretap0: entered promiscuous mode
[  562.584738][T15986] loop5: detected capacity change from 0 to 32768
[  562.691877][T15986] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  562.926462][T15986] XFS (loop5): Ending clean mount
[  562.941782][T15986] XFS (loop5): Quotacheck needed: Please wait.
[  563.546108][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  563.560389][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  563.603428][T15986] XFS (loop5): Quotacheck: Done.
[  564.087575][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  564.087589][   T28] audit: type=1800 audit(563.948:596): pid=16011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3290" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4428 res=0 errno=0
[  564.396538][T13546] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  565.220461][T16032] overlayfs: conflicting lowerdir path
[  565.523041][T16039] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  565.535353][T16039] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  565.543866][T16039] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  565.554157][T16039] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  565.566308][T16039] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  565.577059][T16039] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  565.606174][T16039] Bluetooth: hci3: command 0x0406 tx timeout
[  565.634482][T16042] loop2: detected capacity change from 0 to 256
[  565.680182][T16017] loop8: detected capacity change from 0 to 32768
[  565.736546][T16042] exfat: Deprecated parameter 'utf8'
[  565.890784][T16042] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  565.979331][T16017] JBD2: Ignoring recovery information on journal
[  566.251437][T16017] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  567.040294][T16036] chnl_net:caif_netlink_parms(): no params data found
[  567.513793][T14575] ocfs2: Unmounting device (7,8) on (node local)
[  567.685703][ T5785] Bluetooth: hci4: command tx timeout
[  569.718236][T16036] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.762093][ T5785] Bluetooth: hci4: command tx timeout
[  569.769779][T16036] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.854049][T16036] bridge_slave_0: entered allmulticast mode
[  569.891651][T16036] bridge_slave_0: entered promiscuous mode
[  570.022606][T16036] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.029874][T16036] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.105773][T16093] overlayfs: conflicting lowerdir path
[  570.113009][T16036] bridge_slave_1: entered allmulticast mode
[  570.147820][T16036] bridge_slave_1: entered promiscuous mode
[  570.508984][ T1327] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.736374][T16105] binder_alloc: 16103: binder_alloc_buf, no vma
[  570.863992][ T1327] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.947813][T16036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  571.003860][T16036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.051643][    T8] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  571.093507][   T28] audit: type=1800 audit(571.028:597): pid=16114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3315" name="enable" dev="configfs" ino=46046 res=0 errno=0
[  571.122344][T16114] nvmet: failed to open block device (null): (-22)
[  571.187261][ T1327] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.272143][    T8] usb 3-1: not running at top speed; connect to a high speed hub
[  571.313961][    T8] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping
[  571.396061][    T8] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  571.430798][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.447511][ T1327] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.488496][    T8] gspca_main: spca501-2.14.0 probing 0000:0000
[  571.554606][T16036] team0: Port device team_slave_0 added
[  571.586296][T16036] team0: Port device team_slave_1 added
[  571.614305][T13089] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  571.724018][T16036] batman_adv: batadv0: Adding interface: batadv_slave_0
[  571.777532][T16036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  571.845038][T13089] usb 6-1: Using ep0 maxpacket: 32
[  571.854723][ T5785] Bluetooth: hci4: command tx timeout
[  571.880255][T13089] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  572.057833][T13089] usb 6-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping
[  572.077729][T16036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  573.129134][    T8] gspca_spca501: reg write: error -110
[  573.186102][    T8] spca501 3-1:1.0: Reg write failed for 0x02,0xa048,0x00
[  573.204068][T13089] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  573.232398][T16036] batman_adv: batadv0: Adding interface: batadv_slave_1
[  573.244987][    T8] spca501: probe of 3-1:1.0 failed with error -22
[  573.276581][T16036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.305609][    T8] usb 3-1: Found UVC 1.00 device <unnamed> (0000:0000)
[  573.333211][T13089] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  573.357377][    T8] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  573.385613][T13089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.416688][T13089] usb 6-1: Product: syz
[  573.421076][    T8] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[  573.441201][T13089] usb 6-1: Manufacturer: syz
[  573.453937][T16036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  573.485500][    T8] uvcvideo 3-1:1.1: Failed to initialize the device (-71).
[  573.493292][T13089] usb 6-1: SerialNumber: syz
[  573.536992][T13089] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  573.641627][    T8] usb 3-1: USB disconnect, device number 10
[  573.665240][T13089] imon 6-1:155.0: unable to initialize intf0, err -19
[  573.726873][T13089] imon:imon_probe: failed to initialize context!
[  573.786384][T13089] imon 6-1:155.0: unable to register, err -19
[  573.879324][T16140] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3322'.
[  573.901778][T16140] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3322'.
[  573.937994][ T5785] Bluetooth: hci4: command tx timeout
[  574.008373][T16036] hsr_slave_0: entered promiscuous mode
[  574.088213][T16036] hsr_slave_1: entered promiscuous mode
[  574.135877][T16036] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  574.174624][T16036] Cannot create hsr debugfs directory
[  574.498077][   T28] audit: type=1800 audit(574.428:598): pid=16154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3325" name="enable" dev="configfs" ino=46277 res=0 errno=0
[  574.536335][T16154] nvmet: failed to open block device (null): (-22)
[  575.131236][T16146] loop2: detected capacity change from 0 to 32768
[  575.202055][T16146] JBD2: Ignoring recovery information on journal
[  575.364508][T16146] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  575.699086][   T56] usb 6-1: USB disconnect, device number 4
[  576.644958][T14095] ocfs2: Unmounting device (7,2) on (node local)
[  576.985023][T16184] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3331'.
[  577.029440][T16184] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3331'.
[  577.378431][T16196] loop5: detected capacity change from 0 to 512
[  577.413485][T16196] EXT4-fs: Ignoring removed bh option
[  577.468947][T16196] EXT4-fs (loop5): invalid first ino: 0
[  577.649472][T16194] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3333'.
[  578.131590][   T56] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  578.356047][   T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  578.381710][    T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  578.399375][   T56] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  578.458931][   T56] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  578.499846][   T56] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  578.580110][ T1327] hsr_slave_0: left promiscuous mode
[  578.601678][   T56] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  578.632186][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  578.649207][   T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.671567][ T1327] hsr_slave_1: left promiscuous mode
[  578.677950][    T8] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  578.697453][   T56] usb 3-1: Product: syz
[  578.702907][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  578.710337][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_0
[  578.738105][   T56] usb 3-1: Manufacturer: syz
[  578.759780][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.769602][T16199] loop5: detected capacity change from 0 to 40427
[  578.778795][   T56] usb 3-1: SerialNumber: syz
[  578.833061][    T8] usb 9-1: config 0 descriptor??
[  578.851171][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  578.924732][T16199] F2FS-fs (loop5): invalid crc value
[  578.932546][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_1
[  579.009243][T16199] F2FS-fs (loop5): Found nat_bits in checkpoint
[  579.024117][ T1327] bridge_slave_1: left allmulticast mode
[  579.051596][   T56] usb 3-1: usb_control_msg returned -71
[  579.073038][    T8] usbhid 9-1:0.0: can't add hid device: -71
[  579.079074][    T8] usbhid: probe of 9-1:0.0 failed with error -71
[  579.102103][ T1327] bridge_slave_1: left promiscuous mode
[  579.116985][   T56] usbtmc 3-1:1.0: can't read capabilities
[  579.155841][ T1327] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.208779][    T8] usb 9-1: USB disconnect, device number 2
[  579.275282][   T56] usb 3-1: USB disconnect, device number 11
[  579.388099][T16199] F2FS-fs (loop5): Start checkpoint disabled!
[  579.426355][ T1327] bridge_slave_0: left allmulticast mode
[  579.472562][ T1327] bridge_slave_0: left promiscuous mode
[  579.500352][ T1327] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.526263][T16199] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  579.651492][    T8] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  579.701657][   T56] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  579.814407][ T1327] veth1_macvtap: left promiscuous mode
[  579.841884][ T1327] veth0_macvtap: left promiscuous mode
[  579.871695][ T1327] veth1_vlan: left promiscuous mode
[  579.887512][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  579.922333][ T1327] veth0_vlan: left promiscuous mode
[  579.939968][   T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  579.964707][    T8] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  579.991791][   T56] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  580.015220][ T5785] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  580.021578][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.055708][   T56] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  580.107855][   T56] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  580.154803][    T8] usb 9-1: config 0 descriptor??
