last executing test programs:

12.843045561s ago: executing program 2 (id=683):
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
listen(0xffffffffffffffff, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x5)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000)

12.41444642s ago: executing program 2 (id=687):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

12.130866166s ago: executing program 2 (id=690):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0xba01}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

11.297011774s ago: executing program 2 (id=694):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000000040))

9.718795318s ago: executing program 2 (id=699):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000100)={[{@largeio}, {@filestreams}, {@grpquota}, {@filestreams}]}, 0x5, 0xb919, &(0x7f000000c180)="$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")
r0 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x0)
socket(0x10, 0x3, 0x0)
fchown(0xffffffffffffffff, 0x0, 0xee01)
mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfb0e00000000000000a9000ff8c37ee7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioctl$FITRIM(r0, 0xc080583d, &(0x7f0000000080)={0x400000001, 0x0, 0x3})

8.974000695s ago: executing program 0 (id=701):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
close(r0)
r1 = inotify_init1(0x800)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
fcntl$setsig(r1, 0xa, 0xe)
inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000c17)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
rmdir(&(0x7f0000000100)='./control\x00')

8.765363199s ago: executing program 0 (id=715):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="400d12"], 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_MCE_KILL(0x23, 0x8, 0x7fffffffeffe)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x2, 0x4e24, 0x0, 0x0, 0x80, 0x80, 0x2f}, {0x948, 0x0, 0x800, 0xbd4, 0x2a, 0x401, 0x4, 0x7}, {0x7, 0x2, 0x7, 0x6}, 0x0, 0x6e6bb0, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x33}, 0x2, @in6=@mcast1, 0x3503, 0x3, 0x2, 0x8, 0x7, 0x7fffffff, 0x8}}, 0xe8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r2}, 0xc)
syz_usb_ep_write(r0, 0x81, 0xcc, &(0x7f0000000040)="b9425b44651dd20000963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fcea00080000000000004cd9f5d3969890522c7715531d459db3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84fffdec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b44800448a")

7.82924117s ago: executing program 4 (id=719):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_to_bond\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x9}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048091}, 0x8000)

5.927993401s ago: executing program 0 (id=709):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

5.842795333s ago: executing program 1 (id=710):
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
sendto(r3, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x2)

4.829952975s ago: executing program 1 (id=711):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24048040)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x702, 0x38, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a725643f7", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.818825325s ago: executing program 0 (id=712):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x5}, 0x8)

4.789275546s ago: executing program 2 (id=713):
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4000041)
syz_clone(0x668c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setsig(r0, 0xa, 0x21)
fcntl$setlease(r0, 0x400, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpid()
fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2})
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=<r3=>0x0)
fcntl$setown(r0, 0x8, r3)
truncate(&(0x7f0000000080)='./file0\x00', 0x4)
fcntl$setlease(r0, 0x400, 0x2)

3.854637346s ago: executing program 1 (id=714):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0xe, 0x4, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000004e8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3b}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000058}, 0x20008844)
r3 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000180)=[{0x0, 0xea}], 0x1}, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000))
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

3.853975056s ago: executing program 4 (id=716):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0)
ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r5=>0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
read(r0, &(0x7f0000000280)=""/148, 0x94)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0)

3.822715227s ago: executing program 0 (id=718):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

3.808158647s ago: executing program 3 (id=720):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x2, 0x20d, &(0x7f0000000180)="$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")

3.6940647s ago: executing program 1 (id=721):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.537613423s ago: executing program 3 (id=722):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa004018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000011000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000ff8500000015000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.514840545s ago: executing program 1 (id=723):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x3, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)

2.505510546s ago: executing program 4 (id=733):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0)
read$FUSE(r1, &(0x7f0000002600)={0x2020}, 0x2020)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x20, 0x81, 0x4, {{0x5, 0x4, 0x0, 0x1, 0x14, 0xfffe, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})

2.167169793s ago: executing program 1 (id=724):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c3142, 0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x30)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x7fffffff)
ftruncate(r2, 0x2007ffb)
sendfile(r2, r2, 0x0, 0x1000000201005)

2.165167313s ago: executing program 3 (id=725):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xa52, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8, 0x12, r1, 0x80000000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000240)='*', 0xfdef}], 0x1)
epoll_wait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x5)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)

2.051291675s ago: executing program 4 (id=726):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0xc73a, 0x80000008, 0xfffffffc, 0x6, 0x2, 0x8001, 0x2, 0x6, 0xb56, 0x46a, 0x0, 0x6, 0x7, 0x7, 0xfe, 0x3, 0x1, 0x9, 0xb1, 0x4, 0x8, 0x9, 0x1, 0x8, 0x1f, 0xff, 0xff, 0x10000, 0x6, 0x7, 0x1, 0x3ff, 0x9a00, 0x3, 0x830, 0x8, 0x2, 0x9, 0x9, 0x9, 0x80, 0x1, 0x4, 0x5, 0x7, 0xfffffff9, 0x0, 0x4, 0x5, 0x6, 0x17, 0xfff, 0x2, 0x2, 0x401, 0xf1c, 0x883, 0x7, 0x7f, 0x27, 0x8, 0xe2cb, 0x6, 0x1, 0x0, 0x1, 0x7fff, 0x5, 0x7, 0x3449, 0xf1, 0x8, 0x200, 0x8, 0x1, 0xeab, 0x3, 0x1000, 0x0, 0x3347, 0x4, 0x7f, 0x1, 0x0, 0x400, 0xfffffffc, 0x10, 0x97a, 0x50, 0x5785, 0xf, 0x7, 0x7, 0x3, 0x0, 0x6, 0x6, 0x1000, 0x8, 0x9, 0xc, 0xba48, 0x426b3c01, 0x8, 0x7, 0xfffffe00, 0x3, 0xf, 0x80000000, 0x2, 0x2, 0x2, 0x2, 0x7, 0x401, 0xf, 0x0, 0x10, 0x2, 0x9, 0x3ff, 0x8, 0xa, 0x0, 0x4, 0x9, 0x7f, 0x100, 0x9, 0xfed, 0x1ff, 0x9, 0x0, 0x1, 0x23a31e23, 0x8, 0x3, 0x4, 0x7, 0x9, 0x4040000, 0x8, 0x7, 0x7, 0x4, 0x4f3b77d4, 0x4, 0x2d, 0x5, 0x3, 0x53022e10, 0x8, 0x7fff, 0x2, 0xecc4, 0x8, 0x4, 0x0, 0x8009, 0x387, 0x80, 0xfba, 0xb, 0x0, 0xa, 0x8, 0xc000000, 0x0, 0x3, 0x7, 0x80000001, 0x7fff, 0x0, 0x800, 0x3, 0x2, 0x6, 0x1, 0x40, 0x0, 0xffffffff, 0x0, 0x3, 0x5, 0x6, 0x5, 0x3, 0xb, 0xfffffff9, 0xd, 0x6, 0x77, 0x7, 0xc3, 0x80000000, 0x45, 0x9, 0x0, 0x475, 0x200, 0x7, 0x6d2, 0x8000, 0x89, 0x7, 0xf, 0x7, 0x1, 0x2, 0xa3, 0xf, 0x0, 0xfffffffa, 0x31, 0x401, 0x3, 0xfffffffc, 0x2d, 0x8, 0xffff2d80, 0x200, 0xdfdf, 0x1ff, 0x9, 0x3, 0xe2, 0x4532, 0x9, 0xab1, 0x2433, 0x10f, 0x8, 0x1, 0x3, 0x7, 0x3, 0x101, 0x7ff, 0x5e9, 0xf, 0x1, 0xb, 0x8, 0xa, 0x6, 0x9, 0x4, 0x100, 0x970, 0x448c, 0xfff, 0x5, 0x3, 0xed7, 0x6]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x9, 0x6, @local}, 0x14)

