last executing test programs:

36.603497266s ago: executing program 1 (id=2506):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000ac0)="b0", 0x1}, {&(0x7f00000003c0)="198b44a51e270a15fc6ae02b32bc08b55db19edd41440d0b92ab67b743ddb62dc0d17d793d34d75dcf37676351834255f17fac0023de5c386e95a73e611df7c6f661fb571ff04838bfeb75d749431fd75d2256a2e61110e8bff33fa1037ff689b5afde0957e28be6aac0481f713890b15c845932012dcf7f21c8669cacf7fbddc376ecc427662c1091be661896cfb4fce6be3572ad995422ac236b0e8adf83f756a78264769a1ec8c1865626ed5c14491db41b649e31f2fddc892dac654e1287d0011feb3f5cdfa7a859e5400e1cc8de032f5010ed166c78fc162c2bb1545517b00da87de18a9c1c3d188befc43da12d14a7", 0xf2}, {&(0x7f0000000200)="0d15eadf4192ed3874604ae9fa8c460dec30540b703384f9bd3ed106dcaf08565ccb539d16f73a5b8dceed6c13c07a860a5eeb5d627c965157182d7409978aaf350ec25260359d9396f30dfcc1b6e2f6fa7baa690796942af82f6411e544772bfa8576cbd7b10bead02b94823fae11b19053b4a9554aa7138c0c1152dae3f788354167734e10947c24b08a2daae25941e6cd6bafbe1230c94b515639c0c0939d19a619301b6bb6a2a1e0d433476142d331876b8ddae5fcfe533e0c334d", 0xbd}, {&(0x7f0000000540)="4c4c70f6aebfa3c08a33876a6e8a7d567cf202bb878bc6c0f65a9fee5a9cf712dc398b14344a86c526a8c63964f9960188d91c361b3cd68a669de64d28af4b4f141e8787b8b7e6c5d049fe4ac26949f557f4dec8be7ba90a8e5f48f549023c12782775b3dfd830e3205a6d3b05e43217c4eabad6853064f510667bf5370386bda8dd18aef8843000c484fabdd61d47bc59c18897a0fd61d40f3a56d2596ae76a02ebf5e04dc60e87e9ea49f0568b639f361082e0ab03e3c7f2868846211cef56be9ce55f100c8e84cabacce3cf53202b5f93119edbb26217bf79a20adaaa06379d1f3b0057fc744dc01248b73418e083e6526505a6f2b5fa", 0xfc81}], 0x4}}], 0x2, 0x0)

36.486601057s ago: executing program 1 (id=2507):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62)
listen(r0, 0x3)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket(0x23, 0x5, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

35.100035006s ago: executing program 1 (id=2516):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

34.93263543s ago: executing program 1 (id=2519):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000280), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000017400)=ANY=[@ANYBLOB="6a71666d743d76667376312c686561702c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303032332c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c00094d1695eb803de88d68e967a0f7d2cd8b4a53aa2c4d394863aff376cdb4d91991576c665e78ac0d9a7a135af73e88fa79d20e99cf763cb66477c57a4495c07b1141317c84e35f54fcfe8cdc802cc3e7e5710e347372ce7abf486b7aa38d915e96706428b82a2288ed6c16cf6049f87d543c36614d21b7a6e82cfdcef9f1bc29c6a0a96035f511"], 0x1, 0x5505, &(0x7f0000000340)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x40)

32.970301094s ago: executing program 1 (id=2541):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

32.084271957s ago: executing program 1 (id=2551):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="df", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x4000000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1, 0xd}, 0x8)

31.633743189s ago: executing program 32 (id=2551):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="df", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x4000000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1, 0xd}, 0x8)

9.042764723s ago: executing program 4 (id=2678):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000000000000000ffffffffffff02"])

7.638073351s ago: executing program 5 (id=2685):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
listen(r0, 0x6)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000080", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0)

6.539717834s ago: executing program 5 (id=2688):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc)

6.296372785s ago: executing program 5 (id=2690):
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002095a7d10d2194211181b010203090902120001de00000809047f0000ffffff0ea4187c"], 0x0)

5.649407097s ago: executing program 0 (id=2694):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000a00)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@nomblk_io_submit}, {@quota}, {@test_dummy_encryption}]}, 0x3, 0x438, &(0x7f0000000580)="$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")

4.899946948s ago: executing program 4 (id=2698):
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000080)={[{@uni_xlate}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_win95}, {@shortname_winnt}, {@shortname_mixed}, {@utf8}, {@shortname_mixed}, {@utf8}, {@shortname_mixed}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000000580)="$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")
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x202402, &(0x7f0000000000)={[{@dax_inode}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@orlov}, {@init_itable}, {@usrjquota, 0x2e}], [], 0x2c}, 0x0, 0x465, &(0x7f00000009c0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

3.965431384s ago: executing program 0 (id=2699):
r0 = epoll_create1(0x0)
r1 = socket(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x2000})
shutdown(r1, 0x1)
pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x10000, 0x1, 0x0, 0x4}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0)

3.691996664s ago: executing program 0 (id=2701):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000ac0)="b0", 0x1}, {&(0x7f00000003c0)="198b44a51e270a15fc6ae02b32bc08b55db19edd41440d0b92ab67b743ddb62dc0d17d793d34d75dcf37676351834255f17fac0023de5c386e95a73e611df7c6f661fb571ff04838bfeb75d749431fd75d2256a2e61110e8bff33fa1037ff689b5afde0957e28be6aac0481f713890b15c845932012dcf7f21c8669cacf7fbddc376ecc427662c1091be661896cfb4fce6be3572ad995422ac236b0e8adf83f756a78264769a1ec8c1865626ed5c14491db41b649e31f2fddc892dac654e1287d0011feb3f5cdfa7a859e5400e1cc8de032f5010ed166c78fc162c2bb1545517b00da87de18a9c1c3d188befc43da12d14a7", 0xf2}, {&(0x7f0000000200)="0d15eadf4192ed3874604ae9fa8c460dec30540b703384f9bd3ed106dcaf08565ccb539d16f73a5b8dceed6c13c07a860a5eeb5d627c965157182d7409978aaf350ec25260359d9396f30dfcc1b6e2f6fa7baa690796942af82f6411e544772bfa8576cbd7b10bead02b94823fae11b19053b4a9554aa7138c0c1152dae3f788354167734e10947c24b08a2daae25941e6cd6bafbe1230c94b515639c0c0939d19a619301b6bb6a2a1e0d433476142d331876b8ddae5fcfe533e0c334d", 0xbd}, {&(0x7f0000000540)="4c4c70f6aebfa3c08a33876a6e8a7d567cf202bb878bc6c0f65a9fee5a9cf712dc398b14344a86c526a8c63964f9960188d91c361b3cd68a669de64d28af4b4f141e8787b8b7e6c5d049fe4ac26949f557f4dec8be7ba90a8e5f48f549023c12782775b3dfd830e3205a6d3b05e43217c4eabad6853064f510667bf5370386bda8dd18aef8843000c484fabdd61d47bc59c18897a0fd61d40f3a56d2596ae76a02ebf5e04dc60e87e9ea49f0568b639f361082e0ab03e3c7f2868846211cef56be9ce55f100c8e84cabacce3cf53202b5f93119edbb26217bf79a20adaaa06379d1f3b0057fc744dc01248b73418e083e6526505a6f2b5fa", 0xfc81}], 0x4}}], 0x2, 0x0)

3.63417956s ago: executing program 4 (id=2703):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
close(0x3)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50)

3.597641093s ago: executing program 5 (id=2704):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
recvmmsg(r0, &(0x7f00000021c0), 0x0, 0x40, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
request_key(&(0x7f0000002280)='.dead\x00', &(0x7f00000022c0)={'syz', 0x3}, &(0x7f0000002300)='\x00', 0xffffffffffffffff)

3.547300372s ago: executing program 0 (id=2705):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
close(0x3)

3.431972223s ago: executing program 4 (id=2707):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000580)={'syz1\x00', {0x6ec6, 0x7, 0x5, 0x3c3c}, 0x3e, [0x9, 0x8, 0x8, 0x2, 0x5334, 0x400, 0x80000010, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x10001, 0x6, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x8, 0x0, 0x0, 0x202, 0x8000, 0x1, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x6, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x2, 0x8, 0x2, 0x9, 0x1, 0x104, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x7ffe, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffe9c, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x6, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x631, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xccf, 0x7, 0x8, 0x7, 0x4, 0x8, 0x10, 0x7, 0x7, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0x6, 0x4, 0x80000001, 0x4, 0x4, 0x5, 0x5, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x8, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x7, 0x9, 0x6, 0x1010000, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x8, 0x6, 0xd9, 0x0, 0x7d, 0x401], [0x108e, 0x7fff, 0xfffffffe, 0x4, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x401, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x8000002, 0x5, 0x76, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x601, 0x1, 0x400, 0x7, 0x4edf, 0xfffffffd, 0x7, 0x14e2, 0x2, 0xe, 0x7f, 0x133, 0x6]}, 0x45c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x1c}}, 0x0)
ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00')

3.278263574s ago: executing program 0 (id=2709):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d0493c2000000000001090224000100003000090400000503000000092100000801220b0009058103"], 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c000000a98aab"], 0x0}, 0x0)

2.271959043s ago: executing program 2 (id=2710):
r0 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r2, &(0x7f0000000000), 0x10)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000c00)=ANY=[@ANYRES32, @ANYBLOB="76cea1141d65e7fa31fbec3d815e2980581b183cd8fbbf52361757df7c239bd2fe6b881941dea120e60f5d952985cf01e6bd37b53c921bd13439b9150d6b1df8bf5043ecd1c0ed04cbefbe9eb0d65fe6ed9434a1f4aa76ec44685c765337c953434480ab88606966be2cb64416dfea9d9eda649ee1268ef17efa754856f8a99cf61805fba721d93b23a5a37ab9e0d62d07540cea047d39cc5b80b9f225aea77f273306949bf31f7ba38d8af4af552006e00b99c0", @ANYRES64=0x0, @ANYBLOB="b0ed086982ae288c0ded88b546ef1c1e703d8f9c10354ca909cb45bfc2f978a7aedaae1ce91bb7cea3a037dd1cffbea6890ea96b05173bb55c37129d8a1763fb7c5ae6e47efff4f65eaa937effbb44a202528799b7421ce9c6a23ed76fce3919300aa25e9cd22ce700114242a870e3a1", @ANYRESHEX=0x0, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES8, @ANYBLOB="0719b650889c011838a747e46b6ddd2842c52dd36fe25b2bf160e3d136a1fed4", @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRES32=0x0], 0x2, 0x1d3, &(0x7f00000008c0)="$eJzsmb2vEkEUxc/M7oPnizGxsbDRxJeIEZbdRQ0NBSb2JuBXJ5GVoAsYWBMgsSA2NpYWJrb+AxYWVBZ2drZaqImJhZTWa2YYdsflQ4ghkrz7S5g9M3Nn5s4FTgEgCOLI8u3rry/PrxarWQDHcYi0Gv9hxDFci//88vHFF6Vrr958ev2+feLJOLkfAxCG659vAnhXNhCofhj+ufpQPavgkb4BjgtK3wKDpfRdcNxU2gPDHaUfaLpzTAnfs+51/Pr9pu/ZonFE44qmkMxvMmKoA9hX+TFtvjcYPqz5vtdNir1wds7c1KbiL/UzJ2WOklY/8X7dfvZ0JPqz2tha/RxwOEoXwFBRuog0LMuKS6Ld/7QZ72+sc/9dECdzq2KyO5Ahif8gWHJEfKGjkVOT8Yf5Vd+3mdjZ7V5ZGheAuamPB/+2c0qZwMKY2D+F5Z7X/MmEGflHPmg9yvcGw1yzVWt4Da/tuoUr9iXbvuzmpRFN2xX+ty/96UDbf29JbIql0K8FQdfpA0HXifrutNUct/K281Ou4dL/ODLnpnuIj4q8dnrxGUy9uHwKlTGWJk8QBEEQBEEQBEEQBEEQBLERZ8Dkr6Dqj6pwCe51Gf07AAD//8+DaM4=")
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000140)='zonefs\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000180)='@.\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff)

2.271488608s ago: executing program 4 (id=2711):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004000)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x9, @string={0x9, 0x3, "a8ed93c467cf86"}}, 0x0, 0x0}, 0x0)

2.07772861s ago: executing program 2 (id=2712):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x2c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
pwritev(r1, 0x0, 0x0, 0x8, 0x1)

2.007087151s ago: executing program 3 (id=2713):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc)

1.847960109s ago: executing program 3 (id=2714):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.84421169s ago: executing program 5 (id=2715):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x10, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x4, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc874}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.837310274s ago: executing program 2 (id=2716):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(r0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000000)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000580))

1.756079084s ago: executing program 3 (id=2717):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x14, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)

1.67267307s ago: executing program 2 (id=2718):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

1.659927907s ago: executing program 3 (id=2719):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c80c)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0xb, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)

1.509969015s ago: executing program 2 (id=2720):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f00000000c0)={0x2, {0x20, 0x6, 0x5, 0x1, 0x2}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
close_range(r6, 0xffffffffffffffff, 0x0)

1.360280403s ago: executing program 5 (id=2721):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
fstat(0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f00000006c0)="$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")
r6 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r6, 0x0, 0xb0)
mkdir(0x0, 0xfffffffffffffffe)
write$FUSE_INIT(r6, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
recvmsg$can_raw(r7, 0x0, 0x40002042)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x29cb, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.293272819s ago: executing program 3 (id=2722):
r0 = socket(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}})

100.067309ms ago: executing program 2 (id=2723):
unshare(0x24020400)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x3204440, &(0x7f00000000c0), 0x1, 0x576, &(0x7f0000000140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xa8dd, 0x6})

66.282948ms ago: executing program 0 (id=2724):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000280), &(0x7f00000003c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r2}, 0x18)
timer_create(0x0, 0x0, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x989680}}, 0x0)

52.66768ms ago: executing program 3 (id=2725):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
listen(r0, 0x3)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket(0x23, 0x5, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