[  580.254274][   T56] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  580.294896][   T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.349726][   T56] usb 3-1: Product: syz
[  580.385823][   T56] usb 3-1: Manufacturer: syz
[  580.390566][   T56] usb 3-1: SerialNumber: syz
[  580.647928][ T1120] kworker/u4:5: attempt to access beyond end of device
[  580.647928][ T1120] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  580.698319][   T56] usb 3-1: usb_control_msg returned -32
[  580.715255][   T56] usbtmc 3-1:1.0: can't read capabilities
[  580.735276][ T1120] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  580.784858][ T1120] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  580.837171][T16203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  580.883517][T16203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.053039][    T8] aiptek 9-1:0.0: Aiptek using 400 ms programming speed
[  581.088033][T16222] usbtmc 3-1:1.0: usb_control_msg returned -32
[  581.095508][    T8] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input6
[  581.139899][   T56] usb 3-1: USB disconnect, device number 12
[  581.506615][   T56] usb 9-1: USB disconnect, device number 3
[  581.506654][    C0] aiptek 9-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  583.068841][ T1327] team0 (unregistering): Port device team_slave_1 removed
[  583.218431][ T1327] team0 (unregistering): Port device team_slave_0 removed
[  583.335866][ T1327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  583.477416][ T1327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  584.558188][T16247] loop8: detected capacity change from 0 to 32768
[  584.596243][T16247] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  584.627986][ T1327] bond0 (unregistering): Released all slaves
[  584.649198][T16247] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  584.764898][T16247] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  584.813345][T16121] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  584.836097][T16121] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  584.979817][T16232] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3341'.
[  585.000048][T16121] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 163ms
[  585.053749][T16232] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3341'.
[  585.118622][T16121] gfs2: fsid=syz:syz.0: jid=0: Done
[  585.158622][T16247] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  585.484213][T16036] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  585.592954][T16036] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  585.744989][T16036] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  585.815444][T16263] loop2: detected capacity change from 0 to 512
[  585.872467][T16036] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  586.403732][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  586.411054][    C0] bridge0: topology change detected, propagating
[  586.417977][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  586.425323][    C0] bridge0: topology change detected, propagating
[  586.654624][T16263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  590.029262][T16036] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.150269][T14095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.184306][T16036] 8021q: adding VLAN 0 to HW filter on device team0
[  590.346518][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.353787][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state
[  590.462196][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.469457][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state
[  590.490963][   T28] audit: type=1800 audit(590.408:599): pid=16282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3353" name="attr_allow_any_host" dev="configfs" ino=47023 res=0 errno=0
[  590.720141][T16036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  590.935824][T16036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  591.224566][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3356'.
[  591.248680][ T5785] Bluetooth: hci1: command 0x0406 tx timeout
[  591.285644][T16287] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3355'.
[  591.328607][T16287] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3355'.
[  592.709822][T16036] 8021q: adding VLAN 0 to HW filter on device batadv0
[  592.852792][ T3457] Bluetooth: Error in BCSP hdr checksum
[  592.938562][T16036] veth0_vlan: entered promiscuous mode
[  593.007350][T16036] veth1_vlan: entered promiscuous mode
[  593.139182][T16036] veth0_macvtap: entered promiscuous mode
[  593.223100][T16036] veth1_macvtap: entered promiscuous mode
[  593.475266][T16036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.941077][T16043] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  595.960862][T16036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.465258][T16036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  597.537563][T16036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.570270][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3367'.
[  597.603910][T16036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  597.681486][T16036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.751024][T16036] batman_adv: batadv0: Interface activated: batadv_slave_0
[  597.880216][T16036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  597.953337][T16036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.007489][T16036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.049097][T16036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.094292][T16036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.135676][T16036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.194996][T16036] batman_adv: batadv0: Interface activated: batadv_slave_1
[  598.260751][T16036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  598.314719][T16036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  598.396769][T16036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  598.446163][T16036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  598.583558][T16366] bond2: entered allmulticast mode
[  598.698287][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3372'.
[  598.764329][T16374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3372'.
[  599.179273][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.389482][T16386] loop2: detected capacity change from 0 to 32768
[  599.422790][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.438177][T16386] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3376 (16386)
[  599.477097][T16386] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  599.487453][T16386] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  599.496291][T16386] BTRFS info (device loop2): use zlib compression, level 3
[  599.503552][T16386] BTRFS info (device loop2): turning on sync discard
[  599.510353][T16386] BTRFS info (device loop2): using free space tree
[  599.568210][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.645816][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.714199][T16386] BTRFS info (device loop2): enabling ssd optimizations
[  600.623336][   T28] audit: type=1800 audit(600.238:600): pid=16412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3376" name="file1" dev="loop2" ino=260 res=0 errno=0
[  600.820181][T14095] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  601.639812][   T28] audit: type=1800 audit(601.568:601): pid=16424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3379" name="addr_trtype" dev="configfs" ino=47828 res=0 errno=0
[  603.774636][T16438] loop2: detected capacity change from 0 to 256
[  603.854547][T16430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  603.925503][T16438] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  605.025121][T16453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3384'.
[  605.359865][T16457] loop0: detected capacity change from 0 to 512
[  605.531463][T16457] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  605.679897][T16457] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  605.796175][T16457] EXT4-fs (loop0): 1 truncate cleaned up
[  605.863751][T16457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  606.222614][T16036] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.458677][T16530] loop8: detected capacity change from 0 to 128
[  611.516141][T16530] EXT4-fs (loop8): Test dummy encryption mode enabled
[  611.568887][T16530] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  612.672490][T14575] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  613.662645][T16576] No such timeout policy "syz1"
[  615.504871][T16576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3416'.
[  618.666159][T16618] loop5: detected capacity change from 0 to 32768
[  618.756208][T16618] JBD2: Ignoring recovery information on journal
[  619.025653][T16618] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  621.317294][T13546] ocfs2: Unmounting device (7,5) on (node local)
[  623.077083][ T5785] Bluetooth: hci1: unexpected event for opcode 0x2023
[  624.808514][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  624.831560][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  626.449268][ T1327] rpcbind: server 127.0.0.1 not responding, timed out
[  626.916592][T16755] gadgetfs: bound to dummy_udc driver
[  626.964546][   T28] audit: type=1800 audit(626.898:602): pid=16756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3459" name="ep1in-bulk" dev="gadgetfs" ino=48764 res=0 errno=0
[  627.127779][ T5785] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  627.137787][ T5785] Bluetooth: hci1: Injecting HCI hardware error event
[  627.148356][T16043] Bluetooth: hci1: hardware error 0x00
[  627.404118][T16762] syz_tun: entered allmulticast mode
[  628.298330][T16759] syz_tun: left allmulticast mode
[  628.648708][T16777] fuse: Bad value for 'fd'
[  628.962729][T16782] loop8: detected capacity change from 0 to 32768
[  629.065496][T16782] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  629.438440][T16043] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  630.654201][   T28] audit: type=1800 audit(630.578:603): pid=16790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3466" name="file1" dev="loop8" ino=17059 res=0 errno=0
[  630.780290][T16782] syz.8.3466 (16782) used greatest stack depth: 18840 bytes left
[  631.076780][T14575] ocfs2: Unmounting device (7,8) on (node local)
[  633.049969][T16816] fuse: Unknown parameter 'use00000000000000000000'
[  635.258823][T16836] loop8: detected capacity change from 0 to 32768
[  635.281499][T16836] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.3482 (16836)
[  635.297599][T16836] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  635.307926][T16836] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[  635.316919][T16836] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  635.326335][T16836] BTRFS info (device loop8): use zstd compression, level 3
[  635.333620][T16836] BTRFS info (device loop8): force clearing of disk cache
[  635.340839][T16836] BTRFS info (device loop8): enabling disk space caching
[  635.347933][T16836] BTRFS info (device loop8): disk space caching is enabled
[  635.427835][T16850] overlayfs: missing 'lowerdir'
[  635.445892][T16836] BTRFS info (device loop8): enabling ssd optimizations
[  635.453013][T16836] BTRFS info (device loop8): auto enabling async discard
[  635.467546][T16836] BTRFS info (device loop8): rebuilding free space tree
[  635.535114][T16854] futex_wake_op: syz.2.3483 tries to shift op by 144; fix this program
[  635.550537][T16836] BTRFS info (device loop8): disabling free space tree
[  635.558572][T16836] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  635.568834][T16836] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  635.714769][T16854] futex_wake_op: syz.2.3483 tries to shift op by 144; fix this program
[  639.409057][T14575] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  639.478137][T16870] fuse: Unknown parameter 'user_i00000000000000000000'
[  640.364397][T16889] loop8: detected capacity change from 0 to 64
[  641.220043][T16902] syzkaller0: entered promiscuous mode
[  641.275587][T16902] syzkaller0: entered allmulticast mode
[  644.796332][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3507'.