1.994521317s ago: executing program 3 (id=727):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setsig(0x4203, r3, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000})

1.067935157s ago: executing program 0 (id=728):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='\x00', 0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x74}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0xa0800)
ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000000)={0x2, {0x2d0, 0x3, 0x1, 0x1000}})

1.030158928s ago: executing program 3 (id=729):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24048040)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x702, 0x38, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a725643f7", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.029648468s ago: executing program 4 (id=730):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x5}, 0x8)

18.9206ms ago: executing program 4 (id=731):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0xba01}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

0s ago: executing program 3 (id=732):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)

kernel console output (not intermixed with test programs):

 ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.962017][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.992787][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.005304][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.014141][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.029950][ T4192] device veth1_vlan entered promiscuous mode
[   68.041691][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.056241][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.065624][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.075024][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.088191][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.114715][ T4185] device veth0_macvtap entered promiscuous mode
[   68.137284][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.146356][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.159207][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.176927][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.185592][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.200280][ T4192] device veth0_macvtap entered promiscuous mode
[   68.225820][ T4185] device veth1_macvtap entered promiscuous mode
[   68.235146][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.251869][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.264772][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.274006][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.283968][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.293589][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.312710][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.323008][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.335449][ T4192] device veth1_macvtap entered promiscuous mode
[   68.354384][ T4191] device veth0_vlan entered promiscuous mode
[   68.387303][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.397529][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.408312][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.418714][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.429302][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.470038][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.477729][ T4193] device veth0_vlan entered promiscuous mode
[   68.497404][ T4191] device veth1_vlan entered promiscuous mode
[   68.505462][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.518973][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.530884][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.539192][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.551177][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.559072][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.570148][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.583569][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.596820][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.606591][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.615735][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.624778][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.648084][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.657365][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.670219][ T4193] device veth1_vlan entered promiscuous mode
[   68.678001][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.689774][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.702122][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.744123][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.754583][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.770414][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.781882][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.793588][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.816946][ T4191] device veth0_macvtap entered promiscuous mode
[   68.846221][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.858156][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.869818][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.878727][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.889094][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.899577][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.908227][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.917335][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.926329][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.937566][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.947816][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.957785][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.967429][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.981554][ T4191] device veth1_macvtap entered promiscuous mode
[   68.999057][ T4193] device veth0_macvtap entered promiscuous mode
[   69.054191][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.062738][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.073116][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.081654][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.090561][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.098474][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.118588][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.128563][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.135378][ T4193] device veth1_macvtap entered promiscuous mode
[   69.148524][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.161134][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.171978][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.182964][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.195034][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.213942][ T4189] device veth0_vlan entered promiscuous mode
[   69.227359][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.237411][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.245720][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.255070][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.267201][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.278846][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.289311][ T4228] Bluetooth: hci0: command 0x040f tx timeout
[   69.296198][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.306740][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.318054][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.347633][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.359154][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.362761][ T4228] Bluetooth: hci2: command 0x040f tx timeout
[   69.381956][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.392913][ T4228] Bluetooth: hci1: command 0x040f tx timeout
[   69.393776][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.409065][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.417942][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.431466][ T4189] device veth1_vlan entered promiscuous mode
[   69.440248][ T4228] Bluetooth: hci3: command 0x040f tx timeout
[   69.458535][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.469418][ T4228] Bluetooth: hci4: command 0x040f tx timeout
[   69.477225][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.487244][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.497752][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.507886][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.518624][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.531129][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.543794][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.555000][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.565533][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.576226][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.587676][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.598380][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.610324][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.621348][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.629126][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.638239][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.647692][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.655214][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.657699][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.678948][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.693821][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.703735][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.712774][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.723436][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.732928][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.753497][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.764674][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.816456][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.874994][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.886798][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.921479][ T4189] device veth0_macvtap entered promiscuous mode