0s ago: executing program 4 (id=2726):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)

kernel console output (not intermixed with test programs):

ce will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.784245][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.810514][ T5856] hsr_slave_0: entered promiscuous mode
[   93.816905][ T5856] hsr_slave_1: entered promiscuous mode
[   93.823590][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   93.829709][ T5856] Cannot create hsr debugfs directory
[   93.845358][ T5846] team0: Port device team_slave_1 added
[   93.961949][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.969230][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.996210][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.009956][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.017022][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.043541][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.149070][ T5848] hsr_slave_0: entered promiscuous mode
[   94.155522][ T5848] hsr_slave_1: entered promiscuous mode
[   94.163073][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   94.169378][ T5848] Cannot create hsr debugfs directory
[   94.194435][ T5843] hsr_slave_0: entered promiscuous mode
[   94.201667][ T5843] hsr_slave_1: entered promiscuous mode
[   94.207883][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   94.213822][ T5843] Cannot create hsr debugfs directory
[   94.287036][ T5846] hsr_slave_0: entered promiscuous mode
[   94.297308][ T5846] hsr_slave_1: entered promiscuous mode
[   94.306653][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   94.313770][ T5846] Cannot create hsr debugfs directory
[   94.843684][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.856730][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.881153][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.902609][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.961711][ T5856] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   94.997749][ T5856] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   95.012131][ T5856] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   95.027209][ T5856] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   95.084275][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   95.104870][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   95.125256][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   95.138632][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   95.189428][ T5857] Bluetooth: hci1: command tx timeout
[   95.189439][ T5166] Bluetooth: hci0: command tx timeout
[   95.268736][ T5166] Bluetooth: hci4: command tx timeout
[   95.268769][ T5857] Bluetooth: hci3: command tx timeout
[   95.274189][   T51] Bluetooth: hci2: command tx timeout
[   95.293500][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   95.308669][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   95.347135][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   95.385699][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   95.440071][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   95.453751][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   95.465301][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   95.480980][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   95.565068][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.586443][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.615079][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   95.668054][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.675401][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.691438][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   95.720601][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.750647][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.757819][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.767894][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.775097][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.813207][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.820413][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.877613][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   95.921313][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.928536][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.967155][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.986708][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.993941][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.064263][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.095730][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.176129][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   96.250193][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.257355][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.296262][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   96.343177][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.350489][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.387050][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.394268][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.440609][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.447820][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.535609][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.574985][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.665877][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   96.940625][ T5844] veth0_vlan: entered promiscuous mode
[   97.011548][ T5844] veth1_vlan: entered promiscuous mode
[   97.163628][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.237686][ T5844] veth0_macvtap: entered promiscuous mode
[   97.261327][ T5844] veth1_macvtap: entered promiscuous mode
[   97.268921][ T5166] Bluetooth: hci1: command tx timeout
[   97.274392][ T5166] Bluetooth: hci0: command tx timeout
[   97.278179][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.350074][   T51] Bluetooth: hci4: command tx timeout
[   97.350601][ T5857] Bluetooth: hci2: command tx timeout
[   97.355610][ T5166] Bluetooth: hci3: command tx timeout
[   97.370472][   T92] cfg80211: failed to load regulatory.db
[   97.394919][ T5846] veth0_vlan: entered promiscuous mode
[   97.416029][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.428132][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.449543][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.484676][ T5846] veth1_vlan: entered promiscuous mode
[   97.493210][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.503316][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.527818][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.537686][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.633944][ T5848] veth0_vlan: entered promiscuous mode
[   97.646523][ T5856] veth0_vlan: entered promiscuous mode
[   97.682552][ T5856] veth1_vlan: entered promiscuous mode
[   97.698009][ T5848] veth1_vlan: entered promiscuous mode
[   97.753358][ T5843] veth0_vlan: entered promiscuous mode
[   97.787832][ T5846] veth0_macvtap: entered promiscuous mode
[   97.797949][ T5843] veth1_vlan: entered promiscuous mode
[   97.805698][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.819175][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.840684][ T5846] veth1_macvtap: entered promiscuous mode
[   97.884593][ T5856] veth0_macvtap: entered promiscuous mode
[   97.900774][ T5856] veth1_macvtap: entered promiscuous mode
[   97.924484][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.935116][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.958217][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.992716][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.017034][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.026230][ T5843] veth0_macvtap: entered promiscuous mode
[   98.054559][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   98.077569][ T3448] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.087412][ T5848] veth0_macvtap: entered promiscuous mode
[   98.101138][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.118679][ T3448] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.127505][ T3448] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.171179][ T3448] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.186858][ T3448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.197929][ T5843] veth1_macvtap: entered promiscuous mode
[   98.216344][ T5848] veth1_macvtap: entered promiscuous mode
[   98.242397][ T3448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.290187][ T3448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.348522][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.381811][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.401337][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.431516][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.482493][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.521745][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.560722][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.580860][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.609131][ T3536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.639004][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.656044][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.669035][ T3536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.684658][ T3536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.766275][ T3536] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.791205][ T3448] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.812737][ T3448] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.833079][ T3448] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.833585][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.865614][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.044208][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.058164][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.193189][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.217978][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.359186][ T5166] Bluetooth: hci0: command tx timeout
[   99.364710][ T5857] Bluetooth: hci1: command tx timeout
[   99.373478][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.389761][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.428528][ T5166] Bluetooth: hci2: command tx timeout
[   99.434008][ T5166] Bluetooth: hci3: command tx timeout
[   99.439530][ T5857] Bluetooth: hci4: command tx timeout
[   99.478842][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.510837][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.812762][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.855382][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.696064][ T6018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24'.
[  100.896843][ T6027] netlink: 40 bytes leftover after parsing attributes in process `syz.4.27'.
[  100.906637][ T6029] warning: `syz.3.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  100.923929][ T6027] Zero length message leads to an empty skb
[  101.131019][ T6034] syz.4.28 uses obsolete (PF_INET,SOCK_PACKET)
[  102.103882][ T6053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.38'.
[  102.305879][ T6054] tipc: Started in network mode
[  102.322658][ T6054] tipc: Node identity da2ad5ee366a, cluster identity 4711
[  102.373319][ T6054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.422920][ T6061] syzkaller0: entered promiscuous mode
[  102.467446][ T6061] syzkaller0: entered allmulticast mode
[  102.522557][ T6054] tipc: Resetting bearer <eth:syzkaller0>
[  102.547448][ T6051] tipc: Resetting bearer <eth:syzkaller0>
[  102.681251][ T6051] tipc: Disabling bearer <eth:syzkaller0>
[  102.863885][ T6081] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.48'.
[  103.759090][ T6109] netlink: 'syz.3.60': attribute type 7 has an invalid length.
[  103.777270][ T6109] netlink: 'syz.3.60': attribute type 8 has an invalid length.
[  104.058054][ T6114] bridge_slave_0: left allmulticast mode
[  104.089083][ T6114] bridge_slave_0: left promiscuous mode
[  104.115144][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.173330][ T6114] bridge_slave_1: left allmulticast mode
[  104.188373][ T6114] bridge_slave_1: left promiscuous mode
[  104.194358][ T6114] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.304789][ T6114] bond0: (slave bond_slave_0): Releasing backup interface
[  104.510352][ T6114] bond0: (slave bond_slave_1): Releasing backup interface
[  104.644860][ T6114] team0: Port device team_slave_0 removed
[  104.791393][ T6114] team0: Port device team_slave_1 removed
[  104.800363][ T6114] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.807862][ T6114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.823305][ T6114] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.831762][ T6114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.860876][ T6142] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.918792][ T6120] tipc: Started in network mode
[  104.923738][ T6120] tipc: Node identity 4e6742dc341c, cluster identity 4711
[  104.940831][ T6142] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.941642][ T6120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.997356][ T6129] tipc: Resetting bearer <eth:syzkaller0>
[  105.022235][ T6117] tipc: Disabling bearer <eth:syzkaller0>
[  105.071240][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'.
[  105.111459][ T6142] netlink: 'syz.0.70': attribute type 4 has an invalid length.
[  105.446044][ T6156] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.482011][ T6156] syzkaller0: entered promiscuous mode
[  105.515257][ T6156] syzkaller0: entered allmulticast mode
[  105.586672][ T6156] tipc: Resetting bearer <eth:syzkaller0>
[  105.876534][ T6154] tipc: Resetting bearer <eth:syzkaller0>
[  105.982437][ T6154] tipc: Disabling bearer <eth:syzkaller0>
[  106.819993][ T6180] bridge_slave_0: left allmulticast mode
[  106.874603][ T6180] bridge_slave_0: left promiscuous mode
[  106.891222][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.024449][ T6180] bridge_slave_1: left allmulticast mode
[  107.078585][ T6180] bridge_slave_1: left promiscuous mode
[  107.084448][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.187749][ T6180] bond0: (slave bond_slave_0): Releasing backup interface
[  107.273063][ T6180] bond0: (slave bond_slave_1): Releasing backup interface
[  107.353336][ T6180] team0: Port device team_slave_0 removed
[  107.419159][ T6180] team0: Port device team_slave_1 removed
[  107.441693][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.451619][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.465114][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.517714][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.783345][ T6191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.822763][ T6199] tipc: Resetting bearer <eth:syzkaller0>
[  107.857771][ T6190] tipc: Disabling bearer <eth:syzkaller0>
[  110.348551][ T6252] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.369649][ T6316] tipc: Started in network mode
[  111.374742][ T6316] tipc: Node identity 3ad9f0c18c3d, cluster identity 4711
[  111.382911][ T6316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.404214][ T6316] syzkaller0: entered promiscuous mode
[  111.443814][ T6316] syzkaller0: entered allmulticast mode
[  111.723006][ T6320] tipc: Resetting bearer <eth:syzkaller0>
[  111.740915][ T6314] tipc: Resetting bearer <eth:syzkaller0>
[  111.839664][ T6314] tipc: Disabling bearer <eth:syzkaller0>
[  111.904886][ T6328] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.602547][ T6387] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  114.226790][ T6416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.165'.
[  114.301440][ T6420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.167'.
[  114.311445][ T6419] netlink: 96 bytes leftover after parsing attributes in process `syz.0.166'.
[  114.653099][ T6435] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  114.865611][ T6444] bridge_slave_0: left allmulticast mode
[  114.900345][ T6444] bridge_slave_0: left promiscuous mode
[  114.924445][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.005217][ T6444] bridge_slave_1: left allmulticast mode
[  115.027705][ T6444] bridge_slave_1: left promiscuous mode
[  115.085481][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.118024][ T6444] bond0: (slave bond_slave_0): Releasing backup interface
[  115.176717][ T6444] bond0: (slave bond_slave_1): Releasing backup interface
[  115.252410][ T6444] team0: Port device team_slave_0 removed
[  115.267164][ T6444] team0: Port device team_slave_1 removed
[  115.278208][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.286610][ T6444] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.299660][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.307553][ T6444] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.340765][ T6451] tipc: Started in network mode
[  115.345709][ T6451] tipc: Node identity 8ec8f72faec5, cluster identity 4711
[  115.359415][ T6451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.370265][ T6454] syzkaller0: entered promiscuous mode
[  115.386564][ T6454] syzkaller0: entered allmulticast mode