[  644.807475][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3507'.
[  646.297130][T16963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  646.362143][T16961] syzkaller0: entered promiscuous mode
[  646.433695][T16961] syzkaller0: entered allmulticast mode
[  648.159101][T17003] Bluetooth: ISO socket layer initialized
[  651.624363][T17053] fuse: Unknown parameter '0x0000000000000003'
[  652.181651][   T56] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  652.393180][   T56] usb 9-1: config 4 has an invalid interface number: 44 but max is 0
[  652.433945][   T56] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  652.478296][   T56] usb 9-1: config 4 has no interface number 0
[  652.498346][   T56] usb 9-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  652.550026][   T56] usb 9-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  652.579676][   T56] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.613326][   T56] usb 9-1: Product: syz
[  652.632263][   T56] usb 9-1: Manufacturer: syz
[  652.654978][   T56] usb 9-1: SerialNumber: syz
[  653.100836][   T56] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  653.188756][   T56] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  653.280114][   T56] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  653.328871][   T56] usb 9-1: media controller created
[  653.406425][   T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  653.742830][   T56] DVB: Unable to find symbol dib7000p_attach()
[  653.774807][   T56] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  654.041631][   T56] rc_core: IR keymap rc-dib0700-rc5 not found
[  654.068249][   T56] Registered IR keymap rc-empty
[  654.103638][   T56] dvb-usb: could not initialize remote control.
[  654.161881][   T56] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  654.444242][   T56] usb 9-1: USB disconnect, device number 4
[  654.578694][   T56] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  656.972546][T17122] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  660.081647][T17153] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  661.053114][T17160] CIFS: Attempting to mount //127.0.0.1/share
[  661.095925][T14695] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.202058][T17160] CIFS: VFS: Error connecting to socket. Aborting operation.
[  661.328602][T17160] CIFS: VFS: cifs_mount failed w/return code = -111
[  661.417269][T14695] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.685501][T17171] fuse: Unknown parameter '0xffffffffffffffff'
[  661.909345][T14695] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.954394][T17176] fuse: Bad value for 'fd'
[  662.133870][T14695] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.714692][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  662.731124][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  662.741977][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  662.749680][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  663.783991][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  663.791496][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  664.002483][T17196] futex_wake_op: syz.5.3575 tries to shift op by 144; fix this program
[  664.016735][T17196] loop5: detected capacity change from 0 to 128
[  664.077712][T17196] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  664.333435][ T1120] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  666.781625][ T5785] Bluetooth: hci2: command tx timeout
[  666.993750][T17217] fuse: Bad value for 'fd'
[  666.998930][T17216] fuse: Unknown parameter '0x0000000000000004'
[  668.198052][T17192] chnl_net:caif_netlink_parms(): no params data found
[  668.300857][T17223] loop5: detected capacity change from 0 to 32768
[  668.427328][T17223] JBD2: Ignoring recovery information on journal
[  668.635687][T17223] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  668.804926][ T5785] Bluetooth: hci2: command tx timeout
[  668.856312][T17254] fuse: Bad value for 'fd'
[  668.914161][T14695] hsr_slave_0: left promiscuous mode
[  668.971432][T14695] hsr_slave_1: left promiscuous mode
[  668.995961][T14695] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  669.043425][T14695] batman_adv: batadv0: Removing interface: batadv_slave_0
[  669.250281][T14695] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  669.272710][T17257] fuse: Unknown parameter '0xffffffffffffffff'
[  669.283413][T14695] batman_adv: batadv0: Removing interface: batadv_slave_1
[  669.656985][T14695] bridge_slave_1: left allmulticast mode
[  669.685759][T14695] bridge_slave_1: left promiscuous mode
[  669.703136][T14695] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.725213][T14695] bridge_slave_0: left allmulticast mode
[  669.810969][T14695] bridge_slave_0: left promiscuous mode
[  669.840140][T14695] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.873168][T13546] ocfs2: Unmounting device (7,5) on (node local)
[  669.984769][T14695] veth1_macvtap: left promiscuous mode
[  669.990589][T14695] veth0_macvtap: left promiscuous mode
[  670.031661][T14695] veth1_vlan: left promiscuous mode
[  670.037027][T14695] veth0_vlan: left promiscuous mode
[  670.356740][T14695] bond2 (unregistering): Released all slaves
[  670.429655][T14695] bond1 (unregistering): Released all slaves
[  670.765691][T14695] team0 (unregistering): Port device geneve0 removed
[  670.884138][ T5785] Bluetooth: hci2: command tx timeout
[  671.003790][T17271] loop5: detected capacity change from 0 to 256
[  671.120883][T17271] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  672.965209][ T5785] Bluetooth: hci2: command tx timeout
[  673.040462][T14695] team0 (unregistering): Port device team_slave_1 removed
[  673.187927][T14695] team0 (unregistering): Port device team_slave_0 removed
[  673.329116][T14695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  673.439490][T14695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  674.046521][T14695] bond0 (unregistering): Released all slaves
[  674.255545][T17277] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3596'.
[  674.267303][T17277] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  674.409153][T17192] bridge0: port 1(bridge_slave_0) entered blocking state
[  674.592873][T17192] bridge0: port 1(bridge_slave_0) entered disabled state
[  674.600190][T17192] bridge_slave_0: entered allmulticast mode
[  674.681221][T17192] bridge_slave_0: entered promiscuous mode
[  674.809804][T17192] bridge0: port 2(bridge_slave_1) entered blocking state
[  674.875954][T17192] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.921997][T17192] bridge_slave_1: entered allmulticast mode
[  674.994746][T17192] bridge_slave_1: entered promiscuous mode
[  675.146453][T17192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  675.256076][T17192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  675.440442][T17192] team0: Port device team_slave_0 added
[  675.533581][T17192] team0: Port device team_slave_1 added
[  675.692594][T17192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  675.730709][T17192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  675.956536][T17192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  676.275155][T17192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  676.314514][T17192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  676.567173][T17192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  676.830600][T17192] hsr_slave_0: entered promiscuous mode
[  676.898804][T17192] hsr_slave_1: entered promiscuous mode
[  676.961666][T17192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  676.992800][T17192] Cannot create hsr debugfs directory
[  677.323934][T14695] IPVS: stop unused estimator thread 0...