[   69.963379][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.977602][ T4189] device veth1_macvtap entered promiscuous mode
[   69.984604][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.008423][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.018949][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.028491][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.043203][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.058808][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.085460][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.126513][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.152630][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.165905][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.177451][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.187703][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.199047][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.209972][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.221589][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.263999][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.424637][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.477105][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.624774][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.636129][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.678180][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.734398][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.818651][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.901086][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.948631][ T4270] binder: 4268:4270 ioctl c0306201 2000000003c0 returned -14
[   70.961025][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.011178][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.069943][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.122243][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.175191][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.183745][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.205169][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.211976][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   71.234336][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.266109][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.293339][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.311063][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.320138][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.329175][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.361544][ T4229] Bluetooth: hci0: command 0x0419 tx timeout
[   71.399831][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.407798][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.440583][ T4196] Bluetooth: hci1: command 0x0419 tx timeout
[   71.447142][ T4196] Bluetooth: hci2: command 0x0419 tx timeout
[   71.461178][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.521551][ T4229] Bluetooth: hci4: command 0x0419 tx timeout
[   71.530561][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.543696][ T4229] Bluetooth: hci3: command 0x0419 tx timeout
[   71.567255][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.603084][ T4284] tipc: Failed to remove unknown binding: 66,0,0/0:3330515827/3330515829
[   71.604636][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.628097][ T4284] tipc: Failed to remove unknown binding: 66,0,0/0:3330515827/3330515828
[   71.680945][ T4213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.688828][ T4213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.728053][ T4284] tipc: Failed to remove unknown binding: 66,0,0/0:3330515827/3330515829
[   71.769798][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.781359][ T4284] tipc: Failed to remove unknown binding: 66,0,0/0:3330515827/3330515828
[   71.792086][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.811985][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.830844][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.927473][ T4294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   71.948281][ T4294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   72.103642][ T4300] netlink: 'syz.0.13': attribute type 13 has an invalid length.
[   72.136516][ T4300] netlink: 'syz.0.13': attribute type 17 has an invalid length.
[   72.238024][ T4311] loop4: detected capacity change from 0 to 128
[   72.279018][ T4312] loop2: detected capacity change from 0 to 1024
[   72.335509][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   72.348002][ T4312] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   72.369628][ T4312] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   72.434015][   T26] audit: type=1800 audit(1784643169.769:2): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.17" name="bus" dev="loop4" ino=1048590 res=0 errno=0
[   72.460321][ T4232] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   72.498334][ T4300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.590824][ T4312] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[   72.625096][   T26] audit: type=1326 audit(1784643169.959:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4315 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddd8f5e99 code=0x7ffc0000
[   72.720209][ T4232] usb 2-1: Using ep0 maxpacket: 16
[   72.726344][ T4321] attempt to access beyond end of device
[   72.726344][ T4321] loop4: rw=2049, want=1041, limit=128
[   72.766288][   T26] audit: type=1326 audit(1784643170.009:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4315 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddd8f5e99 code=0x7ffc0000
[   72.818647][   T26] audit: type=1326 audit(1784643170.009:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4315 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddd8f5e99 code=0x7ffc0000
[   72.929987][   T26] audit: type=1326 audit(1784643170.009:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4315 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddd8f5e99 code=0x7ffc0000
[   72.954419][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short
[   72.996490][   T26] audit: type=1326 audit(1784643170.009:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4315 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddd8f5e99 code=0x7ffc0000
[   73.069773][ T4232] usb 2-1: config 1 has an invalid interface number: 66 but max is 2
[   73.078148][ T4232] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   73.126986][   T26] audit: type=1326 audit(1784643170.009:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4315 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f8ddd8f5e99 code=0x7ffc0000
[   73.151402][ T4232] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3
[   73.169791][ T4232] usb 2-1: config 1 has no interface number 3
[   73.176181][ T4232] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   73.200213][   T26] audit: type=1326 audit(1784643170.079:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4315 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddd8f5e99 code=0x7ffc0000
[   73.224398][ T4232] usb 2-1: config 1 interface 1 has no altsetting 0
[   73.234495][ T4232] usb 2-1: config 1 interface 2 has no altsetting 0
[   73.319734][   T26] audit: type=1326 audit(1784643170.129:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4315 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddd8f5e99 code=0x7ffc0000
[   73.435471][ T4328] loop0: detected capacity change from 0 to 32768
[   73.442610][   T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   73.453370][   T26] audit: type=1326 audit(1784643170.129:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4315 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddd8f5e99 code=0x7ffc0000
[   73.536635][ T4328] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.22 (4328)
[   74.012560][ T4232] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   75.119473][    C0] sched: RT throttling activated
[   75.141654][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   75.152978][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   75.163455][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.101608][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.135181][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.159439][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.549764][ T4232] usb 2-1: Product: syz
[   76.591653][ T4232] usb 2-1: Manufacturer: syz
[   76.640438][ T4232] usb 2-1: SerialNumber: syz
[   76.676070][ T4341] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   76.764435][ T4349] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   76.773881][ T4232] usb 2-1: can't set config #1, error -71
[   76.826585][ T4232] usb 2-1: USB disconnect, device number 2
[   76.854993][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.867320][ T4328] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   76.876900][ T4328] BTRFS info (device loop0): turning on sync discard