[  115.411253][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'.
[  115.440524][ T6460] tipc: Resetting bearer <eth:syzkaller0>
[  115.474198][ T6437] tipc: Resetting bearer <eth:syzkaller0>
[  115.544105][ T6437] tipc: Disabling bearer <eth:syzkaller0>
[  115.612429][ T6465] macsec1: entered promiscuous mode
[  115.637650][ T6465] macvlan0: entered promiscuous mode
[  116.414986][ T6509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.422817][ T6509] syzkaller0: entered promiscuous mode
[  116.432125][ T6509] syzkaller0: entered allmulticast mode
[  116.458198][ T6509] tipc: Resetting bearer <eth:syzkaller0>
[  116.479103][ T6508] tipc: Resetting bearer <eth:syzkaller0>
[  116.544288][ T6508] tipc: Disabling bearer <eth:syzkaller0>
[  116.630548][ T6519] syzkaller0: entered promiscuous mode
[  116.636273][ T6519] syzkaller0: entered allmulticast mode
[  117.231446][ T6544] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.239262][ T6544] syzkaller0: entered promiscuous mode
[  117.244779][ T6544] syzkaller0: entered allmulticast mode
[  117.282201][ T6544] tipc: Resetting bearer <eth:syzkaller0>
[  117.292217][ T6547] netlink: 'syz.1.217': attribute type 10 has an invalid length.
[  117.294790][ T6548] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  117.314229][ T6547] netlink: 'syz.1.217': attribute type 49 has an invalid length.
[  117.320291][ T6543] tipc: Resetting bearer <eth:syzkaller0>
[  117.373977][ T6543] tipc: Disabling bearer <eth:syzkaller0>
[  117.726008][ T6568] netlink: 64 bytes leftover after parsing attributes in process `syz.2.225'.
[  117.858023][ T6568] team0: Mode "b" not found
[  118.019120][ T6581] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.039097][ T6581] syzkaller0: entered promiscuous mode
[  118.044628][ T6581] syzkaller0: entered allmulticast mode
[  118.092984][ T6581] tipc: Resetting bearer <eth:syzkaller0>
[  118.111971][ T6579] tipc: Resetting bearer <eth:syzkaller0>
[  118.155313][ T6579] tipc: Disabling bearer <eth:syzkaller0>
[  118.469730][ T6598] syzkaller0: entered promiscuous mode
[  118.481134][ T6598] syzkaller0: entered allmulticast mode
[  118.616088][ T6606] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  118.677667][ T6610] netlink: 64 bytes leftover after parsing attributes in process `syz.3.242'.
[  119.386952][ T6641] netlink: 48 bytes leftover after parsing attributes in process `syz.2.252'.
[  119.434689][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'.
[  119.672782][ T6657] netlink: 'syz.3.259': attribute type 2 has an invalid length.
[  119.682756][ T6657] netlink: 164 bytes leftover after parsing attributes in process `syz.3.259'.
[  120.000349][ T6668] ieee802154 phy0 wpan0: encryption failed: -22
[  120.007185][ T6664] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  120.595783][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.273'.
[  120.772154][ T6701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.277'.
[  121.448119][ T6730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'.
[  121.574920][ T6737] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  121.682549][ T6741] syzkaller0: entered promiscuous mode
[  121.688513][ T6741] syzkaller0: entered allmulticast mode
[  121.876606][ T6750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.900947][ T6750] syzkaller0: entered promiscuous mode
[  121.906668][ T6750] syzkaller0: entered allmulticast mode
[  121.947681][ T6749] tipc: Resetting bearer <eth:syzkaller0>
[  122.279933][ T6749] tipc: Disabling bearer <eth:syzkaller0>
[  122.307794][ T6765] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  122.460999][ T6769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.304'.
[  122.769394][ T6783] syzkaller0: entered promiscuous mode
[  122.788565][ T6783] syzkaller0: entered allmulticast mode
[  123.043241][ T6794] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.061248][ T6794] syzkaller0: entered promiscuous mode
[  123.078340][ T6794] syzkaller0: entered allmulticast mode
[  123.394453][ T6793] tipc: Resetting bearer <eth:syzkaller0>
[  123.459943][ T6793] tipc: Disabling bearer <eth:syzkaller0>
[  124.057925][ T6840] netlink: 48 bytes leftover after parsing attributes in process `syz.4.332'.
[  124.206716][ T6842] tipc: Started in network mode
[  124.211927][ T6842] tipc: Node identity 2a547aa0eba9, cluster identity 4711
[  124.219551][ T6842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.226670][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'.
[  124.255866][ T6842] tipc: Resetting bearer <eth:syzkaller0>
[  124.303454][ T6841] tipc: Disabling bearer <eth:syzkaller0>
[  124.320547][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'.
[  124.846301][ T6873] syz.3.344 uses old SIOCAX25GETINFO
[  124.893175][ T6870] syzkaller0: entered allmulticast mode
[  126.920528][ T6893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.955365][ T6903] tipc: Resetting bearer <eth:syzkaller0>
[  126.999145][ T6886] tipc: Disabling bearer <eth:syzkaller0>
[  128.571075][ T6984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.589116][ T6984] syzkaller0: entered promiscuous mode
[  128.598306][ T6984] syzkaller0: entered allmulticast mode
[  128.626039][ T6984] tipc: Resetting bearer <eth:syzkaller0>
[  128.696157][ T6983] tipc: Resetting bearer <eth:syzkaller0>
[  128.757559][ T6983] tipc: Disabling bearer <eth:syzkaller0>
[  128.897515][ T7000] __nla_validate_parse: 2 callbacks suppressed
[  128.897537][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'.
[  129.007912][ T7004] syzkaller0: entered promiscuous mode
[  129.028407][ T7004] syzkaller0: entered allmulticast mode
[  129.345365][ T7022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.400'.
[  129.827136][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'.
[  129.844800][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.412'.
[  130.191373][ T7057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.223747][ T7057] syzkaller0: entered promiscuous mode
[  130.235081][ T7057] syzkaller0: entered allmulticast mode
[  130.259970][ T7061] syzkaller0: entered promiscuous mode
[  130.287568][ T7061] syzkaller0: entered allmulticast mode
[  130.330042][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'.
[  130.374348][ T7056] tipc: Resetting bearer <eth:syzkaller0>
[  130.447023][ T7056] tipc: Disabling bearer <eth:syzkaller0>
[  130.869211][ T7090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.902495][ T7090] syzkaller0: entered promiscuous mode
[  130.908096][ T7090] syzkaller0: entered allmulticast mode
[  130.944692][ T7090] tipc: Resetting bearer <eth:syzkaller0>
[  130.963807][ T7089] tipc: Resetting bearer <eth:syzkaller0>
[  131.014926][ T7089] tipc: Disabling bearer <eth:syzkaller0>
[  131.675070][ T7114] syzkaller0: entered promiscuous mode
[  131.685046][ T7114] syzkaller0: entered allmulticast mode
[  131.872635][ T7127] syzkaller0: entered promiscuous mode
[  131.879636][ T7127] syzkaller0: entered allmulticast mode
[  132.224218][ T7145] netlink: 64 bytes leftover after parsing attributes in process `syz.1.454'.
[  132.386504][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'.
[  132.417715][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'.
[  132.434932][ T7156] syzkaller0: entered promiscuous mode
[  132.466150][ T7156] syzkaller0: entered allmulticast mode
[  132.833106][ T7175] syzkaller0: entered promiscuous mode
[  132.854017][ T7175] syzkaller0: entered allmulticast mode
[  134.342877][ T7237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.491'.
[  134.373143][ T7237] openvswitch: netlink: Flow actions attr not present in new flow.
[  135.316355][ T7287] netlink: 'syz.4.512': attribute type 1 has an invalid length.
[  135.334448][ T7287] netlink: 224 bytes leftover after parsing attributes in process `syz.4.512'.
[  135.931615][ T7308] syz.2.522 (7308) used greatest stack depth: 19944 bytes left
[  136.589690][ T7348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.619437][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'.
[  137.301735][ T7378] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  137.301811][   T44] IPVS: starting estimator thread 0...
[  137.431952][ T7380] IPVS: using max 28 ests per chain, 67200 per kthread
[  137.601089][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'.
[  137.610221][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.558'.
[  138.315291][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  138.322098][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  139.229492][ T7413] bridge_slave_0: left allmulticast mode
[  139.235382][ T7413] bridge_slave_0: left promiscuous mode
[  139.243487][ T7413] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.273835][ T7413] bridge_slave_1: left allmulticast mode
[  139.290081][ T7413] bridge_slave_1: left promiscuous mode
[  139.295973][ T7413] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.339633][ T7413] bond0: (slave bond_slave_0): Releasing backup interface
[  139.368913][ T7413] bond0: (slave bond_slave_1): Releasing backup interface
[  139.399906][ T7413] team0: Port device team_slave_0 removed
[  139.414246][ T7413] team0: Port device team_slave_1 removed
[  139.425754][ T7413] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.434372][ T7413] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.444857][ T7413] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.453244][ T7413] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.828052][ T7434] af_packet: tpacket_rcv: packet too big, clamped from 4300 to 3942. macoff=106
[  140.057609][ T7444] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.227087][ T7448] netlink: 52 bytes leftover after parsing attributes in process `syz.3.583'.
[  140.412309][ T7460] netlink: 128 bytes leftover after parsing attributes in process `syz.1.588'.
[  140.583599][ T7448] bond0 (unregistering): Released all slaves
[  140.699247][ T7468] syzkaller0: entered promiscuous mode
[  140.722754][ T7468] syzkaller0: entered allmulticast mode
[  140.807611][ T7480] syzkaller0: entered promiscuous mode
[  140.826687][ T7480] syzkaller0: entered allmulticast mode
[  141.082328][ T7493] syzkaller0: entered promiscuous mode
[  141.087871][ T7493] syzkaller0: entered allmulticast mode
[  141.112293][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'.
[  141.138452][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'.
[  141.711148][ T7523] TCP: TCP_TX_DELAY enabled
[  141.875528][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'.
[  141.934062][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'.
[  141.981078][ T7534] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  142.005317][ T7534] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.285655][ T7550] syzkaller0: entered promiscuous mode
[  142.315949][ T7550] syzkaller0: entered allmulticast mode
[  142.880021][ T7578] syzkaller0: entered promiscuous mode
[  142.885739][ T7578] syzkaller0: entered allmulticast mode
[  143.158673][ T7594] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.637'.
[  143.421694][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'.
[  144.286414][ T7647] netlink: 'syz.1.660': attribute type 21 has an invalid length.
[  144.294788][ T7647] netlink: 44 bytes leftover after parsing attributes in process `syz.1.660'.
[  145.144520][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'.
[  145.168876][ T7677] nbd0: detected capacity change from 0 to 127
[  145.177781][   T51] block nbd0: Receive control failed (result -32)
[  145.233278][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'.
[  146.229541][ T7730] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.261436][ T7730] tipc: Resetting bearer <eth:syzkaller0>
[  146.324365][ T7729] tipc: Disabling bearer <eth:syzkaller0>
[  146.433377][ T7739] syzkaller0: entered promiscuous mode
[  146.446938][ T7739] syzkaller0: entered allmulticast mode
[  147.091094][ T7774] netlink: 132 bytes leftover after parsing attributes in process `syz.4.716'.
[  147.641680][ T7798] netlink: 48 bytes leftover after parsing attributes in process `syz.1.727'.
[  147.670921][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'.
[  147.829995][ T7807] netlink: 132 bytes leftover after parsing attributes in process `syz.2.732'.
[  147.902765][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.733'.
[  147.916327][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.733'.
[  147.953713][ T7810] tipc: Cannot configure node identity twice
[  148.225509][ T7826] netlink: 48 bytes leftover after parsing attributes in process `syz.2.741'.
[  148.288669][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'.
[  150.503791][ T7870] syzkaller0: entered promiscuous mode
[  150.516027][ T7870] syzkaller0: entered allmulticast mode
[  151.005760][ T7896] netlink: 48 bytes leftover after parsing attributes in process `syz.4.764'.
[  151.054896][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'.
[  151.066504][ T7900] syzkaller0: entered promiscuous mode
[  151.078390][ T7900] syzkaller0: entered allmulticast mode
[  151.747568][ T7927] netlink: 128 bytes leftover after parsing attributes in process `syz.4.779'.
[  152.508881][ T7967] netlink: 48 bytes leftover after parsing attributes in process `syz.2.796'.
[  152.586590][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'.
[  153.224129][ T8001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.254304][ T8001] tipc: Resetting bearer <eth:syzkaller0>
[  153.307956][ T7999] tipc: Disabling bearer <eth:syzkaller0>
[  153.310718][ T8006] netlink: 48 bytes leftover after parsing attributes in process `syz.0.812'.
[  153.351027][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'.
[  153.366884][ T7997] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  153.387267][ T7997] syzkaller0: entered promiscuous mode
[  153.409148][ T7997] syzkaller0: entered allmulticast mode
[  154.021539][ T8035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.826'.
[  154.078966][ T8035] netlink: 64 bytes leftover after parsing attributes in process `syz.3.826'.
[  154.087899][ T8035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.826'.
[  154.549388][ T8065] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  154.573111][ T8065] syzkaller0: entered promiscuous mode
[  154.587176][ T8065] syzkaller0: entered allmulticast mode
[  156.236688][ T8152] __nla_validate_parse: 9 callbacks suppressed
[  156.236707][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'.
[  156.350867][ T8159] syzkaller0: entered promiscuous mode
[  156.356576][ T8159] syzkaller0: entered allmulticast mode
[  156.553822][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'.
[  156.795943][ T8175] syzkaller0: entered promiscuous mode
[  156.811668][ T8175] syzkaller0: entered allmulticast mode
[  156.834002][ T8177] netlink: 64 bytes leftover after parsing attributes in process `syz.0.888'.
[  157.356052][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.899'.
[  158.446021][ T8239] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  158.592602][ T8246] netlink: 64 bytes leftover after parsing attributes in process `syz.4.914'.
[  158.899236][ T8259] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  159.853940][ T8301] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  160.549303][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'.
[  160.782626][ T8353] netlink: 64 bytes leftover after parsing attributes in process `syz.1.951'.
[  160.880823][ T8353] team0: Mode "" not found
[  160.897380][ T8356] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.474330][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'.
[  161.551817][ T8380] syzkaller0: entered promiscuous mode
[  161.566848][ T8380] syzkaller0: entered allmulticast mode
[  162.158999][ T8405] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  162.452597][ T8419] netlink: 128 bytes leftover after parsing attributes in process `syz.1.974'.
[  163.232576][ T8446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.252409][ T8446] tipc: Resetting bearer <eth:syzkaller0>
[  163.294987][ T8445] tipc: Disabling bearer <eth:syzkaller0>
[  163.325247][ T8455] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  163.855767][ T8480] netlink: 'syz.0.997': attribute type 1 has an invalid length.
[  164.883112][ T8533] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  165.295066][ T8546] syz_tun: entered promiscuous mode
[  165.313024][ T8546] syz_tun: left promiscuous mode
[  165.552915][ T8560] syzkaller0: entered promiscuous mode
[  165.568533][ T8560] syzkaller0: entered allmulticast mode
[  165.851286][ T8574] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1034'.
[  166.232801][ T8586] netlink: 'syz.2.1036': attribute type 15 has an invalid length.
[  166.311768][ T8588] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  166.674139][ T8603] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  166.991823][ T8617] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1043'.
[  167.001079][ T8617] nbd: must specify at least one socket
[  167.369826][ T8621] syzkaller0: entered promiscuous mode
[  167.375470][ T8621] syzkaller0: entered allmulticast mode
[  167.767666][ T8654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1056'.