[  677.993054][T17370] loop8: detected capacity change from 0 to 1024
[  680.614013][T17192] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  680.664913][T17192] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  680.711015][T17192] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  680.776436][T17192] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  681.063925][T17192] 8021q: adding VLAN 0 to HW filter on device bond0
[  681.079098][T17411] loop5: detected capacity change from 0 to 32768
[  681.131188][T17411] JBD2: Ignoring recovery information on journal
[  681.176936][T17192] 8021q: adding VLAN 0 to HW filter on device team0
[  681.289966][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.297197][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  681.354978][T17411] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  681.422004][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.429124][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  682.335430][T13546] ocfs2: Unmounting device (7,5) on (node local)
[  682.965698][T17192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  684.013811][T17192] veth0_vlan: entered promiscuous mode
[  684.098789][T17192] veth1_vlan: entered promiscuous mode
[  684.219341][T17192] veth0_macvtap: entered promiscuous mode
[  684.287355][T17192] veth1_macvtap: entered promiscuous mode
[  684.393573][T17192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.471470][T17192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.532445][T17192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.601454][T17192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.681692][T17192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.737621][T17192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.798138][T17192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  684.875509][T17192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  684.943811][T17192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.998011][T17192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  685.040967][T17192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.093136][T17192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  685.146111][T17192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.176030][T17473] loop8: detected capacity change from 0 to 32768
[  685.236969][T17192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  685.265528][T17473] JBD2: Ignoring recovery information on journal
[  685.339582][T17192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  685.399195][T17192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  685.439739][T17473] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  685.462478][T17192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  685.508260][T17192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  685.758260][T17486] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  686.045464][T17486] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  686.255880][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  686.268865][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  686.302416][T17486] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  686.324955][T14575] ocfs2: Unmounting device (7,8) on (node local)
[  686.352229][T17486] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  686.453331][T17486] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  686.459325][T17486] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  686.532915][T17486] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  686.721075][T14695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.794234][T14695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.930758][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.971186][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.767213][T16043] Bluetooth: hci0: command 0x0406 tx timeout
[  688.321685][T16043] Bluetooth: hci4: command 0x0406 tx timeout
[  688.519268][T16043] Bluetooth: hci2: command 0x0c1a tx timeout
[  689.246605][T17538] CIFS: Attempting to mount //127.0.0.1/share
[  689.254677][T17538] CIFS: VFS: Error connecting to socket. Aborting operation.
[  689.262382][T17538] CIFS: VFS: cifs_mount failed w/return code = -111
[  689.499532][T17542] No such timeout policy "syz1"
[  689.843848][T16043] Bluetooth: hci0: command 0x0406 tx timeout
[  690.357728][T17537] loop8: detected capacity change from 0 to 32768
[  690.402691][T16043] Bluetooth: hci4: command 0x0406 tx timeout
[  690.440231][T17537] JBD2: Ignoring recovery information on journal
[  690.562263][T16043] Bluetooth: hci2: command 0x0c1a tx timeout
[  690.582524][T17537] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  690.671121][T17532] loop1: detected capacity change from 0 to 32768
[  690.947101][T17532] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  691.255851][T17532] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  691.562083][T17532] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  691.586461][T14575] ocfs2: Unmounting device (7,8) on (node local)
[  691.619898][ T5818] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  691.668766][ T5818] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  691.894315][ T5818] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 225ms
[  691.950823][ T5818] gfs2: fsid=syz:syz.0: jid=0: Done
[  691.986657][T17532] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  692.047067][T17532] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  692.100284][T17582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3676'.
[  692.175738][T17582] netlink: 'syz.0.3676': attribute type 21 has an invalid length.
[  692.647769][T16043] Bluetooth: hci2: command 0x0c1a tx timeout
[  692.844417][T17596] loop8: detected capacity change from 0 to 256
[  699.406565][T17653] loop8: detected capacity change from 0 to 128
[  699.441784][T17653] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  699.461902][T17653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  700.003201][T17664] netlink: 564 bytes leftover after parsing attributes in process `syz.1.3701'.
[  703.211688][ T5785] Bluetooth: hci2: command 0x0c1a tx timeout
[  705.961533][T13089] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  706.183570][T13089] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  706.228729][T13089] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  706.301721][T13089] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  706.398509][T13089] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  706.448757][T13089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.506170][T13089] usb 6-1: Product: syz
[  706.528144][T13089] usb 6-1: Manufacturer: syz
[  706.573203][T13089] usb 6-1: SerialNumber: syz
[  706.630763][T13089] hub 6-1:1.0: bad descriptor, ignoring hub
[  706.677486][T13089] hub: probe of 6-1:1.0 failed with error -5
[  706.897436][T17734] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  706.992140][T13089] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  707.426376][T17749] sctp: [Deprecated]: syz.8.3722 (pid 17749) Use of int in max_burst socket option deprecated.
[  707.426376][T17749] Use struct sctp_assoc_value instead
[  707.462216][T13089] usb 6-1: reset high-speed USB device number 5 using dummy_hcd
[  707.521241][T13089] usb 6-1: device reset changed ep0 maxpacket size!
[  707.613524][T13089] usb 6-1: USB disconnect, device number 5
[  707.682700][T13089] usblp0: removed
[  710.362830][T17792] kvm: emulating exchange as write
[  712.948936][T17886] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3765'.
[  714.356792][T17926] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3777'.
[  714.493662][T17910] loop1: detected capacity change from 0 to 32768
[  714.606613][T17910] JBD2: Ignoring recovery information on journal
[  714.764535][T17910] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  715.526852][T17192] ocfs2: Unmounting device (7,1) on (node local)
[  716.526123][T17971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3787'.
[  719.627820][T18053] fuse: Bad value for 'fd'
[  720.689324][T18079] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3819'.
[  720.992200][T18092] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3823'.
[  721.276443][T18100] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3825'.
[  721.328254][T18100] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3825'.
[  722.291006][T18118] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3831'.
[  722.581759][T18126] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3834'.
[  722.682489][T18126] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3834'.
[  725.169024][   T28] audit: type=1326 audit(725.098:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.8.3850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7c99e0d9 code=0x7ffc0000
[  725.306984][   T28] audit: type=1326 audit(725.128:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.8.3850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7c99e0d9 code=0x7ffc0000
[  725.397055][   T28] audit: type=1326 audit(725.128:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.8.3850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7c99e0d9 code=0x7ffc0000
[  725.539734][   T28] audit: type=1326 audit(725.128:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.8.3850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7c99e0d9 code=0x7ffc0000
[  725.680549][   T28] audit: type=1326 audit(725.138:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.8.3850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f9d7c99e0d9 code=0x7ffc0000
[  725.803117][   T28] audit: type=1326 audit(725.178:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.8.3850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7c99e0d9 code=0x7ffc0000
[  725.993730][   T28] audit: type=1326 audit(725.178:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.8.3850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7c99e0d9 code=0x7ffc0000
[  726.121678][   T28] audit: type=1326 audit(725.178:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.8.3850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d7c99de42 code=0x7ffc0000
[  726.242755][   T28] audit: type=1326 audit(725.178:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.8.3850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9d7c99ded7 code=0x7ffc0000
[  726.366320][   T28] audit: type=1326 audit(725.178:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18195 comm="syz.8.3850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9d7c95add1 code=0x7ffc0000
[  727.780073][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3867'.
[  727.886486][T18263] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3868'.
[  730.459285][T18345] netlink: 'syz.0.3894': attribute type 15 has an invalid length.
[  730.532690][T18347] sctp: [Deprecated]: syz.0.3894 (pid 18347) Use of int in maxseg socket option.
[  730.532690][T18347] Use struct sctp_assoc_value instead
[  732.075636][T18394] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  733.200053][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3925'.
[  733.284063][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3925'.
[  734.314704][T18474] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3938'.
[  734.395124][T18474] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3938'.
[  737.489412][T18544] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3956'.
[  739.146349][T18592] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  739.277439][T18599] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0
[  741.791419][ T5778] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  742.016482][ T5778] usb 6-1: not running at top speed; connect to a high speed hub
[  742.067062][ T5778] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  742.125500][ T5778] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30768, setting to 64
[  742.201517][ T5778] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  742.270715][ T5778] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  742.320155][ T5778] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.378402][T18637] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  742.431916][ T5778] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[  742.502957][ T5778] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[  744.108805][T18671] futex_wake_op: syz.8.3995 tries to shift op by 144; fix this program
[  744.125395][T18671] loop8: detected capacity change from 0 to 128
[  744.183374][T18671] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  744.207113][ T5778] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[  744.282379][ T5778] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  744.397493][T15375] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  744.435882][ T5778] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[  744.508799][ T5778] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[  744.562887][ T5778] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  744.664458][ T5778] usb 6-1: USB disconnect, device number 6
[  744.762259][ T5778] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  744.869811][ T5778] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  746.667139][ T5778] keyspan 6-1:1.0: device disconnected
[  746.870782][T18688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4001'.