[   76.884542][ T4328] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   76.894854][ T4328] BTRFS info (device loop0): use zstd compression, level 3
[   76.902191][ T4328] BTRFS info (device loop0): turning on async discard
[   76.909196][ T4328] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   76.919995][ T4328] BTRFS info (device loop0): trying to use backup root at mount time
[   76.928103][ T4328] BTRFS info (device loop0): enabling auto defrag
[   76.934680][ T4328] BTRFS info (device loop0): using free space tree
[   76.941276][ T4328] BTRFS info (device loop0): has skinny extents
[   77.207066][ T4328] BTRFS error (device loop0): open_ctree failed: -12
[   77.676223][ T4428] loop1: detected capacity change from 0 to 1024
[   77.902435][ T4445] fuse: Bad value for 'fd'
[   77.920364][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.084334][   T26] kauditd_printk_skb: 54 callbacks suppressed
[   78.084349][   T26] audit: type=1800 audit(1784643175.419:66): pid=4418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.29" name="file1" dev="loop1" ino=2 res=0 errno=0
[   78.239354][ T4418] hfsplus: b-tree write err: -5, ino 3
[   78.479565][ T4427] hfsplus: bad catalog file entry
[   78.592173][ T4393] loop0: detected capacity change from 0 to 32768
[   78.809892][ T4393] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.27 (4393)
[   79.222263][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.233727][ T4386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.304644][ T4393] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   79.403918][ T4393] BTRFS info (device loop0): using free space tree
[   79.416101][ T4466] device vlan2 entered promiscuous mode
[   79.476918][ T4393] BTRFS info (device loop0): has skinny extents
[   80.613790][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.744119][ T4393] BTRFS error (device loop0): open_ctree failed: -12
[   80.762430][ T4496] syz.2.36 sent an empty control message without MSG_MORE.
[   81.285353][ T4517] netlink: 'syz.0.48': attribute type 1 has an invalid length.
[   81.718600][ T4528] delete_channel: no stack
[   81.724810][ T4528] delete_channel: no stack
[   82.323786][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.386788][ T4378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.395093][ T4378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.403485][ T4378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.426190][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.465645][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.483483][   T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.718476][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   83.794165][ T4535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.567383][   T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.606190][ T4548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'.
[   84.641521][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.811882][ T4551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.55'.
[   84.951836][ T4555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.990872][ T4555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.999189][ T4555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.098308][ T4381] libceph: connect (1)[c::]:6789 error -101
[   85.109116][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[   85.135774][ T4557] ceph: No mds server is up or the cluster is laggy
[   85.401407][ T4381] libceph: connect (1)[c::]:6789 error -101
[   85.412198][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[   86.347148][ T4555] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.355790][ T4555] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.387511][ T4575] MPTCP: addr_signal error, rm_addr=1
[   86.573547][   T23] cfg80211: failed to load regulatory.db
[   86.890642][ T4573] loop4: detected capacity change from 0 to 32768
[   86.918815][ T4573] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.64 (4573)
[   87.056763][ T4573] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[   87.084747][   T26] audit: type=1326 audit(1784643184.419:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab39f7be99 code=0x0
[   87.089843][ T4573] BTRFS info (device loop4): using free space tree
[   87.159653][   T26] audit: type=1326 audit(1784643184.479:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab39f7be99 code=0x7ffc0000
[   87.165063][ T4573] BTRFS info (device loop4): has skinny extents
[   87.199926][   T26] audit: type=1326 audit(1784643184.479:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab39f7be99 code=0x7ffc0000
[   87.288483][   T26] audit: type=1326 audit(1784643184.479:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab39f7be99 code=0x7ffc0000
[   87.359586][   T26] audit: type=1326 audit(1784643184.479:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab39f7be99 code=0x7ffc0000
[   87.465230][   T26] audit: type=1326 audit(1784643184.479:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fab39f7be99 code=0x7ffc0000
[   87.499896][ T4573] BTRFS info (device loop4): enabling ssd optimizations
[   87.610428][   T26] audit: type=1326 audit(1784643184.479:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab39f7be99 code=0x7ffc0000
[   87.688694][   T26] audit: type=1326 audit(1784643184.479:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab39f7be99 code=0x7ffc0000
[   87.744485][   T26] audit: type=1326 audit(1784643184.479:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab39f7be99 code=0x7ffc0000
[   87.776760][   T26] audit: type=1326 audit(1784643184.479:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab39f7be99 code=0x7ffc0000
[   87.842183][ T4555] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.938979][ T4555] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.492089][ T4621] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.71'.
[   89.065125][ T4555] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.077875][ T4555] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.087320][ T4555] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.097736][ T4555] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.340369][ T4618] Zero length message leads to an empty skb
[   89.471791][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   89.516375][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   89.527041][ T4629] loop4: detected capacity change from 0 to 256
[   89.557189][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   89.570328][ T4629] =======================================================
[   89.570328][ T4629] WARNING: The mand mount option has been deprecated and
[   89.570328][ T4629]          and is ignored by this kernel. Remove the mand
[   89.570328][ T4629]          option from the mount to silence this warning.
[   89.570328][ T4629] =======================================================
[   89.613671][ T4625] device bridge_slave_0 left promiscuous mode
[   89.645289][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.451039][ T4629] FAT-fs (loop4): Directory bread(block 64) failed
[   90.458044][ T4629] FAT-fs (loop4): Directory bread(block 65) failed
[   90.527728][ T4629] FAT-fs (loop4): Directory bread(block 66) failed
[   90.536142][ T4625] device bridge_slave_1 left promiscuous mode
[   90.542750][ T4629] FAT-fs (loop4): Directory bread(block 67) failed
[   90.550480][ T4629] FAT-fs (loop4): Directory bread(block 68) failed
[   90.557461][ T4625] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.567268][ T4629] FAT-fs (loop4): Directory bread(block 69) failed
[   90.577852][ T4629] FAT-fs (loop4): Directory bread(block 70) failed
[   90.586417][ T4629] FAT-fs (loop4): Directory bread(block 71) failed
[   90.604072][ T4629] FAT-fs (loop4): Directory bread(block 72) failed
[   90.618799][ T4629] FAT-fs (loop4): Directory bread(block 73) failed
[   90.647955][ T4625] bond0: (slave bond_slave_0): Releasing backup interface
[   90.753132][ T4625] bond0: (slave bond_slave_1): Releasing backup interface
[   90.908056][ T4625] team0: Port device team_slave_0 removed
[   90.972496][ T4625] team0: Port device team_slave_1 removed
[   90.979027][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.000856][ T4625] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.017277][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.024898][ T4625] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.074308][ T4631] device macvtap1 entered promiscuous mode
[   91.094082][ T4631] device vlan0 entered promiscuous mode
[   91.107748][ T4631] team0: Device macvtap1 failed to register rx_handler
[   91.120744][ T4631] device vlan0 left promiscuous mode
[   91.240211][ T4638] batman_adv: batadv0: Adding interface: dummy0
[   91.246513][ T4638] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.272279][ T4638] batman_adv: batadv0: Interface activated: dummy0
[   91.305879][ T4639] batadv0: mtu less than device minimum
[   91.332459][ T4639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.345312][ T4639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.358324][ T4639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.370860][ T4639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.383131][ T4639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.395523][ T4639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.408053][ T4639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.419810][ T4639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.431586][ T4639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.478461][ T4641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'.