[  167.793550][ T8653] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1055'.
[  168.231356][ T8660] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  168.590968][ T8679] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1064'.
[  168.656332][ T8681] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  168.686799][ T8681] syzkaller0: entered promiscuous mode
[  168.698650][ T8681] syzkaller0: entered allmulticast mode
[  168.947811][ T8697] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1069'.
[  169.107982][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1072'.
[  169.409110][ T8713] syzkaller0: entered promiscuous mode
[  169.417015][ T8713] syzkaller0: entered allmulticast mode
[  169.929459][ T8737] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  169.949370][ T8737] syzkaller0: entered promiscuous mode
[  169.970548][ T8737] syzkaller0: entered allmulticast mode
[  170.340332][ T8752] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1090'.
[  170.357119][ T8758] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.364294][ T8757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.377378][ T8758] syzkaller0: entered promiscuous mode
[  170.383131][ T8758] syzkaller0: entered allmulticast mode
[  170.403679][ T8758] tipc: Resetting bearer <eth:syzkaller0>
[  170.413344][ T8756] tipc: Resetting bearer <eth:syzkaller0>
[  170.433772][ T8756] tipc: Disabling bearer <eth:syzkaller0>
[  170.458983][ T8762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.560235][ T8755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.577833][ T8764] syzkaller0: entered promiscuous mode
[  170.585630][ T8764] syzkaller0: entered allmulticast mode
[  171.067293][ T8788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1104'.
[  171.456491][ T8800] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1108'.
[  172.109148][ T8829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1118'.
[  172.659657][ T8842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.700961][ T8842] tipc: Resetting bearer <eth:syzkaller0>
[  172.754877][ T8841] tipc: Disabling bearer <eth:syzkaller0>
[  172.792393][ T8848] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1126'.
[  173.312084][ T8871] syzkaller0: entered promiscuous mode
[  173.319393][ T8871] syzkaller0: entered allmulticast mode
[  173.343090][ T8867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1133'.
[  173.401491][ T8867] vlan3: entered promiscuous mode
[  173.411560][ T8867] team0: entered promiscuous mode
[  173.701298][ T8880] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1140'.
[  174.192459][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'.
[  174.929510][ T8942] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1158'.
[  175.723905][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1175'.
[  175.754114][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'.
[  175.835881][ T8978] syzkaller0: entered promiscuous mode
[  175.847140][ T8978] syzkaller0: entered allmulticast mode
[  175.877599][ T8981] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1176'.
[  176.108927][ T8989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.124717][ T8987] syzkaller0: entered promiscuous mode
[  176.140826][ T8987] syzkaller0: entered allmulticast mode
[  176.197796][ T8985] tipc: Resetting bearer <eth:syzkaller0>
[  176.244479][ T8985] tipc: Disabling bearer <eth:syzkaller0>
[  176.566662][ T9014] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1190'.
[  177.465485][ T9055] raw_sendmsg: syz.4.1211 forgot to set AF_INET. Fix it!
[  177.654992][ T9065] syzkaller0: entered promiscuous mode
[  177.662523][ T9065] syzkaller0: entered allmulticast mode
[  177.891859][ T9076] syzkaller0: entered promiscuous mode
[  177.897565][ T9076] syzkaller0: entered allmulticast mode
[  178.195906][ T9092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1224'.
[  178.221246][ T9092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1224'.
[  178.262218][ T9092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1224'.
[  178.285348][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'.
[  178.286294][ T9092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1224'.
[  178.596829][ T9106] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1232'.
[  178.872428][ T9116] syzkaller0: entered promiscuous mode
[  178.882079][ T9116] syzkaller0: entered allmulticast mode
[  179.128996][ T9126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1241'.
[  179.138261][ T9126] nbd: must specify at least one socket
[  179.288593][ T9133] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1245'.
[  179.472413][ T9140] syzkaller0: entered promiscuous mode
[  179.478095][ T9140] syzkaller0: entered allmulticast mode
[  180.364609][ T9180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1265'.
[  180.460561][ T9184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.497839][ T9184] syzkaller0: entered promiscuous mode
[  180.507235][ T9184] syzkaller0: entered allmulticast mode
[  180.542520][ T9184] tipc: Resetting bearer <eth:syzkaller0>
[  180.571277][ T9183] tipc: Resetting bearer <eth:syzkaller0>
[  180.621963][ T9183] tipc: Disabling bearer <eth:syzkaller0>
[  180.741626][ T9199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1272'.
[  180.832634][ T9204] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  180.852297][ T5859] IPVS: starting estimator thread 0...
[  180.968441][ T9205] IPVS: using max 29 ests per chain, 69600 per kthread
[  181.301161][ T9224] syzkaller0: entered promiscuous mode
[  181.318321][ T9224] syzkaller0: entered allmulticast mode
[  181.542919][ T9231] syzkaller0: entered promiscuous mode
[  181.551302][ T9231] syzkaller0: entered allmulticast mode
[  181.859756][ T9245] syzkaller0: entered promiscuous mode
[  181.869704][ T9245] syzkaller0: entered allmulticast mode
[  182.423274][ T9267] syzkaller0: entered promiscuous mode
[  182.429243][ T9267] syzkaller0: entered allmulticast mode
[  183.006024][ T9291] syzkaller0: entered promiscuous mode
[  183.018488][ T9291] syzkaller0: entered allmulticast mode
[  183.950821][ T9337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.968837][ T9337] syzkaller0: entered promiscuous mode
[  183.974844][ T9337] syzkaller0: entered allmulticast mode
[  184.011906][ T9337] tipc: Resetting bearer <eth:syzkaller0>
[  184.031108][ T9336] tipc: Resetting bearer <eth:syzkaller0>
[  184.058940][ T9336] tipc: Disabling bearer <eth:syzkaller0>
[  184.119194][   T51] block nbd1: Receive control failed (result -32)
[  184.327007][ T9353] syzkaller0: entered promiscuous mode
[  184.345949][ T9353] syzkaller0: entered allmulticast mode
[  184.538977][ T9359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.568720][ T9359] syzkaller0: entered promiscuous mode
[  184.588640][ T9359] syzkaller0: entered allmulticast mode
[  184.625241][ T9359] tipc: Resetting bearer <eth:syzkaller0>
[  184.640456][ T9364] syzkaller0: entered promiscuous mode
[  184.647704][ T9364] syzkaller0: entered allmulticast mode
[  184.669610][ T9357] tipc: Resetting bearer <eth:syzkaller0>
[  184.724877][ T9357] tipc: Disabling bearer <eth:syzkaller0>
[  184.895952][ T9378] __nla_validate_parse: 3 callbacks suppressed
[  184.895977][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1352'.
[  184.925420][ T9378] nbd: must specify a size in bytes for the device
[  185.055395][ T9387] syzkaller0: entered promiscuous mode
[  185.065260][ T9387] syzkaller0: entered allmulticast mode
[  185.490009][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1364'.
[  185.947856][ T9422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.975986][ T9422] tipc: Resetting bearer <eth:syzkaller0>
[  185.996301][ T9421] tipc: Disabling bearer <eth:syzkaller0>
[  186.358594][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'.
[  186.720733][ T9462] syzkaller0: entered promiscuous mode
[  186.726486][ T9462] syzkaller0: entered allmulticast mode
[  187.506254][ T9493] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1402'.
[  188.775657][ T9546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.796343][ T9546] syzkaller0: entered promiscuous mode
[  188.822184][ T9546] syzkaller0: entered allmulticast mode
[  188.870970][ T9545] tipc: Resetting bearer <eth:syzkaller0>
[  188.941890][ T9545] tipc: Disabling bearer <eth:syzkaller0>
[  189.063940][ T9558] vlan0: entered promiscuous mode
[  189.111974][ T9558] team0: Port device vlan0 added
[  189.145439][ T9561] netlink: 'syz.3.1431': attribute type 1 has an invalid length.
[  189.155684][ T9564] tipc: Enabled bearer <eth:team0>, priority 0
[  189.218922][ T9568] netlink: 'syz.4.1433': attribute type 4 has an invalid length.
[  189.219222][ T9563] syzkaller0: entered promiscuous mode
[  189.247230][ T9563] syzkaller0: entered allmulticast mode
[  189.343561][ T9572] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1435'.
[  189.365775][ T9574] syzkaller0: entered promiscuous mode
[  189.379339][ T9574] syzkaller0: entered allmulticast mode
[  189.699913][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'.
[  189.801686][ T9592] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.819705][ T9592] syzkaller0: entered promiscuous mode
[  189.825514][ T9592] syzkaller0: entered allmulticast mode
[  190.062493][ T9591] tipc: Resetting bearer <eth:syzkaller0>
[  190.170751][ T9591] tipc: Disabling bearer <eth:syzkaller0>
[  190.269745][   T44] tipc: Node number set to 3963672046
[  190.381767][ T9613] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.419867][ T9613] syzkaller0: entered promiscuous mode
[  190.425406][ T9613] syzkaller0: entered allmulticast mode
[  190.469839][ T9613] tipc: Resetting bearer <eth:syzkaller0>
[  190.494750][ T9612] tipc: Resetting bearer <eth:syzkaller0>
[  190.563947][ T9612] tipc: Disabling bearer <eth:syzkaller0>
[  190.644242][ T9625] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1457'.
[  191.247392][ T9658] syzkaller0: entered promiscuous mode
[  191.253273][ T9658] syzkaller0: entered allmulticast mode
[  191.649551][ T9675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.658089][ T9675] syzkaller0: entered promiscuous mode
[  191.667676][ T9675] syzkaller0: entered allmulticast mode
[  191.688074][ T9674] tipc: Resetting bearer <eth:syzkaller0>
[  191.719842][ T9674] tipc: Disabling bearer <eth:syzkaller0>
[  191.781762][ T9680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.796057][ T9677] tipc: Resetting bearer <eth:syzkaller0>
[  191.825274][ T9676] tipc: Disabling bearer <eth:syzkaller0>
[  191.888666][ T9682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.900943][ T9682] syzkaller0: entered promiscuous mode
[  191.906493][ T9682] syzkaller0: entered allmulticast mode
[  191.957895][ T9682] tipc: Resetting bearer <eth:syzkaller0>
[  191.989939][ T9681] tipc: Resetting bearer <eth:syzkaller0>
[  192.062094][ T9681] tipc: Disabling bearer <eth:syzkaller0>
[  192.359049][ T9709] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1493'.
[  192.535299][ T9715] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.574439][ T9715] syzkaller0: entered promiscuous mode
[  192.588931][ T9715] syzkaller0: entered allmulticast mode
[  192.608775][ T9719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.618109][ T9714] tipc: Resetting bearer <eth:syzkaller0>
[  192.656610][ T9714] tipc: Disabling bearer <eth:syzkaller0>
[  192.679255][ T9719] tipc: Resetting bearer <eth:syzkaller0>
[  192.719881][ T9717] tipc: Disabling bearer <eth:syzkaller0>
[  193.347649][ T9750] syzkaller1: entered promiscuous mode
[  193.385053][ T9750] syzkaller1: entered allmulticast mode
[  193.997681][ T9783] netlink: 'syz.0.1524': attribute type 1 has an invalid length.
[  194.018355][ T9783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1524'.
[  194.118113][ T9788] syzkaller0: entered promiscuous mode
[  194.123977][ T9788] syzkaller0: entered allmulticast mode
[  194.188510][ T9791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1527'.
[  194.203033][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'.
[  194.232517][ T9794] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.249499][ T9794] syzkaller0: entered promiscuous mode
[  194.258336][ T9794] syzkaller0: entered allmulticast mode
[  194.343733][ T9794] tipc: Resetting bearer <eth:syzkaller0>
[  194.358133][ T9793] tipc: Resetting bearer <eth:syzkaller0>
[  194.377878][ T9793] tipc: Disabling bearer <eth:syzkaller0>
[  194.795704][ T9824] syzkaller0: entered promiscuous mode
[  194.801438][ T9824] syzkaller0: entered allmulticast mode
[  194.833926][ T9826] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.858865][ T9826] syzkaller0: entered promiscuous mode
[  194.864565][ T9826] syzkaller0: entered allmulticast mode
[  194.875624][ T9828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1542'.
[  194.885294][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'.
[  194.925527][ T9826] tipc: Resetting bearer <eth:syzkaller0>
[  194.948642][ T9825] tipc: Resetting bearer <eth:syzkaller0>
[  195.015036][ T9825] tipc: Disabling bearer <eth:syzkaller0>
[  195.023288][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'.
[  195.034139][ T9832] nbd: must specify at least one socket
[  195.042370][ T9833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1543'.
[  195.286354][ T9845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.324555][ T9845] syzkaller0: entered promiscuous mode
[  195.358360][ T9845] syzkaller0: entered allmulticast mode
[  195.407798][ T9844] tipc: Resetting bearer <eth:syzkaller0>
[  195.430455][ T9844] tipc: Disabling bearer <eth:syzkaller0>
[  195.474999][ T9853] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.483616][ T9853] syzkaller0: entered promiscuous mode
[  195.489674][ T9853] syzkaller0: entered allmulticast mode
[  195.513550][ T9853] tipc: Resetting bearer <eth:syzkaller0>
[  195.539317][ T9850] tipc: Resetting bearer <eth:syzkaller0>
[  195.562803][ T9850] tipc: Disabling bearer <eth:syzkaller0>
[  195.724834][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'.
[  195.736267][ T9864] nbd: must specify at least one socket
[  196.170918][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'.
[  196.380876][ T9889] netlink: 'syz.4.1569': attribute type 3 has an invalid length.
[  196.413034][ T9889] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1569'.
[  196.419856][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1571'.
[  196.447511][ T9892] nbd: must specify a size in bytes for the device
[  196.471857][ T9890] syzkaller0: entered promiscuous mode
[  196.477396][ T9890] syzkaller0: entered allmulticast mode
[  196.516201][ T9894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.569077][ T9894] syzkaller0: entered promiscuous mode
[  196.577462][ T9894] syzkaller0: entered allmulticast mode
[  196.616596][ T9894] tipc: Resetting bearer <eth:syzkaller0>
[  196.653240][ T9893] tipc: Resetting bearer <eth:syzkaller0>
[  196.722870][ T9903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1576'.
[  196.732680][ T9893] tipc: Disabling bearer <eth:syzkaller0>
[  196.935344][ T9913] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1581'.
[  196.936784][ T9909] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.979404][ T9909] syzkaller0: entered promiscuous mode
[  196.984935][ T9909] syzkaller0: entered allmulticast mode
[  197.021003][ T9911] syzkaller0: entered promiscuous mode
[  197.027398][ T9911] syzkaller0: entered allmulticast mode
[  197.086171][ T9909] tipc: Resetting bearer <eth:syzkaller0>
[  197.096450][ T9908] tipc: Resetting bearer <eth:syzkaller0>
[  197.115620][ T9908] tipc: Disabling bearer <eth:syzkaller0>
[  197.143467][ T9917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1584'.
[  197.367343][ T9930] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.1586'.
[  197.401695][ T9930] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.1586'.
[  197.415138][ T9930] netlink: 508 bytes leftover after parsing attributes in process `syz.2.1586'.
[  197.465372][ T9935] syzkaller0: entered promiscuous mode
[  197.493963][ T9935] syzkaller0: entered allmulticast mode
[  197.804751][ T9951] netlink: 'syz.0.1596': attribute type 4 has an invalid length.
[  197.815039][ T9951] netlink: 'syz.0.1596': attribute type 4 has an invalid length.
[  199.190181][T10012] nbd: must specify a size in bytes for the device
[  199.293859][T10016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.302789][T10016] syzkaller0: entered promiscuous mode
[  199.311714][T10016] syzkaller0: entered allmulticast mode
[  199.364011][T10016] tipc: Resetting bearer <eth:syzkaller0>
[  199.381343][T10013] tipc: Resetting bearer <eth:syzkaller0>
[  199.406363][T10013] tipc: Disabling bearer <eth:syzkaller0>
[  199.442497][T10020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.479099][T10020] syzkaller0: entered promiscuous mode
[  199.485153][T10020] syzkaller0: entered allmulticast mode
[  199.512056][T10020] tipc: Resetting bearer <eth:syzkaller0>
[  199.541552][T10019] tipc: Resetting bearer <eth:syzkaller0>
[  199.573233][T10019] tipc: Disabling bearer <eth:syzkaller0>
[  199.611215][T10024] syz_tun: entered promiscuous mode