[  747.451453][   T56] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  747.688397][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  747.696278][   T56] usb 9-1: Using ep0 maxpacket: 8
[  747.702353][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  747.756057][   T56] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  747.828729][   T56] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  747.921815][   T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  747.993876][   T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  748.037481][T16043] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9
[  748.044657][T16043] Bluetooth: hci4: unexpected event for opcode 0x1407
[  748.089061][   T56] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  748.160072][   T56] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  748.212061][   T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.466227][   T56] usb 9-1: GET_CAPABILITIES returned 0
[  748.501979][   T56] usbtmc 9-1:16.0: can't read capabilities
[  748.669761][   T56] usb 9-1: USB disconnect, device number 5
[  749.373977][   T56] IPVS: starting estimator thread 0...
[  749.491712][T18749] IPVS: using max 32 ests per chain, 76800 per kthread
[  751.655730][T16043] Bluetooth: hci2: unexpected event for opcode 0x1004
[  751.676954][T18805] overlayfs: missing 'lowerdir'
[  751.729432][T16043] Bluetooth: hci2: ACL packet for unknown connection handle 3482
[  753.219938][T18829] could not allocate digest TFM handle sha1-neon
[  753.312208][T18831] ceph: No mds server is up or the cluster is laggy
[  757.471476][T15259] IPVS: starting estimator thread 0...
[  757.568427][T18891] IPVS: using max 32 ests per chain, 76800 per kthread
[  758.675512][T18920] 9pnet_fd: Insufficient options for proto=fd
[  758.790664][T18924] netlink: 'syz.0.4050': attribute type 4 has an invalid length.
[  760.965281][T18966] fuse: Bad value for 'fd'
[  770.122723][T19032] fuse: Bad value for 'fd'
[  771.242651][T19057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4097'.
[  771.318828][T19057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4097'.
[  772.442288][T19085] 9pnet_fd: Insufficient options for proto=fd
[  772.923423][T19098] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4107'.
[  772.979906][T19098] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4107'.
[  774.526520][T19101] loop1: detected capacity change from 0 to 32768
[  774.783964][T19101] XFS (loop1): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[  775.074446][T17192] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  775.413291][T19144] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4118'.
[  775.511221][T19144] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4118'.
[  777.184810][T19187] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4128'.
[  777.242988][T19187] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4128'.
[  777.961080][T19172] loop5: detected capacity change from 0 to 32768
[  778.031143][T19172] XFS (loop5): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[  778.266594][T13546] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  782.113959][T19288] 9pnet_fd: Insufficient options for proto=fd
[  784.823297][T19326] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4163'.
[  784.959744][T19326] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4163'.
[  785.756358][T19339] fuse: Unknown parameter 'use00000000000000000000'
[  786.618013][T19323] loop1: detected capacity change from 0 to 32768
[  786.733052][T19323] JBD2: Ignoring recovery information on journal
[  786.931185][T19323] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  789.287669][T17192] ocfs2: Unmounting device (7,1) on (node local)
[  792.607210][T19434] loop1: detected capacity change from 0 to 32768
[  792.836902][T19434] JBD2: Ignoring recovery information on journal
[  793.068316][T19434] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  793.370355][T19446] loop5: detected capacity change from 0 to 32768
[  793.988973][T19446] XFS (loop5): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[  794.381542][T13546] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  795.324641][T17192] ocfs2: Unmounting device (7,1) on (node local)
[  798.007728][T19549] fuse: Unknown parameter '00000000000000000003'
[  800.468032][T19590] fuse: Unknown parameter '00000000000000000003'
[  802.310202][T19627] fuse: Unknown parameter '00000000000000000003'
[  804.265115][T19663] fuse: Unknown parameter '00000000000000000003'
[  806.065824][T19694] overlayfs: failed to clone lowerpath
[  806.109821][T19694] overlayfs: failed to clone lowerpath
[  806.452419][T19700] fuse: Unknown parameter '00000000000000000003'
[  806.905506][ T5818] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  807.291464][ T5818] usb 6-1: Using ep0 maxpacket: 8
[  807.320926][ T5818] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  807.367811][ T5818] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  807.438437][ T5818] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  807.508711][ T5818] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  807.676131][ T5818] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  807.794085][ T5818] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  807.859704][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  808.182009][ T5818] usb 6-1: GET_CAPABILITIES returned 0
[  808.187564][ T5818] usbtmc 6-1:16.0: can't read capabilities
[  808.486402][ T5818] usb 6-1: USB disconnect, device number 7
[  808.605442][T19744] fuse: Unknown parameter '00000000000000000003'
[  809.132342][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  809.139011][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  810.390451][T19777] fuse: Unknown parameter 'fd00000000000000000003'
[  810.967621][T19792] 9pnet_virtio: no channels available for device syz
[  812.369764][T19820] fuse: Unknown parameter 'fd00000000000000000003'
[  814.471905][T19860] fuse: Unknown parameter 'fd00000000000000000003'
[  816.522140][T19871] overlayfs: failed to clone lowerpath
[  816.576397][T19876] overlayfs: failed to clone lowerpath
[  818.595968][T19888] loop5: detected capacity change from 0 to 32768
[  818.756113][T19888] JBD2: Ignoring recovery information on journal
[  818.936773][T19888] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  819.508534][T19930] overlayfs: failed to clone lowerpath
[  819.606730][T19930] overlayfs: failed to clone lowerpath
[  819.761107][T19935] bridge_slave_0: left allmulticast mode
[  819.881937][T19935] bridge_slave_0: left promiscuous mode
[  819.964457][T19935] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.137836][T19935] bridge_slave_1: left allmulticast mode
[  820.224295][T19935] bridge_slave_1: left promiscuous mode
[  820.304355][T19935] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.586123][T19935] bond0: (slave bond_slave_0): Releasing backup interface
[  820.822843][T19935] bond0: (slave bond_slave_1): Releasing backup interface
[  821.035979][T13546] ocfs2: Unmounting device (7,5) on (node local)
[  821.275458][T19935] team0: Port device team_slave_0 removed
[  821.555723][T19935] team0: Port device team_slave_1 removed
[  821.626776][T19935] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  821.723961][T19935] batman_adv: batadv0: Removing interface: batadv_slave_0
[  821.835176][T19935] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  821.954138][T19935] batman_adv: batadv0: Removing interface: batadv_slave_1
[  822.437651][T19975] overlayfs: failed to clone lowerpath
[  822.502789][T19977] overlayfs: failed to clone lowerpath
[  824.000461][T20017] overlayfs: failed to clone lowerpath
[  824.061843][T20020] overlayfs: failed to clone lowerpath
[  827.556548][T20060] overlayfs: failed to clone lowerpath
[  827.608413][T20062] overlayfs: failed to clone lowerpath
[  829.322081][T20099] overlayfs: failed to clone lowerpath
[  829.369681][T20099] overlayfs: failed to clone lowerpath
[  842.351736][T20138] kAFS: unable to lookup cell '/,c¾ûL'
[  844.081425][T20141] overlayfs: failed to clone lowerpath
[  844.123783][T20145] overlayfs: failed to clone lowerpath
[  844.146965][T20137] binder: BINDER_SET_CONTEXT_MGR already set
[  844.153625][T20137] binder: 20136:20137 ioctl 4018620d 200000004a80 returned -16
[  844.526920][T20153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4378'.
[  846.897587][T20195] (null): rxe_set_mtu: Set mtu to 4096
[  846.943414][T20195] lo speed is unknown, defaulting to 1000
[  847.107164][T20195] lo speed is unknown, defaulting to 1000
[  847.116888][ T5818] IPVS: starting estimator thread 0...