[   91.488900][ T4643] HTB: quantum of class 80020008 is small. Consider r2q change.
[   91.507959][ T4649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.82'.
[   91.540227][ T4651] netlink: 'syz.4.82': attribute type 6 has an invalid length.
[   91.547863][ T4651] netlink: 72 bytes leftover after parsing attributes in process `syz.4.82'.
[   91.745389][ T4663] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   92.037023][ T4226] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   92.138266][ T4669] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.223723][ T4672] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.89'.
[   92.481509][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   92.495748][ T4226] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[   92.529525][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   92.569499][ T4226] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[   92.593434][ T4226] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[   92.623189][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.659654][ T4226] usb 5-1: config 0 descriptor??
[   92.960500][ T4226] hdpvr 5-1:0.0: firmware version 0xc1 dated TØeª1áiÐYÛÛ˜FwABo¤ÓqŽŸðrN6?óþO+¦†�-NG.û
[   93.005039][ T4226] hdpvr 5-1:0.0: untested firmware, the driver might not work.
[   94.907118][ T4698] netlink: 'syz.4.99': attribute type 1 has an invalid length.
[   94.949951][ T4226] hdpvr 5-1:0.0: Could not setup controls
[   94.978735][ T4226] hdpvr 5-1:0.0: registering videodev failed
[   95.084731][ T4226] hdpvr: probe of 5-1:0.0 failed with error -71
[   95.139935][ T4226] usb 5-1: USB disconnect, device number 2
[   95.383058][ T4711] syz.2.104 uses obsolete (PF_INET,SOCK_PACKET)
[   95.427498][ T4716] loop0: detected capacity change from 0 to 512
[   95.645242][ T4716] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5
[   95.645242][ T4716] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   95.645242][ T4716] 
[   96.379652][ T4716] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[   96.453328][ T4716] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[   96.604963][ T4716] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   96.659619][ T4716] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e042a02c, mo2=0000]
[   96.736792][ T4716] EXT4-fs (loop0): failed to initialize system zone (-117)
[   96.784213][ T4716] EXT4-fs (loop0): mount failed
[  102.151739][ T4790] loop4: detected capacity change from 0 to 1024
[  102.302200][ T4797] capability: warning: `syz.3.133' uses 32-bit capabilities (legacy support in use)
[  102.313905][ T4790] EXT4-fs (loop4): Ignoring removed oldalloc option
[  102.384198][ T4790] EXT4-fs (loop4): Unrecognized mount option "fsmagic=0x0" or missing value
[  105.052951][ T4838] tipc: Started in network mode
[  105.089173][ T4838] tipc: Node identity 7f000001, cluster identity 4711
[  105.141611][ T4838] tipc: Enabled bearer <udp:syz2>, priority 10
[  106.114315][ T4865] netlink: 64 bytes leftover after parsing attributes in process `syz.0.152'.
[  106.281155][ T4232] tipc: Node number set to 2130706433
[  106.674528][ T4856] loop2: detected capacity change from 0 to 32768
[  106.711441][ T4877] netlink: 'syz.1.158': attribute type 4 has an invalid length.
[  106.731001][ T4856] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.149 (4856)
[  106.804928][ T4856] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  106.843978][ T4856] BTRFS info (device loop2): turning on sync discard
[  106.879585][ T4856] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  106.939626][ T4856] BTRFS info (device loop2): use zstd compression, level 3
[  106.963278][ T4856] BTRFS info (device loop2): turning on async discard
[  106.989607][ T4856] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  107.069413][ T4856] BTRFS info (device loop2): trying to use backup root at mount time
[  107.078724][ T4856] BTRFS info (device loop2): enabling auto defrag
[  107.095592][ T4856] BTRFS info (device loop2): using free space tree
[  107.102315][ T4856] BTRFS info (device loop2): has skinny extents
[  107.119946][ T4880] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.128372][ T4884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'.
[  107.252354][ T4884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'.
[  107.305459][ T4884] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.341028][ T4884] bond1: (slave bond0): Enslaving as an active interface with a down link
[  107.384917][ T4427] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  107.449608][ T4856] BTRFS warning (device loop2): failed to read root (objectid=2): -5
[  107.460889][ T4427] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  107.543842][ T4856] BTRFS warning (device loop2): couldn't read tree root
[  107.563364][ T4856] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7
[  107.606727][ T4856] BTRFS warning (device loop2): couldn't read tree root
[  107.685441][ T4856] BTRFS info (device loop2): enabling ssd optimizations
[  107.718115][ T4856] BTRFS info (device loop2): clearing free space tree
[  107.744615][ T4856] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  107.791470][ T4856] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  107.913187][ T4856] BTRFS info (device loop2): creating free space tree
[  107.945123][ T4856] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  107.978391][ T4856] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  108.387177][ T4918] netlink: 14 bytes leftover after parsing attributes in process `syz.1.166'.
[  108.559397][ T4925] loop4: detected capacity change from 0 to 128
[  108.760058][ T4924] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼
[  108.953125][ T4931] netlink: 168 bytes leftover after parsing attributes in process `syz.2.168'.
[  109.819983][ T4945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'.
[  110.114809][ T4945] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.163544][ T4950] sctp: [Deprecated]: syz.3.177 (pid 4950) Use of int in max_burst socket option.
[  110.163544][ T4950] Use struct sctp_assoc_value instead
[  110.203139][ T4945] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.225505][ T4945] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  110.329341][ T4945] bond1: (slave gre1): Error -95 calling set_mac_address
[  110.441971][ T4959] netlink: 628 bytes leftover after parsing attributes in process `syz.1.180'.
[  110.961619][ T4952] device macvlan2 entered promiscuous mode
[  111.025643][ T4952] bond1: (slave macvlan2): Error -98 calling set_mac_address
[  111.675237][ T4963] netlink: 'syz.3.181': attribute type 16 has an invalid length.
[  111.703892][ T4963] netlink: 'syz.3.181': attribute type 17 has an invalid length.
[  111.715184][   T26] kauditd_printk_skb: 110 callbacks suppressed
[  111.715198][   T26] audit: type=1326 audit(1784643209.049:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.4.182" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0de594e99 code=0x0
[  111.823060][ T4963] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.847935][ T4963] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.715166][ T4982] netlink: 'syz.1.188': attribute type 1 has an invalid length.
[  112.812469][ T4986] bridge0: port 3(vlan3) entered blocking state
[  112.819120][ T4986] bridge0: port 3(vlan3) entered disabled state
[  112.827744][ T4986] device vlan3 entered promiscuous mode
[  112.834415][ T4986] device bond0 entered promiscuous mode
[  112.853988][ T4986] device bond_slave_0 entered promiscuous mode
[  112.868092][ T4986] device bond_slave_1 entered promiscuous mode
[  112.882023][ T4986] bridge0: port 3(vlan3) entered blocking state
[  112.888378][ T4986] bridge0: port 3(vlan3) entered forwarding state
[  112.941015][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  113.012341][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  113.051568][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  113.184704][ T4990] device bridge_slave_0 left promiscuous mode
[  114.802505][ T5005] xt_CT: You must specify a L4 protocol and not use inversions on it
[  115.063095][ T4990] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.074317][ T4990] device bridge_slave_1 left promiscuous mode
[  115.081612][ T4990] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.091365][ T4990] device vlan3 left promiscuous mode
[  115.096688][ T4990] device bond0 left promiscuous mode
[  115.109068][ T4990] bond0: (slave bond_slave_0): Releasing backup interface
[  115.120692][ T4990] device bond_slave_0 left promiscuous mode
[  115.142364][ T5009] process 'syz.0.197' launched '/dev/fd/3' with NULL argv: empty string added
[  115.170430][ T4990] bond0: (slave bond_slave_1): Releasing backup interface
[  115.193601][ T4990] device bond_slave_1 left promiscuous mode
[  115.298033][ T4990] team0: Port device team_slave_0 removed
[  115.348954][ T4990] team0: Port device team_slave_1 removed
[  115.355914][ T4990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.369700][ T4990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.389260][ T4990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.404813][ T4990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.425783][ T4990] bridge0: port 3(vlan3) entered disabled state
[  117.534454][ T4383] Bluetooth: hci2: command 0x0409 tx timeout
[  118.104867][ T5048] xt_CONNSECMARK: invalid mode: 66