[  199.767690][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  199.777211][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  199.840436][T10029] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.850605][T10029] tipc: Resetting bearer <eth:syzkaller0>
[  199.875962][T10034] nbd: must specify a size in bytes for the device
[  199.919127][T10028] tipc: Disabling bearer <eth:syzkaller0>
[  200.491980][T10054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.503769][T10054] syzkaller0: entered promiscuous mode
[  200.511722][T10054] syzkaller0: entered allmulticast mode
[  200.543660][T10054] tipc: Resetting bearer <eth:syzkaller0>
[  200.556792][T10053] tipc: Resetting bearer <eth:syzkaller0>
[  200.591602][T10053] tipc: Disabling bearer <eth:syzkaller0>
[  200.936717][T10068] __nla_validate_parse: 3 callbacks suppressed
[  200.936739][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'.
[  201.093055][T10074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.101905][T10074] syzkaller0: entered promiscuous mode
[  201.107602][T10074] syzkaller0: entered allmulticast mode
[  201.142819][T10074] tipc: Resetting bearer <eth:syzkaller0>
[  201.182117][T10073] tipc: Resetting bearer <eth:syzkaller0>
[  201.186140][T10078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1654'.
[  201.212332][T10073] tipc: Disabling bearer <eth:syzkaller0>
[  201.421979][T10083] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  201.509464][T10083] syzkaller0: entered promiscuous mode
[  201.515374][T10083] syzkaller0: entered allmulticast mode
[  202.025140][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1668'.
[  202.034717][T10114] nbd: must specify a size in bytes for the device
[  202.215304][T10123] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.229554][T10123] syzkaller0: entered promiscuous mode
[  202.235328][T10123] syzkaller0: entered allmulticast mode
[  202.272281][T10123] tipc: Resetting bearer <eth:syzkaller0>
[  202.290390][T10119] tipc: Resetting bearer <eth:syzkaller0>
[  202.323291][T10119] tipc: Disabling bearer <eth:syzkaller0>
[  202.534246][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'.
[  202.562113][T10135] syz_tun: entered promiscuous mode
[  202.772785][T10143] syzkaller0: entered promiscuous mode
[  202.785525][T10143] syzkaller0: entered allmulticast mode
[  202.814540][T10147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'.
[  202.825002][T10147] nbd: must specify a size in bytes for the device
[  203.613959][T10174] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  205.027528][T10229] syzkaller0: entered promiscuous mode
[  205.038576][T10229] syzkaller0: entered allmulticast mode
[  205.755669][T10249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1722'.
[  206.136429][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1729'.
[  206.503703][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1735'.
[  206.550949][T10276] syz_tun: entered promiscuous mode
[  206.730802][T10285] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1738'.
[  207.402343][T10304] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  207.419418][T10304] syzkaller0: entered promiscuous mode
[  207.425018][T10304] syzkaller0: entered allmulticast mode
[  208.005239][T10327] syzkaller0: entered promiscuous mode
[  208.010915][T10327] syzkaller0: entered allmulticast mode
[  208.541361][T10341] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  208.569455][T10341] syzkaller0: entered promiscuous mode
[  208.575192][T10341] syzkaller0: entered allmulticast mode
[  208.888454][T10348] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  208.926473][T10348] syzkaller0: entered promiscuous mode
[  208.946111][T10348] syzkaller0: entered allmulticast mode
[  209.531270][T10374] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1776'.
[  209.596811][T10374] netlink: 'syz.1.1776': attribute type 12 has an invalid length.
[  209.605163][T10374] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1776'.
[  209.833330][T10149] Set syz1 is full, maxelem 65536 reached
[  210.686252][T10402] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  210.697884][T10404] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1787'.
[  210.761358][T10405] syzkaller0: entered promiscuous mode
[  210.766901][T10405] syzkaller0: entered allmulticast mode
[  211.651712][T10444] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1804'.
[  211.840542][T10453] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  211.858435][T10453] syzkaller0: entered promiscuous mode
[  211.872913][T10453] syzkaller0: entered allmulticast mode
[  211.997660][T10459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.025483][T10459] tipc: Resetting bearer <eth:syzkaller0>
[  212.042985][T10458] tipc: Disabling bearer <eth:syzkaller0>
[  212.444760][T10482] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1821'.
[  212.625024][T10490] netlink: 'syz.0.1825': attribute type 4 has an invalid length.
[  212.934680][T10511] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1835'.
[  213.275740][T10525] syzkaller0: entered promiscuous mode
[  213.292020][T10525] syzkaller0: entered allmulticast mode
[  213.690983][T10548] geneve2: entered promiscuous mode
[  214.155962][T10564] syzkaller0: entered promiscuous mode
[  214.191755][T10564] syzkaller0: entered allmulticast mode
[  214.649111][T10589] syzkaller0: entered promiscuous mode
[  214.671897][T10589] syzkaller0: entered allmulticast mode
[  214.933207][T10609] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1872'.
[  215.061716][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1874'.
[  215.141821][T10615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1875'.
[  215.179590][T10615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1875'.
[  215.613202][T10637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1885'.
[  216.527924][T10681] syzkaller0: entered promiscuous mode
[  216.535776][T10681] syzkaller0: entered allmulticast mode
[  217.191556][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  217.197656][ T5853] Bluetooth: hci0: command 0x0406 tx timeout
[  217.204604][ T5847] Bluetooth: hci2: command 0x0406 tx timeout
[  217.204630][ T5863] Bluetooth: hci3: command 0x0406 tx timeout
[  217.914342][T10727] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1918'.
[  218.387909][T10744] team0: Port device vlan0 removed
[  218.403926][ T7212] tipc: Resetting bearer <eth:team0>
[  218.916135][T10767] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  218.926557][T10767] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  219.212303][T10775] Driver unsupported XDP return value 0 on prog  (id 232) dev N/A, expect packet loss!
[  219.401589][T10779] syzkaller1: entered promiscuous mode
[  219.418877][T10779] syzkaller1: entered allmulticast mode
[  219.606674][T10792] syzkaller0: entered promiscuous mode
[  219.612908][T10792] syzkaller0: entered allmulticast mode
[  219.832589][T10802] bridge_slave_0: left allmulticast mode
[  219.845666][T10802] bridge_slave_0: left promiscuous mode
[  219.865026][T10802] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.886757][T10802] bridge_slave_1: left allmulticast mode
[  219.896954][T10802] bridge_slave_1: left promiscuous mode
[  219.907338][T10802] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.937277][T10802] bond0: (slave bond_slave_0): Releasing backup interface
[  219.967247][T10802] bond0: (slave bond_slave_1): Releasing backup interface
[  220.045348][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1953'.
[  220.245385][T10802] team0: Port device team_slave_0 removed
[  220.296647][T10802] team0: Port device team_slave_1 removed
[  220.326548][T10802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.350122][T10802] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.390186][T10802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.401150][T10802] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.872714][T10843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  220.880350][T10843] IPv6: NLM_F_CREATE should be set when creating new route
[  220.887653][T10843] IPv6: NLM_F_CREATE should be set when creating new route
[  220.895016][T10843] IPv6: NLM_F_CREATE should be set when creating new route
[  220.908998][T10843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  220.934912][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1967'.
[  221.647256][T10867] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1976'.
[  222.026562][T10879] netlink: 'syz.3.1980': attribute type 1 has an invalid length.
[  222.035894][T10879] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.1980'.
[  222.242395][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1986'.
[  222.273819][T10895] netlink: 'syz.2.1986': attribute type 1 has an invalid length.
[  222.291047][T10895] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1986'.
[  222.304966][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1986'.
[  222.412007][T10901] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1988'.
[  222.769659][T10916] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1995'.
[  223.476890][T10949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2007'.
[  223.804201][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2012'.
[  223.824199][T10961] syzkaller1: entered promiscuous mode
[  223.836809][T10961] syzkaller1: entered allmulticast mode
[  225.439368][T11016] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  227.806027][T11097] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2068'.
[  228.698557][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'.
[  228.707488][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2079'.
[  229.061718][T11138] syzkaller1: entered promiscuous mode
[  229.068440][T11138] syzkaller1: entered allmulticast mode
[  229.622631][T11147] sch_fq: defrate 3 ignored.
[  229.818084][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2092'.
[  229.828004][T11157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2092'.
[  230.198142][T11169] syzkaller1: entered promiscuous mode
[  230.205135][T11169] syzkaller1: entered allmulticast mode
[  230.763900][T11188] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  230.824087][T10943] Set syz1 is full, maxelem 65536 reached
[  231.880058][   T44] IPVS: starting estimator thread 0...
[  231.988491][T11237] IPVS: using max 27 ests per chain, 64800 per kthread
[  232.837276][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'.
[  233.612535][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'.
[  234.031170][T11351] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2175'.
[  234.196844][T11360] geneve1: entered promiscuous mode
[  234.213825][T11360] geneve1: entered allmulticast mode
[  234.803860][T11398] netlink: 'syz.2.2195': attribute type 4 has an invalid length.
[  234.823935][T11398] netlink: 'syz.2.2195': attribute type 4 has an invalid length.
[  235.441067][T11424] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2206'.
[  235.669550][T11435] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  235.676932][T11435] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  235.775717][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2213'.
[  235.865632][T11444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2214'.
[  235.932368][T11442] macsec0: entered promiscuous mode
[  235.967392][T11442] macsec0: entered allmulticast mode
[  235.975402][T11442] team0: entered allmulticast mode
[  235.983599][T11442] team0: Device macsec0 is already an upper device of the team interface
[  236.096556][T11442] team0: left allmulticast mode
[  236.183962][T11451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.210041][T11451] syzkaller0: entered promiscuous mode
[  236.232480][T11451] syzkaller0: entered allmulticast mode
[  236.334009][T11447] tipc: Resetting bearer <eth:syzkaller0>
[  236.386168][T11447] tipc: Disabling bearer <eth:syzkaller0>
[  236.789495][T11473] syzkaller0: entered promiscuous mode
[  236.809677][T11473] syzkaller0: entered allmulticast mode
[  237.008581][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'.
[  237.112800][T11489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2228'.
[  237.460037][T11497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.539237][T11497] syzkaller0: entered promiscuous mode
[  237.544892][T11497] syzkaller0: entered allmulticast mode
[  237.617769][T11496] tipc: Resetting bearer <eth:syzkaller0>
[  237.670310][T11496] tipc: Disabling bearer <eth:syzkaller0>
[  237.867288][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2246'.
[  238.259686][T11546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.334446][T11550] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.478055][T11556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2260'.
[  238.678103][T11564] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  238.975370][T11575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.003530][T11575] tipc: Resetting bearer <eth:syzkaller0>
[  239.053929][T11574] tipc: Disabling bearer <eth:syzkaller0>
[  239.306804][T11593] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  239.380077][ T5909] tipc: Node number set to 2054898396
[  239.650141][T11608] syzkaller0: entered promiscuous mode
[  239.655745][T11608] syzkaller0: entered allmulticast mode
[  241.586449][T11647] loop3: detected capacity change from 0 to 40427
[  241.615372][T11647] F2FS-fs (loop3): Image doesn't support compression
[  241.658644][T11647] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value
[  242.057868][T11683] loop0: detected capacity change from 0 to 256
[  242.102288][T11683] FAT-fs (loop0): Directory bread(block 64) failed
[  242.142308][T11683] FAT-fs (loop0): Directory bread(block 65) failed
[  242.155650][T11683] FAT-fs (loop0): Directory bread(block 66) failed
[  242.169868][T11683] FAT-fs (loop0): Directory bread(block 67) failed
[  242.176812][T11683] FAT-fs (loop0): Directory bread(block 68) failed
[  242.191270][T11683] FAT-fs (loop0): Directory bread(block 69) failed
[  242.200315][T11683] FAT-fs (loop0): Directory bread(block 70) failed
[  242.222817][T11683] FAT-fs (loop0): Directory bread(block 71) failed
[  242.243921][T11683] FAT-fs (loop0): Directory bread(block 72) failed
[  242.261113][T11683] FAT-fs (loop0): Directory bread(block 73) failed
[  243.085771][T11715] loop3: detected capacity change from 0 to 1024
[  243.093035][T11715] EXT4-fs: Ignoring removed nomblk_io_submit option
[  243.190179][T11715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.219205][T11715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.021746][T11723] loop4: detected capacity change from 0 to 2048
[  244.113142][T11723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.324620][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2333'.
[  245.217545][   T13] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  245.236150][   T13] EXT4-fs (loop4): Remounting filesystem read-only
[  245.247073][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.544525][ T5923] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[  245.660319][T11756] syzkaller1: entered promiscuous mode
[  245.665959][T11756] syzkaller1: entered allmulticast mode
[  245.717253][ T5923] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  245.727336][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.752038][ T5923] usb 1-1: config 0 descriptor??
[  246.121209][T11771] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  246.146376][T11769] loop1: detected capacity change from 0 to 256
[  246.161946][T11769] exfat: Deprecated parameter 'utf8'
[  246.177722][ T5923] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  246.189241][ T5923] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  246.195842][T11769] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x35d78f5b, utbl_chksum : 0xe619d30d)
[  246.228089][ T5923] asix 1-1:0.0: probe with driver asix failed with error -32
[  246.328442][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'.
[  246.363349][T11779] fuseblk: Unknown parameter '01777777777777777777777'
[  246.437118][T11781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.445386][T11781] syzkaller0: entered promiscuous mode
[  246.451396][T11781] syzkaller0: entered allmulticast mode
[  246.464014][T11781] tipc: Resetting bearer <eth:syzkaller0>
[  246.526172][T11780] tipc: Resetting bearer <eth:syzkaller0>
[  246.569515][T11780] tipc: Disabling bearer <eth:syzkaller0>
[  246.816549][T11796] loop4: detected capacity change from 0 to 1024
[  246.824406][T11796] EXT4-fs: Ignoring removed orlov option
[  246.843195][T11796] EXT4-fs: Ignoring removed nomblk_io_submit option
[  246.875668][T11796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.046303][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'.
[  247.063567][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.158093][T11814] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  247.186007][T11818] loop4: detected capacity change from 0 to 512
[  247.231143][T11818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.264792][T11818] ext4 filesystem being mounted at /495/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  248.094876][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.241686][T11863] syzkaller0: entered promiscuous mode