[  847.250898][T20195] lo speed is unknown, defaulting to 1000
[  847.257446][T20199] IPVS: using max 32 ests per chain, 76800 per kthread
[  848.578916][T13255] lo speed is unknown, defaulting to 1000
[  848.620777][T20195] infiniband syz1: set active
[  848.664154][T20195] infiniband syz1: added lo
[  848.745037][T20195] syz1: rxe_create_cq: returned err = -12
[  848.963830][T20195] infiniband syz1: Couldn't create ib_mad CQ
[  850.268614][T20195] infiniband syz1: Couldn't open port 1
[  850.690420][T20195] RDS/IB: syz1: added
[  850.725573][T20195] smc: adding ib device syz1 with port count 1
[  850.777906][T20195] smc:    ib device syz1 port 1 has pnetid 
[  850.843098][T13255] lo speed is unknown, defaulting to 1000
[  850.899940][T20195] lo speed is unknown, defaulting to 1000
[  851.688266][T20195] lo speed is unknown, defaulting to 1000
[  851.719372][T20270] kAFS: unable to lookup cell '/,c¾ûL'
[  852.399394][T20195] lo speed is unknown, defaulting to 1000
[  853.009852][T20195] lo speed is unknown, defaulting to 1000
[  854.381401][ T5818] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  854.621377][ T5818] usb 6-1: Using ep0 maxpacket: 8
[  854.668339][ T5818] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  854.713735][ T5818] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  854.786951][ T5818] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  854.859307][ T5818] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  854.932529][ T5818] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  855.006913][ T5818] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  855.064454][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  855.227650][T20351] overlayfs: failed to clone lowerpath
[  855.270223][T20351] overlayfs: failed to clone lowerpath
[  855.351640][ T5818] usb 6-1: GET_CAPABILITIES returned 0
[  855.384266][ T5818] usbtmc 6-1:16.0: can't read capabilities
[  855.563450][T13089] usb 6-1: USB disconnect, device number 8
[  855.781015][T16043] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9
[  855.788607][T16043] Bluetooth: hci2: unexpected event for opcode 0x1407
[  860.429446][T20447] overlayfs: failed to clone lowerpath
[  860.466025][T20447] overlayfs: failed to clone lowerpath
[  862.547265][T16043] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9
[  862.556522][T16043] Bluetooth: hci4: unexpected event for opcode 0x1407
[  863.207167][T20496] overlayfs: failed to clone lowerpath
[  863.256624][T20496] overlayfs: failed to clone lowerpath
[  863.620015][T20501] netlink: 'syz.1.4470': attribute type 3 has an invalid length.
[  864.606185][T20518] veth1_to_hsr: entered promiscuous mode
[  864.653981][T20518] netlink: 116 bytes leftover after parsing attributes in process `syz.8.4473'.
[  864.714622][T20518] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[  865.093878][T20530] overlayfs: failed to clone lowerpath
[  865.149287][T20532] overlayfs: failed to clone lowerpath
[  866.381874][T16043] Bluetooth: hci0: ACL packet too small
[  870.783033][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  870.790284][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  878.868785][T20615] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4499'.
[  879.205673][T16043] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9
[  879.216526][T16043] Bluetooth: hci4: unexpected event for opcode 0x1407
[  879.317429][   T28] kauditd_printk_skb: 138 callbacks suppressed
[  879.317443][   T28] audit: type=1800 audit(879.242:752): pid=20624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4500" name="device_path" dev="configfs" ino=61749 res=0 errno=0
[  879.379770][T20624] nvmet: failed to open block device (null): (-22)
[  879.438591][T20624] nvmet_tcp: address family 255 not supported
[  879.529775][   T28] audit: type=1800 audit(879.302:753): pid=20624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4500" name="enable" dev="configfs" ino=61750 res=0 errno=0
[  879.703419][   T28] audit: type=1800 audit(879.332:754): pid=20624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4500" name="addr_trtype" dev="configfs" ino=61752 res=0 errno=0
[  879.832044][   T28] audit: type=1800 audit(879.332:755): pid=20624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4500" name="addr_traddr" dev="configfs" ino=61753 res=0 errno=0
[  879.983270][   T28] audit: type=1800 audit(879.362:756): pid=20624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4500" name="addr_trsvcid" dev="configfs" ino=61754 res=0 errno=0
[  880.396847][T20648] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4506'.
[  881.734983][T20687] kAFS: unable to lookup cell '/,c¾ûL'
[  881.871644][T13089] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  882.088104][T13089] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  882.136718][T13089] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  882.178815][T13089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.221643][T13089] usb 6-1: Product: syz
[  882.247816][T13089] usb 6-1: Manufacturer: syz
[  882.300602][T13089] usb 6-1: SerialNumber: syz
[  882.348405][T13089] usb 6-1: config 0 descriptor??
[  882.380399][T20679] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  882.406495][T16043] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9
[  882.414621][T16043] Bluetooth: hci4: unexpected event for opcode 0x1407
[  882.440325][T13089] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  883.630764][T20726] Set syz1 is full, maxelem 4096 reached
[  883.675232][T16043] Bluetooth: hci0: unexpected cc 0x1407 length: 11 > 9
[  883.682746][T16043] Bluetooth: hci0: unexpected event for opcode 0x1407
[  883.807775][T13089] usb 6-1: USB disconnect, device number 9
[  884.137694][T16043] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9
[  884.146185][T16043] Bluetooth: hci2: unexpected event for opcode 0x1407
[  884.911810][T20767] netlink: 'syz.1.4539': attribute type 3 has an invalid length.
[  887.061601][T16043] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9
[  887.068929][T16043] Bluetooth: hci2: unexpected event for opcode 0x1407
[  887.947685][T20818] netlink: 'syz.8.4550': attribute type 3 has an invalid length.
[  888.253484][T20825] overlayfs: failed to clone upperpath
[  888.754184][T20834] lo speed is unknown, defaulting to 1000
[  888.777769][T16043] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9
[  888.785988][T16043] Bluetooth: hci2: unexpected event for opcode 0x1407
[  888.820228][T20834] lo speed is unknown, defaulting to 1000
[  888.848118][T20834] lo speed is unknown, defaulting to 1000
[  888.896160][T20834] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  889.006182][T20834] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  889.159348][T20834] lo speed is unknown, defaulting to 1000
[  889.218843][T20834] lo speed is unknown, defaulting to 1000
[  889.255498][T20834] lo speed is unknown, defaulting to 1000
[  889.309123][T20834] lo speed is unknown, defaulting to 1000
[  890.637401][T16043] Bluetooth: hci0: unexpected cc 0x1407 length: 11 > 9
[  890.647020][T16043] Bluetooth: hci0: unexpected event for opcode 0x1407
[  890.705185][T20890] overlayfs: failed to clone lowerpath
[  891.313999][T20901] overlayfs: failed to clone lowerpath
[  891.375193][T20906] overlayfs: failed to clone lowerpath
[  892.124297][T16043] Bluetooth: hci0: unexpected cc 0x1407 length: 11 > 9
[  892.131483][T16043] Bluetooth: hci0: unexpected event for opcode 0x1407
[  892.673777][T20939] overlayfs: failed to clone lowerpath
[  892.718452][T20939] overlayfs: failed to clone lowerpath
[  893.614871][T20968] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4595'.
[  893.654779][T20968] netlink: 'syz.8.4595': attribute type 30 has an invalid length.
[  893.696465][T16043] Bluetooth: hci0: unexpected cc 0x1407 length: 11 > 9
[  893.707715][T16043] Bluetooth: hci0: unexpected event for opcode 0x1407
[  893.755417][T20968] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  893.765508][T20968] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  893.774780][T20968] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  893.783646][T20968] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  894.662046][T21000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4607'.
[  894.846861][T21005] netlink: 'syz.1.4608': attribute type 3 has an invalid length.
[  895.286518][T16043] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9
[  895.295953][T16043] Bluetooth: hci4: unexpected event for opcode 0x1407
[  895.750881][T21018] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.758359][T21018] bridge0: port 1(bridge_slave_0) entered disabled state
[  896.798907][T21018] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  896.838716][T21018] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  897.190474][T21018] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  897.217130][T21018] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  897.242615][T21018] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  897.263636][T21018] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  897.399501][T21018] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  897.408764][T21018] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  897.418165][T21018] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  897.427296][T21018] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  897.567778][T13255] lo speed is unknown, defaulting to 1000
[  897.679503][T21039] warning: `syz.5.4620' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  898.357877][T21060] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4626'.