[  120.439866][ T5063] binder: 5061:5063 ioctl c0306201 200000000080 returned -14
[  120.483464][ T5063] binder: 5061:5063 ioctl c0306201 2000000003c0 returned -14
[  121.452161][ T5074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'.
[  121.547590][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  121.611390][ T5065] loop0: detected capacity change from 0 to 256
[  122.866564][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  123.385786][ T5065] exfat: Deprecated parameter 'utf8'
[  123.449542][ T5065] exfat: Deprecated parameter 'namecase'
[  123.512988][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  123.523737][ T5065] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  123.538485][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  123.589583][ T5074] net_ratelimit: 10 callbacks suppressed
[  123.589593][ T5074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.632926][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'.
[  123.802288][ T5092] team0: Port device team_slave_0 removed
[  123.844636][ T5095] device syzkaller0 entered promiscuous mode
[  123.884218][ T5095] tipc: Started in network mode
[  123.905439][ T5095] tipc: Node identity 52b2e34ec61a, cluster identity 4711
[  123.925585][ T5095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.948222][ T5094] tipc: Resetting bearer <eth:syzkaller0>
[  124.005163][ T5094] tipc: Disabling bearer <eth:syzkaller0>
[  124.188408][ T5081] loop2: detected capacity change from 0 to 40427
[  124.251086][ T5114] sctp: [Deprecated]: syz.4.233 (pid 5114) Use of struct sctp_assoc_value in delayed_ack socket option.
[  124.251086][ T5114] Use struct sctp_sack_info instead
[  124.305622][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'.
[  124.327802][ T5118] device bond0 entered promiscuous mode
[  124.372102][ T5118] device batadv0 entered promiscuous mode
[  124.391352][ T5118] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  124.391756][ T5118] 8021q: adding VLAN 0 to HW filter on device hsr1
[  124.393105][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  124.469401][ T5118] netlink: 14 bytes leftover after parsing attributes in process `syz.1.235'.
[  124.777176][ T5118] device bond0 left promiscuous mode
[  124.786303][ T5118] bond0 (unregistering): Released all slaves
[  125.576807][ T5125] netlink: 32 bytes leftover after parsing attributes in process `syz.2.236'.
[  125.817597][ T5128] netlink: 32 bytes leftover after parsing attributes in process `syz.2.236'.
[  125.819844][ T5130] netlink: 'syz.0.239': attribute type 2 has an invalid length.
[  125.920176][ T5139] loop4: detected capacity change from 0 to 128
[  125.943864][ T5143] loop2: detected capacity change from 0 to 8
[  128.268849][   T26] audit: type=1800 audit(1784643225.509:188): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.244" name="file0" dev="loop2" ino=3 res=0 errno=0
[  129.421887][ T5158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.249'.
[  129.438320][ T5158] netlink: 32 bytes leftover after parsing attributes in process `syz.4.249'.
[  129.458594][ T5158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.249'.
[  129.470486][ T5158] netlink: 32 bytes leftover after parsing attributes in process `syz.4.249'.
[  131.662555][   T26] audit: type=1804 audit(1784643228.999:189): pid=5201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.261" name="bus" dev="ramfs" ino=35526 res=1 errno=0
[  131.727293][   T26] audit: type=1804 audit(1784643228.999:190): pid=5201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.261" name="bus" dev="ramfs" ino=35526 res=1 errno=0
[  132.660042][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.666847][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  133.944748][ T5212] ODEBUG: Out of memory. ODEBUG disabled
[  137.335487][ T5266] device bridge1 entered promiscuous mode
[  137.553569][ T5271] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.573651][ T5276] netlink: 'syz.1.283': attribute type 1 has an invalid length.
[  137.653547][ T5276] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.769507][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[  137.789471][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  137.799468][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  137.809470][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  137.819476][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  137.845343][ T5279] bond0: (slave vlan3): Enslaving as an active interface with a down link
[  137.978695][ T5289] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5289]
[  138.589496][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  138.599472][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  138.609475][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  138.619462][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  138.629465][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  138.718998][ T5271] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.821750][ T5271] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.890358][ T5271] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.995816][ T5271] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.008493][ T5271] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.021070][ T5271] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.033274][ T5271] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.092255][ T5298] fuse: Bad value for 'fd'
[  140.215471][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'.
[  140.311224][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'.
[  141.559652][   T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  141.762199][ T5345] netlink: 'syz.4.310': attribute type 11 has an invalid length.
[  141.969740][   T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[  142.059636][   T23] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024
[  142.209379][ T5354] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           
[  142.315782][ T5362] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  142.420422][   T23] usb 3-1: string descriptor 0 read error: -22
[  142.433140][   T23] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  142.464695][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.561081][ T5366] device bond_slave_0 entered promiscuous mode
[  142.567814][ T5366] device bond_slave_1 entered promiscuous mode
[  142.580593][ T5366] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  143.038632][ T5366] bond1: (slave macvlan2): making interface the new active one
[  143.274981][ T5366] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  143.534853][   T23] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  143.589710][   T23] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  143.628726][ T5373] device syzkaller0 entered promiscuous mode
[  143.678972][   T23] usb 3-1: USB disconnect, device number 2
[  144.008483][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  144.514945][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'.
[  144.981528][ T5389] 8021q: adding VLAN 0 to HW filter on device bond2
[  145.036971][ T5395] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  145.067808][ T5397] netlink: 268 bytes leftover after parsing attributes in process `syz.1.328'.
[  145.099743][ T5397] unsupported nla_type 65024
[  145.203241][ T5393] overlayfs: failed to look up (tracing) for ino (-66)
[  145.368507][ T5386] loop0: detected capacity change from 0 to 32768
[  145.416190][ T5386] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.325 (5386)
[  145.436811][ T5386] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  146.461734][ T5386] BTRFS info (device loop0): setting nodatasum
[  146.467983][ T5386] BTRFS info (device loop0): disabling tree log
[  146.549592][ T5386] BTRFS info (device loop0): max_inline at 0
[  146.584299][ T5386] BTRFS info (device loop0): turning on sync discard
[  146.623498][ T5386] BTRFS info (device loop0): using free space tree
[  146.665653][ T5386] BTRFS info (device loop0): has skinny extents
[  146.825120][ T5415] netlink: 'syz.1.331': attribute type 10 has an invalid length.
[  146.874019][ T5415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.947013][ T5417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.332'.
[  147.341618][ T5435] IPVS: Error connecting to the multicast addr
[  147.391802][ T5435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.333'.
[  147.679890][ T5386] BTRFS error (device loop0): open_ctree failed: -12
[  147.745197][ T5444] device vlan2 entered promiscuous mode
[  147.975241][ T4352] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4352)
[  148.068772][ T5451] netlink: 'syz.0.339': attribute type 1 has an invalid length.
[  148.853625][ T5455] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  148.880555][ T5455] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  148.900160][ T5455] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  148.909019][ T5455] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  148.952653][ T5455] bond2: (slave geneve2): making interface the new active one
[  148.965637][ T5455] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  148.991146][ T5455] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  149.029947][ T5455] syz.0.339 (5455) used greatest stack depth: 19456 bytes left
[  149.127556][ T5457] bond2 (unregistering): (slave geneve2): Releasing active interface