[  248.253212][T11863] syzkaller0: entered allmulticast mode
[  248.612713][ T5964] usb 1-1: USB disconnect, device number 2
[  248.735951][T11874] loop1: detected capacity change from 0 to 128
[  248.770745][T11874] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0101)
[  248.808320][T11874] FAT-fs (loop1): Filesystem has been set read-only
[  249.915974][T11906] loop3: detected capacity change from 0 to 256
[  249.955426][T11906] FAT-fs (loop3): Directory bread(block 64) failed
[  249.963726][T11906] FAT-fs (loop3): Directory bread(block 65) failed
[  249.975450][T11906] FAT-fs (loop3): Directory bread(block 66) failed
[  249.988108][T11906] FAT-fs (loop3): Directory bread(block 67) failed
[  250.010099][T11906] FAT-fs (loop3): Directory bread(block 68) failed
[  250.017858][T11906] FAT-fs (loop3): Directory bread(block 69) failed
[  250.025803][T11906] FAT-fs (loop3): Directory bread(block 70) failed
[  250.033426][T11906] FAT-fs (loop3): Directory bread(block 71) failed
[  250.040728][T11906] FAT-fs (loop3): Directory bread(block 72) failed
[  250.047302][T11906] FAT-fs (loop3): Directory bread(block 73) failed
[  250.258633][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  250.428259][    T9] usb 3-1: Using ep0 maxpacket: 16
[  250.441385][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.465054][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.484081][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  250.691924][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  250.716408][T11927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.760210][T11922] tipc: Resetting bearer <eth:syzkaller0>
[  250.772365][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.801950][    T9] usb 3-1: config 0 descriptor??
[  250.816383][T11931] syzkaller0: entered promiscuous mode
[  250.826473][T11931] syzkaller0: entered allmulticast mode
[  250.844184][T11921] tipc: Resetting bearer <eth:syzkaller0>
[  250.872225][T11921] tipc: Disabling bearer <eth:syzkaller0>
[  250.910763][T11943] syzkaller0: entered promiscuous mode
[  250.923915][T11943] syzkaller0: entered allmulticast mode
[  251.270555][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  251.304738][    T9] microsoft 0003:045E:07DA.0001: unbalanced collection at end of report description
[  251.354363][    T9] microsoft 0003:045E:07DA.0001: parse failed
[  251.379644][    T9] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22
[  251.531063][T11955] x_tables: ip_tables: osf match: only valid for protocol 6
[  252.088467][    T9] usb 3-1: USB disconnect, device number 2
[  252.824641][   T30] audit: type=1326 audit(2000000005.820:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.2.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7258e929 code=0x7ffc0000
[  252.877147][   T30] audit: type=1326 audit(2000000005.820:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.2.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7258e929 code=0x7ffc0000
[  252.901529][   T30] audit: type=1326 audit(2000000005.820:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.2.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ffb7258e929 code=0x7ffc0000
[  252.927500][   T30] audit: type=1326 audit(2000000005.820:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.2.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7258e929 code=0x7ffc0000
[  252.950370][   T30] audit: type=1326 audit(2000000005.850:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.2.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7258e929 code=0x7ffc0000
[  253.028399][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  253.178486][    T9] usb 4-1: Using ep0 maxpacket: 32
[  253.189369][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.213371][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.261708][    T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  253.301256][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.374659][    T9] usb 4-1: config 0 descriptor??
[  253.481296][T12002] =======================================================
[  253.481296][T12002] WARNING: The mand mount option has been deprecated and
[  253.481296][T12002]          and is ignored by this kernel. Remove the mand
[  253.481296][T12002]          option from the mount to silence this warning.
[  253.481296][T12002] =======================================================
[  253.561980][T12002] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  254.180221][    T9] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  254.361349][T12013] syzkaller0: entered promiscuous mode
[  254.370191][T12013] syzkaller0: entered allmulticast mode
[  254.382912][    T9] usb 4-1: USB disconnect, device number 2
[  254.426668][T12016] netlink: 'syz.2.2447': attribute type 27 has an invalid length.
[  255.220129][T12016] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  255.327830][T12016] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  255.336512][T12016] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  255.389547][T12023] syz_tun: left promiscuous mode
[  255.404154][T12023] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.413405][T12023] 8021q: adding VLAN 0 to HW filter on device team0
[  255.450055][T12023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.547025][T12023] syz.2.2447 (12023) used greatest stack depth: 19672 bytes left
[  255.559186][ T4769] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.582759][ T4769] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.614880][ T4769] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.633707][ T4769] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.712490][T12043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.741946][T12043] syzkaller0: entered promiscuous mode
[  255.747536][T12043] syzkaller0: entered allmulticast mode
[  255.852808][T12050] loop4: detected capacity change from 0 to 512
[  255.999630][T12051] tipc: Resetting bearer <eth:syzkaller0>
[  256.078690][T12050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.092224][T12050] ext4 filesystem being mounted at /508/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  256.672826][T12042] tipc: Resetting bearer <eth:syzkaller0>
[  256.771291][T12042] tipc: Disabling bearer <eth:syzkaller0>
[  257.555938][T12069] loop1: detected capacity change from 0 to 16
[  258.126286][T12069] erofs (device loop1): mounted with root inode @ nid 36.
[  258.934392][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.441877][T12087] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  259.457926][T12087] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  259.466211][T12087] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  259.499494][T12087] tipc: Resetting bearer <eth:syzkaller0>
[  259.596955][T12091] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2471'.
[  260.139374][T12109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.162556][T12109] tipc: Resetting bearer <eth:syzkaller0>
[  260.240571][T12108] tipc: Disabling bearer <eth:syzkaller0>
[  260.261054][T12112] loop2: detected capacity change from 0 to 4096
[  260.279362][T12112] EXT4-fs: inline encryption not supported
[  260.285738][T12112] EXT4-fs: Ignoring removed oldalloc option
[  260.301655][T12112] EXT4-fs (loop2): Test dummy encryption mode enabled
[  260.337972][T12112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.426236][ T4769] tipc: Resetting bearer <eth:syzkaller0>
[  260.467768][T12125] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2485'.
[  260.556971][T12098] loop4: detected capacity change from 0 to 40427
[  261.081906][T12145] syz.1.2488 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  261.230142][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  261.242785][T12098] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  261.252281][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  261.875986][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.346156][T12169] syz.4.2473: attempt to access beyond end of device
[  262.346156][T12169] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  262.710363][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2509'.
[  262.875975][ T5856] syz-executor: attempt to access beyond end of device
[  262.875975][ T5856] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  262.927645][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) 
[  262.927680][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  262.927702][ T5856] Call Trace:
[  262.927711][ T5856]  <TASK>
[  262.927722][ T5856]  dump_stack_lvl+0x189/0x250
[  262.927771][ T5856]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.927798][ T5856]  ? __pfx_queue_work_on+0x10/0x10
[  262.927824][ T5856]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  262.927852][ T5856]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  262.927881][ T5856]  ? f2fs_hw_is_readonly+0x39b/0x470
[  262.927930][ T5856]  f2fs_handle_critical_error+0x37c/0x540
[  262.927974][ T5856]  f2fs_write_end_io+0x495/0x810
[  262.927998][ T5856]  ? blkg_put+0x22/0x240
[  262.928039][ T5856]  __submit_merged_bio+0x27a/0x6a0
[  262.928082][ T5856]  __submit_merged_write_cond+0x255/0x530
[  262.928126][ T5856]  f2fs_write_data_pages+0x261d/0x3000
[  262.928187][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  262.928267][ T5856]  ? check_path+0x21/0x40
[  262.928290][ T5856]  ? check_noncircular+0xe0/0x160
[  262.928374][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  262.928400][ T5856]  do_writepages+0x32e/0x550
[  262.928440][ T5856]  ? do_raw_spin_unlock+0x122/0x240
[  262.928474][ T5856]  filemap_fdatawrite+0x199/0x240
[  262.928502][ T5856]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  262.928582][ T5856]  ? preempt_schedule_thunk+0x16/0x30
[  262.928626][ T5856]  f2fs_sync_dirty_inodes+0x31f/0x830
[  262.928671][ T5856]  f2fs_write_checkpoint+0x95a/0x1df0
[  262.928726][ T5856]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  262.928799][ T5856]  ? try_to_wake_up+0x7e5/0x1290
[  262.928835][ T5856]  ? kill_f2fs_super+0x298/0x6c0
[  262.928868][ T5856]  kill_f2fs_super+0x2c3/0x6c0
[  262.928902][ T5856]  ? __pfx_kill_f2fs_super+0x10/0x10
[  262.928933][ T5856]  ? radix_tree_delete_item+0x2b6/0x400
[  262.928971][ T5856]  ? shrinker_free+0x2ce/0x3e0
[  262.929008][ T5856]  deactivate_locked_super+0xb9/0x130
[  262.929035][ T5856]  cleanup_mnt+0x425/0x4c0
[  262.929070][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.929102][ T5856]  task_work_run+0x1d1/0x260
[  262.929145][ T5856]  ? __pfx_task_work_run+0x10/0x10
[  262.929172][ T5856]  ? __x64_sys_umount+0x122/0x160
[  262.929204][ T5856]  ? exit_to_user_mode_loop+0x40/0x110
[  262.929243][ T5856]  exit_to_user_mode_loop+0xec/0x110
[  262.929276][ T5856]  do_syscall_64+0x2bd/0x3b0
[  262.929306][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.929334][ T5856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.929356][ T5856]  ? clear_bhb_loop+0x60/0xb0
[  262.929384][ T5856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.929405][ T5856] RIP: 0033:0x7ffb1f38fc57
[  262.929433][ T5856] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  262.929452][ T5856] RSP: 002b:00007ffda633f638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  262.929474][ T5856] RAX: 0000000000000000 RBX: 00007ffb1f410925 RCX: 00007ffb1f38fc57
[  262.929489][ T5856] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda633f6f0
[  262.929502][ T5856] RBP: 00007ffda633f6f0 R08: 0000000000000000 R09: 0000000000000000
[  262.929515][ T5856] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda6340780
[  262.929529][ T5856] R13: 00007ffb1f410925 R14: 000000000004014d R15: 00007ffda63407c0
[  262.929566][ T5856]  </TASK>
[  263.302229][ T5856] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  264.523857][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2525'.
[  264.821239][T12236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.833313][T12236] syzkaller0: entered promiscuous mode
[  264.839473][T12236] syzkaller0: entered allmulticast mode
[  264.845405][T12209] loop1: detected capacity change from 0 to 40427
[  264.879375][T12236] tipc: Resetting bearer <eth:syzkaller0>
[  264.893451][T12209] F2FS-fs (loop1): heap/no_heap options were deprecated
[  264.903530][T12235] tipc: Resetting bearer <eth:syzkaller0>
[  264.911733][T12209] F2FS-fs (loop1): build fault injection rate: 19
[  264.919811][T12209] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  264.942192][T12209] F2FS-fs (loop1): invalid crc value
[  264.949920][T12235] tipc: Disabling bearer <eth:syzkaller0>
[  264.984761][T12209] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  265.083666][T12209] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  265.115828][T12209] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  265.169749][T12209] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  265.203322][T12209] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  265.220395][T12209] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  265.238121][T12209] F2FS-fs (loop1): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[  265.274372][T12209] overlayfs: upper fs does not support tmpfile.
[  265.286579][T12252] F2FS-fs (loop1): inject checkpoint error in f2fs_balance_fs of f2fs_create+0x458/0x5c0
[  265.301403][T12209] F2FS-fs (loop1): inject dquot initialize in f2fs_dquot_initialize of f2fs_unlink+0x219/0xac0
[  265.314161][T12252] CPU: 0 UID: 0 PID: 12252 Comm: syz.1.2519 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) 
[  265.314196][T12252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  265.314218][T12252] Call Trace:
[  265.314228][T12252]  <TASK>
[  265.314238][T12252]  dump_stack_lvl+0x189/0x250
[  265.314276][T12252]  ? __pfx_dump_stack_lvl+0x10/0x10
[  265.314305][T12252]  ? __pfx_queue_work_on+0x10/0x10
[  265.314328][T12252]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  265.314358][T12252]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  265.314392][T12252]  ? f2fs_hw_is_readonly+0x39b/0x470
[  265.314437][T12252]  f2fs_handle_critical_error+0x37c/0x540
[  265.314484][T12252]  f2fs_balance_fs+0x32d/0x7f0
[  265.314512][T12252]  ? f2fs_create+0x458/0x5c0
[  265.314536][T12252]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  265.314559][T12252]  ? __pfx_wake_up_var+0x10/0x10
[  265.314606][T12252]  ? do_raw_spin_unlock+0x122/0x240
[  265.314644][T12252]  f2fs_create+0x458/0x5c0
[  265.314677][T12252]  ? __pfx_f2fs_create+0x10/0x10
[  265.314700][T12252]  path_openat+0x14f1/0x3830
[  265.314731][T12252]  ? arch_stack_walk+0xfc/0x150
[  265.314808][T12252]  ? __pfx_path_openat+0x10/0x10
[  265.314830][T12252]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.314883][T12252]  do_filp_open+0x1fa/0x410
[  265.314906][T12252]  ? __lock_acquire+0xab9/0xd20
[  265.314944][T12252]  ? __pfx_do_filp_open+0x10/0x10
[  265.315001][T12252]  ? _raw_spin_unlock+0x28/0x50
[  265.315026][T12252]  ? alloc_fd+0x64c/0x6c0
[  265.315073][T12252]  do_sys_openat2+0x121/0x1c0
[  265.315110][T12252]  ? __se_sys_futex+0x36f/0x400
[  265.315139][T12252]  ? __pfx_do_sys_openat2+0x10/0x10
[  265.315186][T12252]  ? rcu_is_watching+0x15/0xb0
[  265.315215][T12252]  __x64_sys_openat+0x138/0x170
[  265.315245][T12252]  do_syscall_64+0xfa/0x3b0
[  265.315276][T12252]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.315305][T12252]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.315327][T12252]  ? clear_bhb_loop+0x60/0xb0
[  265.315356][T12252]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.315379][T12252] RIP: 0033:0x7f442b18e929
[  265.315401][T12252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.315420][T12252] RSP: 002b:00007f442c0af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  265.315444][T12252] RAX: ffffffffffffffda RBX: 00007f442b3b6080 RCX: 00007f442b18e929
[  265.315461][T12252] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c
[  265.315477][T12252] RBP: 00007f442b210b39 R08: 0000000000000000 R09: 0000000000000000
[  265.315491][T12252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  265.315505][T12252] R13: 0000000000000000 R14: 00007f442b3b6080 R15: 00007ffc9e925908
[  265.315544][T12252]  </TASK>
[  265.315923][T12252] F2FS-fs (loop1): Stopped filesystem due to reason: 1
[  265.460213][T12209] overlayfs: cleanup of 'work/#4' failed (-3)
[  265.610489][T12209] overlayfs: cleanup of 'work/#5' failed (-5)
[  265.636325][T12209] overlayfs: failed to set xattr on upper
[  265.657177][T12209] overlayfs: ...falling back to redirect_dir=nofollow.
[  265.831229][T12209] overlayfs: ...falling back to index=off.
[  265.845632][T12209] overlayfs: ...falling back to uuid=null.
[  265.983086][ T5846] syz-executor: attempt to access beyond end of device
[  265.983086][ T5846] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  266.036633][ T5846] syz-executor: attempt to access beyond end of device
[  266.036633][ T5846] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  266.098925][T12269] loop4: detected capacity change from 0 to 1024
[  266.120834][T12269] EXT4-fs (loop4): Test dummy encryption mode enabled