[  903.537851][T16043] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9
[  903.545369][T16043] Bluetooth: hci4: unexpected event for opcode 0x1407
[  904.746162][T21163] lo speed is unknown, defaulting to 1000
[  905.014889][T16043] Bluetooth: hci0: unexpected cc 0x1407 length: 11 > 9
[  905.022181][T16043] Bluetooth: hci0: unexpected event for opcode 0x1407
[  906.003463][T21163] lo speed is unknown, defaulting to 1000
[  907.211309][T16043] Bluetooth: hci0: unexpected cc 0x1407 length: 11 > 9
[  907.218356][T16043] Bluetooth: hci0: unexpected event for opcode 0x1407
[  907.916371][T21240] netlink: 'syz.0.4683': attribute type 3 has an invalid length.
[  908.831866][T16043] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9
[  908.839299][T16043] Bluetooth: hci4: unexpected event for opcode 0x1407
[  909.760132][T21290] netlink: 'syz.0.4697': attribute type 3 has an invalid length.
[  910.392334][T16043] Bluetooth: hci0: unexpected cc 0x1407 length: 11 > 9
[  910.399835][T16043] Bluetooth: hci0: unexpected event for opcode 0x1407
[  911.573148][T16043] Bluetooth: hci0: unexpected event 0x18 length: 45 > 23
[  911.989825][T16043] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9
[  912.006280][T16043] Bluetooth: hci2: unexpected event for opcode 0x1407
[  913.374956][T21383] netlink: 'syz.0.4728': attribute type 20 has an invalid length.
[  913.749046][T16043] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9
[  913.757532][T16043] Bluetooth: hci4: unexpected event for opcode 0x1407
[  913.770667][T21393] overlayfs: failed to clone lowerpath
[  915.066358][T16043] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9
[  915.073386][T16043] Bluetooth: hci2: unexpected event for opcode 0x1407
[  915.487847][T21449] netlink: 'syz.0.4751': attribute type 3 has an invalid length.
[  916.304161][T21477] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  917.098097][T16043] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9
[  917.105176][T16043] Bluetooth: hci2: unexpected event for opcode 0x1407
[  917.930289][T21515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4770'.
[  917.991679][T16043] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9
[  917.998879][T16043] Bluetooth: hci4: unexpected event for opcode 0x1407
[  918.139138][T21523] overlayfs: failed to clone upperpath
[  918.406839][T21528] tmpfs: Bad value for 'mpol'
[  921.358015][T21536] netlink: 'syz.5.4774': attribute type 5 has an invalid length.
[  923.530263][T16043] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9
[  923.537817][T16043] Bluetooth: hci4: unexpected event for opcode 0x1407
[  923.643964][T21603] netlink: 'syz.8.4788': attribute type 1 has an invalid length.
[  923.677194][T21603] netlink: 'syz.8.4788': attribute type 2 has an invalid length.
[  924.155451][T21617] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  925.580351][T16043] Bluetooth: hci4: ACL packet too small
[  926.137962][T16043] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9
[  926.145583][T16043] Bluetooth: hci4: unexpected event for opcode 0x1407
[  928.726411][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  928.909840][T21730] 9pnet_virtio: no channels available for device syz
[  929.727082][T16043] Bluetooth: hci0: unexpected cc 0x1407 length: 11 > 9
[  929.735160][T16043] Bluetooth: hci0: unexpected event for opcode 0x1407
[  929.768542][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.721687][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.772438][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.785006][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.823485][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.841779][T16121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.922143][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  932.008554][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  932.019171][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  932.081492][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  932.684646][T21841] netlink: 'syz.5.4858': attribute type 21 has an invalid length.
[  932.726454][T21841] netlink: 'syz.5.4858': attribute type 6 has an invalid length.
[  932.777679][T21841] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4858'.
[  932.961756][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.841619][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  934.001602][T16121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  934.071666][T21878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  934.080622][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.045652][T16121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.762480][T21924] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4879'.
[  935.888566][T21924] lo speed is unknown, defaulting to 1000
[  935.895673][T21924] lo speed is unknown, defaulting to 1000
[  935.902048][T21924] lo speed is unknown, defaulting to 1000
[  935.914395][T21924] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  935.934495][T21924] lo speed is unknown, defaulting to 1000
[  935.941133][T21924] lo speed is unknown, defaulting to 1000
[  935.947871][T21924] lo speed is unknown, defaulting to 1000
[  935.954821][T21924] lo speed is unknown, defaulting to 1000
[  935.984519][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.001959][T16121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.016313][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.036707][T21928] netlink: 'syz.8.4880': attribute type 3 has an invalid length.
[  936.081661][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.188862][T21924] smc: removing ib device syz1
[  936.635436][T21924] ------------[ cut here ]------------
[  936.640969][T21924] WARNING: CPU: 0 PID: 21924 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x42/0x50
[  936.652012][T21924] Modules linked in:
[  936.655922][T21924] CPU: 0 PID: 21924 Comm: syz.0.4879 Not tainted syzkaller #0
[  936.663565][T21924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  936.673824][T21924] RIP: 0010:rxe_pool_cleanup+0x42/0x50
[  936.679313][T21924] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 20 ec ff f9 48 83 3b 00 75 07 e8 a5 69 a7 f9 5b c3 e8 9e 69 a7 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41
[  936.699476][T21924] RSP: 0018:ffffc9000b7cf148 EFLAGS: 00010246
[  936.706446][T21924] RAX: ffffffff87e007e2 RBX: ffff888031de52e0 RCX: 0000000000080000
[  936.715344][T21924] RDX: ffffc9000cfaa000 RSI: 000000000007ffff RDI: 0000000000080000
[  936.723786][T21924] RBP: 0000000000000002 R08: ffff888031de4743 R09: 1ffff110063bc8e8
[  936.731902][T21924] R10: dffffc0000000000 R11: ffffed10063bc8e9 R12: dffffc0000000000
[  936.739915][T21924] R13: 0000000000000008 R14: ffffffff87de4700 R15: dffffc0000000000
[  936.748390][T21924] FS:  00007fbe359ff6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  936.757712][T21924] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  936.764462][T21924] CR2: 00007f84d7631e9c CR3: 0000000065ea4000 CR4: 00000000003506f0
[  936.772498][T21924] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951
[  936.780753][T21924] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  936.788952][T21924] Call Trace:
[  936.792343][T21924]  <TASK>
[  936.795383][T21924]  rxe_dealloc+0x33/0x100
[  936.799929][T21924]  ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240
[  936.806937][T21924]  ib_dealloc_device+0x4e/0x1f0