[  149.207792][ T5457] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  149.221823][ T5457] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  149.252691][ T5457] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  149.280077][ T5457] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  149.296514][ T5457] bond2 (unregistering): Released all slaves
[  149.359554][ T5466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'.
[  149.381371][ T5466] bond0: option arp_all_targets: invalid value (18446744071564623876)
[  149.522648][ T5483] loop0: detected capacity change from 0 to 128
[  149.681344][ T5488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'.
[  149.778278][ T5483] attempt to access beyond end of device
[  149.778278][ T5483] loop0: rw=2049, want=224, limit=128
[  150.558607][ T5482] attempt to access beyond end of device
[  150.558607][ T5482] loop0: rw=524288, want=224, limit=128
[  150.698914][ T5495] attempt to access beyond end of device
[  150.698914][ T5495] loop0: rw=0, want=153, limit=128
[  150.711556][ T5495] attempt to access beyond end of device
[  150.711556][ T5495] loop0: rw=0, want=153, limit=128
[  150.771890][ T5498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'.
[  150.799822][ T5498] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  150.813911][ T5498] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821)
[  150.827172][ T5501] netlink: 'syz.2.355': attribute type 1 has an invalid length.
[  150.835700][ T5501] netlink: 'syz.2.355': attribute type 4 has an invalid length.
[  150.870382][ T5501] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.355'.
[  150.901294][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.354'.
[  151.494794][ T5514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  151.514113][ T5514] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.579177][ T5514] 8021q: adding VLAN 0 to HW filter on device team0
[  151.592529][ T5525] loop4: detected capacity change from 0 to 128
[  151.650314][ T5514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.694884][ T5525] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  151.926090][  T144] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  151.974300][ T5525] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  152.520567][ T5546] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  152.546720][ T5548] x_tables: duplicate entry at hook 2
[  152.577393][ T5546] Cannot find add_set index 0 as target
[  153.677099][ T5552] loop2: detected capacity change from 0 to 32768
[  153.879550][ T5552] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.373 (5552)
[  153.900953][ T5552] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  153.909882][ T5552] BTRFS info (device loop2): use zlib compression, level 3
[  153.917135][ T5552] BTRFS info (device loop2): turning on sync discard
[  153.923925][ T5552] BTRFS info (device loop2): using free space tree
[  153.930497][ T5552] BTRFS info (device loop2): has skinny extents
[  154.981761][ T5590] netlink: 996 bytes leftover after parsing attributes in process `syz.3.381'.
[  157.352009][ T5552] BTRFS error (device loop2): open_ctree failed: -22
[  157.390095][ T4352] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4352)
[  160.119971][ T5633] mmap: syz.3.393 (5633) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  160.435309][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'.
[  160.548661][ T5653] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  160.577669][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'.
[  161.790046][ T5668] netlink: 'syz.3.402': attribute type 1 has an invalid length.
[  161.839286][ T5668] 8021q: adding VLAN 0 to HW filter on device bond3
[  161.885944][ T5676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'.
[  161.911656][ T5668] bond3: (slave geneve2): making interface the new active one
[  161.922142][ T5668] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  161.937874][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  165.131872][ T5732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'.
[  166.077797][ T5750] netlink: 'syz.3.424': attribute type 16 has an invalid length.
[  166.085847][ T5750] netlink: 'syz.3.424': attribute type 17 has an invalid length.
[  166.093745][ T5750] netlink: 'syz.3.424': attribute type 27 has an invalid length.
[  166.130722][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  166.139077][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  166.153431][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  166.161788][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  166.176193][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  166.184587][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  166.193017][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  166.202605][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  166.229065][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.236335][ T5750] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.249868][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.256989][ T5750] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.811498][ T5758] netlink: 'syz.2.429': attribute type 1 has an invalid length.
[  166.897488][ T5758] 8021q: adding VLAN 0 to HW filter on device bond2
[  167.014599][ T5763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.165670][ T5763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.262082][ T5763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.378600][ T5763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.730436][ T5763] bond2: (slave geneve2): making interface the new active one
[  167.765212][ T5763] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  167.775206][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  168.916131][ T5794] loop2: detected capacity change from 0 to 1024
[  170.127608][ T5794] EXT4-fs (loop2): Ignoring removed bh option
[  170.245679][ T5794] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,dioread_lock,stripe=0x0000000000000005,nolazytime,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,barrier=0x0000000000000004,grpquota,bh,init_itable,. Quota mode: writeback.
[  170.350146][ T5794] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  171.957571][ T5840] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  172.216295][ T5843] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  172.373332][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'.
[  172.546514][ T5852] bridge1: port 1(bond1) entered blocking state
[  172.559371][ T5852] bridge1: port 1(bond1) entered disabled state
[  172.567407][ T5852] device bond1 entered promiscuous mode
[  172.600405][ T5829] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0)
[  172.699265][ T5856] bridge1: port 2(gretap1) entered blocking state
[  172.735947][ T5856] bridge1: port 2(gretap1) entered disabled state
[  172.770839][ T5856] device gretap1 entered promiscuous mode
[  176.305050][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'.
[  176.451898][ T5893] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  176.554702][ T5894] bridge2: port 1(bond2) entered blocking state
[  176.564774][ T5894] bridge2: port 1(bond2) entered disabled state
[  176.573011][ T5894] device bond2 entered promiscuous mode
[  176.641769][ T5901] bridge2: port 2(gretap1) entered blocking state
[  176.648469][ T5901] bridge2: port 2(gretap1) entered disabled state
[  176.656814][ T5901] device gretap1 entered promiscuous mode
[  176.719363][ T5904] netlink: 'syz.3.474': attribute type 1 has an invalid length.
[  176.861693][ T5904] 8021q: adding VLAN 0 to HW filter on device bond4
[  176.880595][ T5906] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  176.914591][ T5908] netlink: 48 bytes leftover after parsing attributes in process `syz.2.475'.
[  177.072914][ T5909] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  177.106516][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'.
[  177.173450][ T5904] 8021q: adding VLAN 0 to HW filter on device bond4
[  177.379701][  T144] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  178.508734][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  178.529602][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  178.549594][ T1170] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  178.559458][ T1170] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  178.669561][ T1170] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  178.709691][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  178.772106][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  178.804820][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  179.539384][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  179.547293][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  179.730359][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  179.758548][  T144] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  179.897412][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  179.945287][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  180.079580][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  180.097649][ T4430] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  180.173016][ T5960] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.491'.
[  180.229599][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  180.254552][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  180.389584][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  180.513157][  T144] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  181.513096][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  181.551755][ T4427] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  181.700094][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  182.745377][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  182.784768][ T4423] net_ratelimit: 1 callbacks suppressed