[  266.162990][T12269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.264250][T12269] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  266.294307][T12275] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  266.467249][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.248294][ T5859] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  267.408394][ T5859] usb 4-1: Using ep0 maxpacket: 16
[  267.426933][ T5859] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  267.454521][ T5859] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  267.482251][ T5859] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  267.499094][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.508087][ T5859] usb 4-1: Product: syz
[  267.517161][ T5859] usb 4-1: Manufacturer: syz
[  267.522261][ T5859] usb 4-1: SerialNumber: syz
[  267.743808][ T5859] usb 4-1: 0:2 : does not exist
[  267.765852][ T5859] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  267.914792][ T5859] usb 4-1: USB disconnect, device number 3
[  268.087925][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  268.097720][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  268.110651][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  268.119865][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  268.131705][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  268.645376][T12321] syzkaller1: entered promiscuous mode
[  268.658614][T12321] syzkaller1: entered allmulticast mode
[  268.933929][T12312] chnl_net:caif_netlink_parms(): no params data found
[  269.386066][T12339] syzkaller0: entered promiscuous mode
[  269.391937][T12339] syzkaller0: entered allmulticast mode
[  269.508843][T12344] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  270.154262][T12312] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.197825][T12312] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.228137][T12312] bridge_slave_0: entered allmulticast mode
[  270.232528][ T5861] Bluetooth: hci2: command tx timeout
[  270.249449][T12312] bridge_slave_0: entered promiscuous mode
[  270.326266][T12353] loop0: detected capacity change from 0 to 2048
[  270.349811][T12312] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.357976][T12312] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.377599][T12353]  loop0: p1 < > p4
[  270.382209][T12312] bridge_slave_1: entered allmulticast mode
[  270.394292][T12312] bridge_slave_1: entered promiscuous mode
[  270.404056][T12353] loop0: p4 size 8388608 extends beyond EOD, truncated
[  270.514937][T12312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.559935][T12312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.618520][T12036] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  270.778432][T12036] usb 3-1: Using ep0 maxpacket: 32
[  270.795394][T12036] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.822927][T12036] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.855554][T12036] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  270.884518][T12036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.916023][T12312] team0: Port device team_slave_0 added
[  270.928738][T12036] usb 3-1: config 0 descriptor??
[  270.947516][T12312] team0: Port device team_slave_1 added
[  271.351983][T12036] kye 0003:0458:0087.0003: unknown main item tag 0x0
[  271.368706][T12036] kye 0003:0458:0087.0003: unknown main item tag 0x0
[  271.379843][T12312] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.392349][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.424002][T12036] kye 0003:0458:0087.0003: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.2-1/input0
[  271.454779][T12312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.467138][T12368] syzkaller1: entered promiscuous mode
[  271.475214][T12368] syzkaller1: entered allmulticast mode
[  271.486537][T12312] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.494930][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.522742][T12312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.565325][T12033] usb 3-1: USB disconnect, device number 3
[  271.750337][T12312] hsr_slave_0: entered promiscuous mode
[  271.759572][T12312] hsr_slave_1: entered promiscuous mode
[  271.774198][T12312] debugfs: 'hsr0' already exists in 'hsr'
[  271.785602][T12312] Cannot create hsr debugfs directory
[  272.308352][ T5861] Bluetooth: hci2: command tx timeout
[  272.371771][T12312] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  272.407074][T12312] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  272.426091][T12312] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  272.456844][T12312] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  272.775521][T12407] syzkaller0: entered promiscuous mode
[  272.817852][T12407] syzkaller0: entered allmulticast mode
[  272.985573][T12312] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.643816][T12312] 8021q: adding VLAN 0 to HW filter on device team0
[  273.696761][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.704075][ T7211] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.781872][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.789179][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.876185][T12416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.886314][T12416] syzkaller0: entered promiscuous mode
[  273.908430][T12416] syzkaller0: entered allmulticast mode
[  273.912972][T12420] : Can't lookup blockdev
[  273.969456][T12416] tipc: Resetting bearer <eth:syzkaller0>
[  274.018811][T12415] tipc: Resetting bearer <eth:syzkaller0>
[  274.049283][T12415] tipc: Disabling bearer <eth:syzkaller0>
[  274.086915][T12312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  274.123182][T12312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  274.429375][T12427] loop4: detected capacity change from 0 to 2048
[  274.564922][ T5861] Bluetooth: hci2: command tx timeout
[  274.712287][T12427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.574509][T12422] loop2: detected capacity change from 0 to 40427
[  275.622143][T12422] F2FS-fs (loop2): build fault injection rate: 771
[  275.662130][T12422] F2FS-fs (loop2): invalid crc value
[  275.948877][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.987013][T12422] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  276.354005][ T5844] syz-executor: attempt to access beyond end of device
[  276.354005][ T5844] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  276.388725][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) 
[  276.388761][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  276.388771][ T5844] Call Trace:
[  276.388778][ T5844]  <TASK>
[  276.388786][ T5844]  dump_stack_lvl+0x189/0x250
[  276.388815][ T5844]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.388833][ T5844]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  276.388855][ T5844]  ? __pfx_queue_work_on+0x10/0x10
[  276.388874][ T5844]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  276.388894][ T5844]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  276.388915][ T5844]  ? f2fs_hw_is_readonly+0x39b/0x470
[  276.388948][ T5844]  f2fs_handle_critical_error+0x37c/0x540
[  276.388981][ T5844]  f2fs_write_end_io+0x495/0x810
[  276.388998][ T5844]  ? blkg_put+0x22/0x240
[  276.389030][ T5844]  __submit_merged_bio+0x27a/0x6a0
[  276.389082][ T5844]  __submit_merged_write_cond+0x255/0x530
[  276.389116][ T5844]  f2fs_write_data_pages+0x261d/0x3000
[  276.389164][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.389251][ T5844]  ? __lock_acquire+0xab9/0xd20
[  276.389286][ T5844]  ? do_raw_spin_lock+0x121/0x290
[  276.389320][ T5844]  ? do_raw_spin_unlock+0x122/0x240
[  276.389344][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.389366][ T5844]  do_writepages+0x32e/0x550
[  276.389397][ T5844]  ? do_raw_spin_unlock+0x122/0x240
[  276.389424][ T5844]  filemap_fdatawrite+0x199/0x240
[  276.389445][ T5844]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  276.389511][ T5844]  ? do_raw_spin_unlock+0x122/0x240
[  276.389538][ T5844]  f2fs_sync_dirty_inodes+0x31f/0x830
[  276.389573][ T5844]  f2fs_write_checkpoint+0x95a/0x1df0
[  276.389622][ T5844]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  276.389695][ T5844]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  276.389718][ T5844]  ? kfree+0x18e/0x440
[  276.389750][ T5844]  ? kill_f2fs_super+0x298/0x6c0
[  276.389775][ T5844]  kill_f2fs_super+0x2c3/0x6c0
[  276.389801][ T5844]  ? __pfx_kill_f2fs_super+0x10/0x10
[  276.389819][ T5844]  ? radix_tree_delete_item+0x2b6/0x400
[  276.389848][ T5844]  ? shrinker_free+0x2ce/0x3e0
[  276.389877][ T5844]  deactivate_locked_super+0xb9/0x130
[  276.389897][ T5844]  cleanup_mnt+0x425/0x4c0
[  276.389925][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.389951][ T5844]  task_work_run+0x1d1/0x260
[  276.389978][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  276.389999][ T5844]  ? __x64_sys_umount+0x122/0x160
[  276.390023][ T5844]  ? exit_to_user_mode_loop+0x40/0x110
[  276.390053][ T5844]  exit_to_user_mode_loop+0xec/0x110
[  276.390079][ T5844]  do_syscall_64+0x2bd/0x3b0
[  276.390101][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.390123][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.390140][ T5844]  ? clear_bhb_loop+0x60/0xb0
[  276.390161][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.390178][ T5844] RIP: 0033:0x7ffb7258fc57
[  276.390194][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  276.390208][ T5844] RSP: 002b:00007ffe0eb8abf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  276.390226][ T5844] RAX: 0000000000000000 RBX: 00007ffb72610925 RCX: 00007ffb7258fc57
[  276.390237][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0eb8acb0
[  276.390248][ T5844] RBP: 00007ffe0eb8acb0 R08: 0000000000000000 R09: 0000000000000000
[  276.390258][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0eb8bd40
[  276.390269][ T5844] R13: 00007ffb72610925 R14: 0000000000043684 R15: 00007ffe0eb8bd80
[  276.390296][ T5844]  </TASK>
[  276.390309][ T5844] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  276.416353][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.643346][ T5861] Bluetooth: hci2: command tx timeout
[  276.796840][T12420] loop3: detected capacity change from 0 to 1024
[  276.837161][T12420] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  276.847302][T12420] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (4096), stripe is disabled
[  277.146320][T12420] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  277.156967][T12420] EXT4-fs (loop3): orphan cleanup on readonly fs
[  277.173858][T12420] EXT4-fs error (device loop3): __ext4_get_inode_loc:4791: comm syz.3.2590: Invalid inode table block 0 in block_group 0
[  277.201282][T12420] EXT4-fs (loop3): Remounting filesystem read-only
[  277.207862][T12420] Quota error (device loop3): write_blk: dquota write failed
[  277.220375][T12420] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  277.233750][T12420] EXT4-fs (loop3): 1 truncate cleaned up
[  277.550511][T12312] veth0_vlan: entered promiscuous mode
[  277.611983][T12312] veth1_vlan: entered promiscuous mode
[  277.652106][T12420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  277.765884][T12312] veth0_macvtap: entered promiscuous mode
[  277.806540][T12312] veth1_macvtap: entered promiscuous mode
[  277.893414][T12312] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.046900][T12312] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.103839][ T7212] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.151574][ T7212] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.177385][ T7212] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.197498][ T7212] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.402893][ T7212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.430665][ T7212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.547485][ T7212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.570722][ T7212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.105501][T12480] loop4: detected capacity change from 0 to 256
[  279.120924][T12480] tipc: New replicast peer: 255.255.255.255
[  279.128920][T12480] tipc: Enabled bearer <udp:syz2>, priority 10
[  279.158535][T12031] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  279.285125][T12485] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  279.351355][T12031] usb 6-1: Using ep0 maxpacket: 16
[  279.365609][T12031] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  279.402985][T12031] usb 6-1: config 1 interface 0 has no altsetting 0
[  279.415335][T12031] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.40
[  279.430045][T12031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.451523][T12031] usb 6-1: Product: à Š
[  279.455770][T12031] usb 6-1: Manufacturer: Є
[  279.463048][T12031] usb 6-1: SerialNumber: syz
[  279.482474][T12489] tmpfs: Unknown parameter 'nolazytime0000000000000,00000000000005400000000,00000000000000000000000'
[  279.662167][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'.
[  279.775731][T12497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2614'.
[  280.238514][T12036] tipc: Node number set to 3068457153
[  280.354780][T12513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.366488][T12031] usbhid 6-1:1.0: can't add hid device: -71
[  280.389569][T12031] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  280.401546][T12513] syzkaller0: entered promiscuous mode
[  280.422641][T12513] syzkaller0: entered allmulticast mode
[  280.447926][T12031] usb 6-1: USB disconnect, device number 2
[  280.526086][T12513] tipc: Resetting bearer <eth:syzkaller0>
[  280.556543][T12512] tipc: Resetting bearer <eth:syzkaller0>
[  280.601921][T12512] tipc: Disabling bearer <eth:syzkaller0>
[  280.654181][T12516] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  281.059527][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.571997][T12551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.592664][T12551] syzkaller0: entered promiscuous mode
[  281.610729][T12551] syzkaller0: entered allmulticast mode
[  281.723305][T12554] tipc: Resetting bearer <eth:syzkaller0>
[  281.757360][T12549] tipc: Resetting bearer <eth:syzkaller0>
[  281.839859][T12549] tipc: Disabling bearer <eth:syzkaller0>
[  281.858292][T12030] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  281.953610][T12560] syzkaller0: entered promiscuous mode
[  281.960673][T12560] syzkaller0: entered allmulticast mode
[  282.202690][T12030] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.233606][T12030] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.247708][T12563] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  282.274236][T12030] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  282.309688][T12030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.349450][T12030] usb 5-1: config 0 descriptor??
[  282.575199][   T30] audit: type=1326 audit(2000000035.570:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  282.700921][   T30] audit: type=1326 audit(2000000035.570:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  282.861519][   T30] audit: type=1326 audit(2000000035.570:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  282.885847][   T30] audit: type=1326 audit(2000000035.600:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  282.911739][   T30] audit: type=1326 audit(2000000035.600:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  283.372469][   T30] audit: type=1326 audit(2000000035.650:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  283.526916][   T30] audit: type=1326 audit(2000000035.650:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  283.551226][   T30] audit: type=1326 audit(2000000035.650:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  283.601648][   T30] audit: type=1326 audit(2000000035.660:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  283.624748][   T30] audit: type=1326 audit(2000000035.660:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.5.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  284.696673][T12030] usbhid 5-1:0.0: can't add hid device: -71
[  284.718536][T12030] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  284.786502][T12030] usb 5-1: USB disconnect, device number 2
[  287.225691][T12606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.284944][T12606] syzkaller0: entered promiscuous mode
[  287.315008][T12606] syzkaller0: entered allmulticast mode
[  287.435634][T12611] tipc: Resetting bearer <eth:syzkaller0>
[  287.504399][T12605] tipc: Resetting bearer <eth:syzkaller0>
[  287.639351][T12605] tipc: Disabling bearer <eth:syzkaller0>
[  287.821568][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  287.821592][   T30] audit: type=1326 audit(2000000040.740:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  287.880138][T12619] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.933541][   T30] audit: type=1326 audit(2000000040.740:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  287.975349][   T30] audit: type=1326 audit(2000000040.750:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  288.187592][T12628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  288.194903][T12628] IPv6: NLM_F_CREATE should be set when creating new route