[  936.811963][T21924]  __ib_unregister_device+0x110/0x170
[  936.818017][T21924]  ib_unregister_device_and_put+0xb8/0xf0
[  936.823848][T21924]  nldev_dellink+0x293/0x320
[  936.828539][T21924]  ? nldev_newlink+0x610/0x610
[  936.833537][T21924]  ? __lock_acquire+0x1336/0x7d80
[  936.838670][T21924]  ? apparmor_capable+0x137/0x1a0
[  936.843845][T21924]  ? bpf_lsm_capable+0x9/0x10
[  936.848636][T21924]  ? security_capable+0x89/0xb0
[  936.853643][T21924]  ? nldev_newlink+0x610/0x610
[  936.858451][T21924]  rdma_nl_rcv+0x6fd/0xa60
[  936.862962][T21924]  ? rdma_nl_net_init+0x190/0x190
[  936.868049][T21924]  ? __lock_acquire+0x7d80/0x7d80
[  936.873190][T21924]  ? net_generic+0x1e/0x240
[  936.877821][T21924]  ? netlink_deliver_tap+0x2e/0x1b0
[  936.883642][T21924]  netlink_unicast+0x7b1/0x930
[  936.888476][T21924]  netlink_sendmsg+0x8d0/0xbf0
[  936.893573][T21924]  ? netlink_getsockopt+0x590/0x590
[  936.898812][T21924]  ? apparmor_socket_sendmsg+0x8e/0x330
[  936.904655][T21924]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  936.910673][T21924]  ? security_socket_sendmsg+0x80/0xa0
[  936.916263][T21924]  ? netlink_getsockopt+0x590/0x590
[  936.922202][T21924]  ____sys_sendmsg+0x61b/0x980
[  936.927181][T21924]  ? __asan_memset+0x22/0x40
[  936.932042][T21924]  ? __sys_sendmsg_sock+0x30/0x30
[  936.937071][T21924]  ? __import_iovec+0x5f2/0x850
[  936.942008][T21924]  ? import_iovec+0x73/0xa0
[  936.946603][T21924]  ___sys_sendmsg+0x2a6/0x360
[  936.951345][T21924]  ? __sys_sendmsg+0x2b0/0x2b0
[  936.956325][T21924]  __se_sys_sendmsg+0x1d0/0x2c0
[  936.961801][T21924]  ? __x64_sys_sendmsg+0x80/0x80
[  936.966779][T21924]  ? lockdep_hardirqs_on+0x98/0x150
[  936.972786][T21924]  do_syscall_64+0x55/0xb0
[  936.977310][T21924]  ? clear_bhb_loop+0x40/0x90
[  936.982171][T21924]  ? clear_bhb_loop+0x40/0x90
[  936.986994][T21924]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  936.993170][T21924] RIP: 0033:0x7fbe34b9e0d9
[  936.997602][T21924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  937.017589][T21924] RSP: 002b:00007fbe359ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  937.026830][T21924] RAX: ffffffffffffffda RBX: 00007fbe34e25fa0 RCX: 00007fbe34b9e0d9
[  937.035049][T21924] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b
[  937.043302][T21924] RBP: 00007fbe34c35024 R08: 0000000000000000 R09: 0000000000000000
[  937.051485][T21924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  937.059493][T21924] R13: 00007fbe34e26038 R14: 00007fbe34e25fa0 R15: 00007ffe99f71938
[  937.067729][T21924]  </TASK>
[  937.070759][T21924] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  937.078080][T21924] CPU: 0 PID: 21924 Comm: syz.0.4879 Not tainted syzkaller #0
[  937.085565][T21924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  937.095843][T21924] Call Trace:
[  937.099300][T21924]  <TASK>
[  937.102367][T21924]  dump_stack_lvl+0x18c/0x250
[  937.107315][T21924]  ? show_regs_print_info+0x20/0x20
[  937.113130][T21924]  ? load_image+0x420/0x420
[  937.117843][T21924]  panic+0x2ca/0x720
[  937.122190][T21924]  ? bpf_jit_dump+0xd0/0xd0
[  937.126869][T21924]  __warn+0x2e0/0x470
[  937.130900][T21924]  ? rxe_pool_cleanup+0x42/0x50
[  937.135865][T21924]  ? rxe_pool_cleanup+0x42/0x50
[  937.140722][T21924]  report_bug+0x2be/0x4f0
[  937.145122][T21924]  ? rxe_pool_cleanup+0x42/0x50
[  937.150011][T21924]  ? rxe_pool_cleanup+0x42/0x50
[  937.154890][T21924]  ? rxe_pool_cleanup+0x44/0x50
[  937.160145][T21924]  handle_bug+0xcf/0x120
[  937.164581][T21924]  exc_invalid_op+0x1a/0x50
[  937.169197][T21924]  asm_exc_invalid_op+0x1a/0x20
[  937.174441][T21924] RIP: 0010:rxe_pool_cleanup+0x42/0x50
[  937.180371][T21924] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 20 ec ff f9 48 83 3b 00 75 07 e8 a5 69 a7 f9 5b c3 e8 9e 69 a7 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41
[  937.200292][T21924] RSP: 0018:ffffc9000b7cf148 EFLAGS: 00010246
[  937.206483][T21924] RAX: ffffffff87e007e2 RBX: ffff888031de52e0 RCX: 0000000000080000
[  937.214823][T21924] RDX: ffffc9000cfaa000 RSI: 000000000007ffff RDI: 0000000000080000
[  937.222942][T21924] RBP: 0000000000000002 R08: ffff888031de4743 R09: 1ffff110063bc8e8
[  937.231020][T21924] R10: dffffc0000000000 R11: ffffed10063bc8e9 R12: dffffc0000000000
[  937.239248][T21924] R13: 0000000000000008 R14: ffffffff87de4700 R15: dffffc0000000000
[  937.247399][T21924]  ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240
[  937.254190][T21924]  ? rxe_pool_cleanup+0x42/0x50
[  937.259094][T21924]  ? rxe_pool_cleanup+0x42/0x50
[  937.264061][T21924]  rxe_dealloc+0x33/0x100
[  937.268435][T21924]  ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240
[  937.275500][T21924]  ib_dealloc_device+0x4e/0x1f0
[  937.280356][T21924]  __ib_unregister_device+0x110/0x170
[  937.285907][T21924]  ib_unregister_device_and_put+0xb8/0xf0
[  937.291666][T21924]  nldev_dellink+0x293/0x320
[  937.296292][T21924]  ? nldev_newlink+0x610/0x610
[  937.301066][T21924]  ? __lock_acquire+0x1336/0x7d80
[  937.306167][T21924]  ? apparmor_capable+0x137/0x1a0
[  937.311858][T21924]  ? bpf_lsm_capable+0x9/0x10
[  937.316588][T21924]  ? security_capable+0x89/0xb0
[  937.321510][T21924]  ? nldev_newlink+0x610/0x610
[  937.326316][T21924]  rdma_nl_rcv+0x6fd/0xa60
[  937.330761][T21924]  ? rdma_nl_net_init+0x190/0x190
[  937.335854][T21924]  ? __lock_acquire+0x7d80/0x7d80
[  937.340896][T21924]  ? net_generic+0x1e/0x240
[  937.345520][T21924]  ? netlink_deliver_tap+0x2e/0x1b0
[  937.350747][T21924]  netlink_unicast+0x7b1/0x930
[  937.355649][T21924]  netlink_sendmsg+0x8d0/0xbf0
[  937.360435][T21924]  ? netlink_getsockopt+0x590/0x590
[  937.365651][T21924]  ? apparmor_socket_sendmsg+0x8e/0x330
[  937.371658][T21924]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  937.377182][T21924]  ? security_socket_sendmsg+0x80/0xa0
[  937.382942][T21924]  ? netlink_getsockopt+0x590/0x590
[  937.388571][T21924]  ____sys_sendmsg+0x61b/0x980
[  937.393562][T21924]  ? __asan_memset+0x22/0x40
[  937.398348][T21924]  ? __sys_sendmsg_sock+0x30/0x30
[  937.403473][T21924]  ? __import_iovec+0x5f2/0x850
[  937.408355][T21924]  ? import_iovec+0x73/0xa0
[  937.413074][T21924]  ___sys_sendmsg+0x2a6/0x360
[  937.418278][T21924]  ? __sys_sendmsg+0x2b0/0x2b0
[  937.423636][T21924]  __se_sys_sendmsg+0x1d0/0x2c0
[  937.428969][T21924]  ? __x64_sys_sendmsg+0x80/0x80
[  937.433957][T21924]  ? lockdep_hardirqs_on+0x98/0x150
[  937.439168][T21924]  do_syscall_64+0x55/0xb0
[  937.443611][T21924]  ? clear_bhb_loop+0x40/0x90
[  937.448310][T21924]  ? clear_bhb_loop+0x40/0x90
[  937.453050][T21924]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  937.459042][T21924] RIP: 0033:0x7fbe34b9e0d9
[  937.463735][T21924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  937.483892][T21924] RSP: 002b:00007fbe359ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  937.492328][T21924] RAX: ffffffffffffffda RBX: 00007fbe34e25fa0 RCX: 00007fbe34b9e0d9
[  937.500499][T21924] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b
[  937.508511][T21924] RBP: 00007fbe34c35024 R08: 0000000000000000 R09: 0000000000000000
[  937.516501][T21924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  937.524732][T21924] R13: 00007fbe34e26038 R14: 00007fbe34e25fa0 R15: 00007ffe99f71938
[  937.532801][T21924]  </TASK>
[  937.535874][T21924] Kernel Offset: disabled
[  937.540476][T21924] Rebooting in 86400 seconds..