[  288.364311][   T30] audit: type=1326 audit(2000000040.750:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  288.670643][   T30] audit: type=1326 audit(2000000040.750:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  288.693528][   T30] audit: type=1326 audit(2000000040.750:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  288.720456][T12632] loop0: detected capacity change from 0 to 16
[  288.742580][   T30] audit: type=1326 audit(2000000040.750:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  288.785245][T12632] erofs (device loop0): mounted with root inode @ nid 36.
[  288.817785][   T30] audit: type=1326 audit(2000000040.750:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  288.841254][   T30] audit: type=1326 audit(2000000040.750:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  288.871541][   T30] audit: type=1326 audit(2000000040.750:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7238e929 code=0x7ffc0000
[  288.956744][ T5843] erofs (device loop0): bogus dirent @ nid 46
[  288.984262][ T5843] erofs (device loop0): invalid de[0].nameoff 0 @ nid 89
[  289.003595][ T5843] erofs (device loop0): invalid de[0].nameoff 0 @ nid 89
[  289.399609][T12651] loop5: detected capacity change from 0 to 512
[  289.407118][T12651] EXT4-fs: Ignoring removed mblk_io_submit option
[  289.428832][T12651] EXT4-fs: Ignoring removed mblk_io_submit option
[  289.435361][T12651] EXT4-fs: Ignoring removed mblk_io_submit option
[  289.468268][T12651] EXT4-fs (loop5): Test dummy encryption mode enabled
[  289.493749][T12651] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  289.532485][T12651] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  289.567953][T12651] EXT4-fs (loop5): 1 truncate cleaned up
[  289.579335][T12651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.625964][T12658] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.634034][T12658] syzkaller0: entered promiscuous mode
[  289.640329][T12658] syzkaller0: entered allmulticast mode
[  289.652091][T12312] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.679574][T12658] tipc: Resetting bearer <eth:syzkaller0>
[  289.696129][T12657] tipc: Resetting bearer <eth:syzkaller0>
[  289.728112][T12657] tipc: Disabling bearer <eth:syzkaller0>
[  290.218871][T12674] rtc_cmos 00:00: Alarms can be up to one day in the future
[  290.953372][T12033] rtc_cmos 00:00: Alarms can be up to one day in the future
[  290.993600][T12033] rtc_cmos 00:00: Alarms can be up to one day in the future
[  291.014182][T12680] loop2: detected capacity change from 0 to 1024
[  291.018627][T12033] rtc_cmos 00:00: Alarms can be up to one day in the future
[  291.049316][T12680] EXT4-fs: Ignoring removed orlov option
[  291.058870][T12033] rtc_cmos 00:00: Alarms can be up to one day in the future
[  291.077515][T12680] EXT4-fs: Ignoring removed nomblk_io_submit option
[  291.084342][T12033] rtc rtc0: __rtc_set_alarm: err=-22
[  291.140044][T12680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.232802][T12689] xt_hashlimit: max too large, truncated to 1048576
[  291.286941][T12689] loop0: detected capacity change from 0 to 512
[  291.507100][T12689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.520361][T12689] ext4 filesystem being mounted at /521/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  292.085295][T12694] process 'syz.3.2684' launched '/dev/fd/8' with NULL argv: empty string added
[  292.187730][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.756288][T12704] loop2: detected capacity change from 0 to 128
[  292.848967][T12704] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  292.888711][T12672] loop4: detected capacity change from 0 to 40427
[  292.906428][T12704] ext4 filesystem being mounted at /583/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  292.932763][T12672] F2FS-fs (loop4): build fault injection rate: 690
[  292.957109][T12672] F2FS-fs (loop4): invalid crc value
[  292.977390][T12704] syz.2.2689 (pid 12704) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  293.068762][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  293.196272][ T5844] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  293.238517][    T9] usb 6-1: Using ep0 maxpacket: 16
[  293.255189][    T9] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  293.297252][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.321126][    T9] usb 6-1: config 222 has an invalid interface number: 127 but max is 0
[  293.349221][    T9] usb 6-1: config 222 has no interface number 0
[  293.372392][    T9] usb 6-1: config 222 has an invalid interface number: 127 but max is 0
[  293.393115][    T9] usb 6-1: config 222 has no interface number 0
[  293.416597][    T9] usb 6-1: config 222 has an invalid interface number: 127 but max is 0
[  293.426989][    T9] usb 6-1: config 222 has no interface number 0
[  293.445952][    T9] usb 6-1: config 222 has an invalid interface number: 127 but max is 0
[  293.460755][    T9] usb 6-1: config 222 has no interface number 0
[  293.484957][    T9] usb 6-1: config 222 has an invalid interface number: 127 but max is 0
[  293.501757][    T9] usb 6-1: config 222 has no interface number 0
[  293.517415][    T9] usb 6-1: config 222 has an invalid interface number: 127 but max is 0
[  293.548590][    T9] usb 6-1: config 222 has no interface number 0
[  293.556467][    T9] usb 6-1: config 222 has an invalid interface number: 127 but max is 0
[  293.578377][    T9] usb 6-1: config 222 has no interface number 0
[  293.591333][    T9] usb 6-1: config 222 has an invalid interface number: 127 but max is 0
[  293.607016][    T9] usb 6-1: config 222 has no interface number 0
[  293.658856][    T9] usb 6-1: New USB device found, idVendor=19d2, idProduct=1142, bcdDevice=1b.18
[  293.703887][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.750053][    T9] usb 6-1: Product: syz
[  293.761643][    T9] usb 6-1: Manufacturer: syz
[  293.773168][    T9] usb 6-1: SerialNumber: syz
[  293.790268][T12722] loop0: detected capacity change from 0 to 512
[  293.797561][T12722] EXT4-fs: Ignoring removed nomblk_io_submit option
[  293.809789][T12722] EXT4-fs (loop0): Test dummy encryption mode enabled
[  293.816701][T12722] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  293.859432][T12722] EXT4-fs (loop0): failed to initialize system zone (-117)
[  293.866922][T12722] EXT4-fs (loop0): mount failed
[  293.920143][T12727] futex_wake_op: syz.2.2697 tries to shift op by -1; fix this program
[  294.125040][    T9] hub 6-1:222.127: Invalid hub with more than one config or interface
[  294.145581][    T9] hub 6-1:222.127: probe with driver hub failed with error -22
[  294.232633][    T9] option 6-1:222.127: GSM modem (1-port) converter detected
[  295.057207][    T9] usb 6-1: USB disconnect, device number 3
[  295.065813][    T9] option 6-1:222.127: device disconnected
[  295.113426][T12734] loop4: detected capacity change from 0 to 256
[  295.976645][T12759] bridge0: port 1(syz_tun) entered blocking state
[  295.984180][T12759] bridge0: port 1(syz_tun) entered disabled state
[  295.994362][T12759] syz_tun: entered allmulticast mode
[  296.021308][T12759] syz_tun: left allmulticast mode
[  296.516026][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  296.682941][    T9] usb 1-1: Using ep0 maxpacket: 8
[  296.695813][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.727699][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.748541][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  296.762232][T12762] loop2: detected capacity change from 0 to 16
[  296.774261][T12762] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì'
[  296.780888][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  296.795249][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.807099][    T9] usb 1-1: config 0 descriptor??
[  297.028756][ T5859] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  297.191739][ T5859] usb 5-1: Using ep0 maxpacket: 16
[  297.202563][ T5859] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  297.212933][T12773] tipc: Started in network mode
[  297.217863][T12773] tipc: Node identity 6e25a2dc2048, cluster identity 4711
[  297.218440][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.244738][    T9] logitech 0003:046D:C293.0004: unknown main item tag 0x0
[  297.247276][T12773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.258325][    T9] logitech 0003:046D:C293.0004: unknown main item tag 0x0
[  297.273750][ T5859] usb 5-1: Product: syz
[  297.288453][ T5859] usb 5-1: Manufacturer: syz
[  297.292175][T12777] syzkaller0: entered promiscuous mode
[  297.293210][ T5859] usb 5-1: SerialNumber: syz
[  297.303729][    T9] logitech 0003:046D:C293.0004: unknown main item tag 0x0
[  297.304407][T12777] syzkaller0: entered allmulticast mode
[  297.311966][    T9] logitech 0003:046D:C293.0004: unknown main item tag 0x0
[  297.353860][    T9] logitech 0003:046D:C293.0004: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.0-1/input0
[  297.363298][T12773] tipc: Resetting bearer <eth:syzkaller0>
[  297.377250][    T9] logitech 0003:046D:C293.0004: no inputs found
[  297.401087][T12772] tipc: Resetting bearer <eth:syzkaller0>
[  297.441100][T12772] tipc: Disabling bearer <eth:syzkaller0>
[  297.444712][    T9] usb 1-1: USB disconnect, device number 3
[  297.837029][T12792] loop5: detected capacity change from 0 to 256
[  297.973148][ T5859] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  298.824596][ T5859] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71
[  298.970743][ T5859] usb 5-1: USB disconnect, device number 3
[  299.075851][T12798] loop2: detected capacity change from 0 to 1024
[  299.109697][ T5857] Bluetooth: hci4: command 0x0406 tx timeout
[  299.414219][T12800] 
[  299.416598][T12800] ======================================================
[  299.423637][T12800] WARNING: possible circular locking dependency detected
[  299.430780][T12800] 6.16.0-rc4-next-20250704-syzkaller #0 Not tainted
[  299.437392][T12800] ------------------------------------------------------
[  299.444427][T12800] syz.4.2726/12800 is trying to acquire lock:
[  299.450517][T12800] ffff8881433eb358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  299.459791][T12800] 
[  299.459791][T12800] but task is already holding lock:
[  299.467208][T12800] ffff8881433ea368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  299.476830][T12800] 
[  299.476830][T12800] which lock already depends on the new lock.
[  299.476830][T12800] 
[  299.487347][T12800] 
[  299.487347][T12800] the existing dependency chain (in reverse order) is:
[  299.496400][T12800] 
[  299.496400][T12800] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  299.504879][T12800]        lock_acquire+0x120/0x360
[  299.509952][T12800]        down_write+0x96/0x1f0
[  299.514785][T12800]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  299.521075][T12800]        nbd_start_device+0x16c/0xac0
[  299.526493][T12800]        nbd_genl_connect+0x1250/0x1930
[  299.532072][T12800]        genl_family_rcv_msg_doit+0x212/0x300
[  299.538180][T12800]        genl_rcv_msg+0x60e/0x790
[  299.543239][T12800]        netlink_rcv_skb+0x208/0x470
[  299.548566][T12800]        genl_rcv+0x28/0x40
[  299.553107][T12800]        netlink_unicast+0x75b/0x8d0
[  299.558525][T12800]        netlink_sendmsg+0x805/0xb30
[  299.563935][T12800]        __sock_sendmsg+0x219/0x270
[  299.569189][T12800]        ____sys_sendmsg+0x505/0x830
[  299.574505][T12800]        ___sys_sendmsg+0x21f/0x2a0
[  299.579737][T12800]        __x64_sys_sendmsg+0x19b/0x260
[  299.585227][T12800]        do_syscall_64+0xfa/0x3b0
[  299.590292][T12800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.596739][T12800] 
[  299.596739][T12800] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  299.604616][T12800]        lock_acquire+0x120/0x360
[  299.609666][T12800]        __mutex_lock+0x182/0xe80
[  299.614789][T12800]        refcount_dec_and_mutex_lock+0x30/0xa0
[  299.620954][T12800]        nbd_config_put+0x2c/0x790
[  299.626094][T12800]        nbd_release+0xfe/0x140
[  299.630951][T12800]        bdev_release+0x536/0x650
[  299.635988][T12800]        blkdev_release+0x15/0x20
[  299.641017][T12800]        __fput+0x44c/0xa70
[  299.645627][T12800]        fput_close_sync+0x119/0x200
[  299.650925][T12800]        __x64_sys_close+0x7f/0x110
[  299.656127][T12800]        do_syscall_64+0xfa/0x3b0
[  299.661263][T12800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.667681][T12800] 
[  299.667681][T12800] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  299.675513][T12800]        validate_chain+0xb9b/0x2140
[  299.680988][T12800]        __lock_acquire+0xab9/0xd20
[  299.686245][T12800]        lock_acquire+0x120/0x360
[  299.691288][T12800]        __mutex_lock+0x182/0xe80
[  299.696328][T12800]        __del_gendisk+0x129/0x9e0
[  299.701455][T12800]        del_gendisk+0xe8/0x160
[  299.706310][T12800]        loop_remove+0x42/0xc0
[  299.711101][T12800]        loop_control_ioctl+0x4ac/0x5a0
[  299.716661][T12800]        __se_sys_ioctl+0xf9/0x170
[  299.721780][T12800]        do_syscall_64+0xfa/0x3b0
[  299.726839][T12800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.733350][T12800] 
[  299.733350][T12800] other info that might help us debug this:
[  299.733350][T12800] 
[  299.743598][T12800] Chain exists of:
[  299.743598][T12800]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  299.743598][T12800] 
[  299.757883][T12800]  Possible unsafe locking scenario:
[  299.757883][T12800] 
[  299.765353][T12800]        CPU0                    CPU1
[  299.770813][T12800]        ----                    ----
[  299.776192][T12800]   rlock(&set->update_nr_hwq_lock);
[  299.781516][T12800]                                lock(&nbd->config_lock);
[  299.788640][T12800]                                lock(&set->update_nr_hwq_lock);
[  299.796409][T12800]   lock(&disk->open_mutex);
[  299.801037][T12800] 
[  299.801037][T12800]  *** DEADLOCK ***
[  299.801037][T12800] 
[  299.809192][T12800] 1 lock held by syz.4.2726/12800:
[  299.814310][T12800]  #0: ffff8881433ea368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  299.824340][T12800] 
[  299.824340][T12800] stack backtrace:
[  299.830235][T12800] CPU: 1 UID: 0 PID: 12800 Comm: syz.4.2726 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) 
[  299.830259][T12800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  299.830272][T12800] Call Trace:
[  299.830281][T12800]  <TASK>
[  299.830291][T12800]  dump_stack_lvl+0x189/0x250
[  299.830318][T12800]  ? __pfx_dump_stack_lvl+0x10/0x10
[  299.830339][T12800]  ? __pfx__printk+0x10/0x10
[  299.830364][T12800]  ? print_lock_name+0xde/0x100
[  299.830390][T12800]  print_circular_bug+0x2ee/0x310
[  299.830412][T12800]  check_noncircular+0x134/0x160
[  299.830435][T12800]  validate_chain+0xb9b/0x2140
[  299.830456][T12800]  ? stack_depot_save_flags+0x40/0x900
[  299.830485][T12800]  __lock_acquire+0xab9/0xd20
[  299.830514][T12800]  ? __del_gendisk+0x129/0x9e0
[  299.830529][T12800]  lock_acquire+0x120/0x360
[  299.830554][T12800]  ? __del_gendisk+0x129/0x9e0
[  299.830572][T12800]  ? lockdep_unlock+0x89/0x120
[  299.830599][T12800]  __mutex_lock+0x182/0xe80
[  299.830623][T12800]  ? __del_gendisk+0x129/0x9e0
[  299.830643][T12800]  ? __del_gendisk+0x129/0x9e0
[  299.830659][T12800]  ? __pfx___mutex_lock+0x10/0x10
[  299.830683][T12800]  ? __pfx___might_resched+0x10/0x10
[  299.830704][T12800]  ? __lock_acquire+0xab9/0xd20
[  299.830730][T12800]  ? disk_del_events+0xb5/0x210
[  299.830747][T12800]  ? __del_gendisk+0xc1/0x9e0
[  299.830764][T12800]  __del_gendisk+0x129/0x9e0
[  299.830780][T12800]  ? del_gendisk+0xe0/0x160
[  299.830798][T12800]  ? __pfx___del_gendisk+0x10/0x10
[  299.830816][T12800]  ? down_read+0x1ad/0x2e0
[  299.830842][T12800]  del_gendisk+0xe8/0x160
[  299.830858][T12800]  loop_remove+0x42/0xc0
[  299.830883][T12800]  loop_control_ioctl+0x4ac/0x5a0
[  299.830906][T12800]  ? __fget_files+0x2a/0x420
[  299.830932][T12800]  ? __pfx_loop_control_ioctl+0x10/0x10
[  299.830956][T12800]  ? __fget_files+0x2a/0x420
[  299.830980][T12800]  ? bpf_lsm_file_ioctl+0x9/0x20
[  299.831000][T12800]  ? __pfx_loop_control_ioctl+0x10/0x10
[  299.831030][T12800]  __se_sys_ioctl+0xf9/0x170
[  299.831049][T12800]  do_syscall_64+0xfa/0x3b0
[  299.831073][T12800]  ? lockdep_hardirqs_on+0x9c/0x150
[  299.831095][T12800]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.831113][T12800]  ? clear_bhb_loop+0x60/0xb0
[  299.831133][T12800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.831151][T12800] RIP: 0033:0x7ffb1f38e929
[  299.831168][T12800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.831183][T12800] RSP: 002b:00007ffb202bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  299.831201][T12800] RAX: ffffffffffffffda RBX: 00007ffb1f5b5fa0 RCX: 00007ffb1f38e929
[  299.831214][T12800] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006
[  299.831224][T12800] RBP: 00007ffb1f410b39 R08: 0000000000000000 R09: 0000000000000000
[  299.831236][T12800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  299.831247][T12800] R13: 0000000000000000 R14: 00007ffb1f5b5fa0 R15: 00007ffda63403a8
[  299.831268][T12800]  </TASK>
[  300.188474][T12798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.201330][T12798] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  300.258020][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.