[  182.784786][ T4423] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  183.059667][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  183.957310][ T4427] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  184.069582][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.095617][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  184.154679][ T6006] tipc: Started in network mode
[  184.186943][ T6006] tipc: Node identity 7f000001, cluster identity 4711
[  184.219335][ T6006] tipc: Enabled bearer <udp:syz2>, priority 10
[  184.252131][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.264556][ T6009] netlink: 104 bytes leftover after parsing attributes in process `syz.3.505'.
[  184.266180][ T4430] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  184.333885][ T6006] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  184.339626][ T4380] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  184.396836][ T6006] tipc: Enabled bearer <udp:syz0>, priority 10
[  184.410822][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.450129][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.476587][ T4430] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  184.567844][ T6016] bond0: Device is already in use.
[  184.602093][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.621607][ T4423] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  184.750487][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.758314][ T4380] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.774716][ T4423] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  184.834334][ T5997] loop2: detected capacity change from 0 to 32768
[  184.900659][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.969152][ T4427] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  184.997829][ T4380] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  185.023427][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.042065][ T4380] usb 1-1: Product: syz
[  185.052186][ T4380] usb 1-1: Manufacturer: syz
[  185.075533][ T4380] usb 1-1: SerialNumber: syz
[  185.120504][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  185.122198][ T4380] usb 1-1: config 0 descriptor??
[  185.128529][ T4427] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  185.234608][ T4380] ims_pcu 1-1:0.0: Missing CDC union descriptor
[  185.245944][ T4380] ims_pcu: probe of 1-1:0.0 failed with error -22
[  185.282048][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  185.317457][ T4430] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  185.451849][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  185.494548][ T4232] tipc: Node number set to 2130706433
[  185.607431][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  185.660232][ T6002] udc-core: couldn't find an available UDC or it's busy
[  185.687646][ T6002] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  185.730595][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  185.773865][ T6029] fuse: Bad value for 'fd'
[  185.805013][ T4229] usb 1-1: USB disconnect, device number 2
[  185.994399][ T4380] Bluetooth: hci0: command 0x0406 tx timeout
[  186.005167][ T4380] Bluetooth: hci1: command 0x0406 tx timeout
[  186.021053][ T4380] Bluetooth: hci4: command 0x0406 tx timeout
[  186.032533][ T4380] Bluetooth: hci3: command 0x0406 tx timeout
[  186.258315][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  186.600993][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  187.443199][ T6043] overlayfs: failed to clone upperpath
[  187.635546][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  187.942953][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  188.141737][ T4427] net_ratelimit: 6 callbacks suppressed
[  188.141773][ T4427] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  188.258973][ T6056] netlink: 168 bytes leftover after parsing attributes in process `syz.1.524'.
[  188.340828][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  188.348710][ T4427] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  188.539646][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  188.558586][  T144] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  188.574855][ T6064] netlink: 628 bytes leftover after parsing attributes in process `syz.4.526'.
[  188.709558][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  188.733582][  T144] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  188.816496][ T6067] tipc: Started in network mode
[  188.828087][ T6067] tipc: Node identity 7f000001, cluster identity 4711
[  188.847273][ T6067] tipc: Enabled bearer <udp:syz2>, priority 10
[  188.860515][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  188.877356][ T4430] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  188.912947][ T6067] netlink: 104 bytes leftover after parsing attributes in process `syz.2.527'.
[  188.971966][ T6067] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  188.999301][ T6067] tipc: Enabled bearer <udp:syz0>, priority 10
[  189.042252][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.067342][ T4430] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  189.210687][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.230955][ T4427] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  189.350626][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.366369][ T4427] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  189.437396][ T6075] netlink: 'syz.2.530': attribute type 1 has an invalid length.
[  189.492157][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.512780][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  189.674461][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.752565][  T144] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  190.368373][ T4232] tipc: Node number set to 2130706433
[  190.809608][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  190.951235][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  191.073674][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  191.466946][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  191.840962][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  191.979831][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  192.099640][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  192.219765][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  192.329696][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  192.451983][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  192.619603][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  192.740583][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  192.900721][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  193.925790][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.088094][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.094479][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.676483][ T4420] net_ratelimit: 13 callbacks suppressed
[  194.676498][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  194.821940][ T6105] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  194.831196][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.869583][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.889063][ T6106] netlink: 'syz.0.540': attribute type 1 has an invalid length.
[  194.899548][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.939720][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.969854][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  195.028020][ T6106] 8021q: adding VLAN 0 to HW filter on device bond3
[  195.034868][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  195.079673][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  195.087452][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  195.151115][ T6110] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  195.288305][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  195.342681][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  195.373835][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  195.473982][ T6122] xt_CT: You must specify a L4 protocol and not use inversions on it
[  195.907099][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  195.915340][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  196.528017][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  196.591420][ T4430] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  196.879590][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  196.948067][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  197.139648][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  197.162951][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  197.319815][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  197.335049][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  197.836110][ T1170] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  198.430653][ T1170] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  198.561288][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  198.581456][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  198.827415][ T6135] loop0: detected capacity change from 0 to 4096
[  206.633689][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  206.797744][ T4427] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  206.881711][ T6163] netlink: 'syz.3.553': attribute type 1 has an invalid length.
[  207.011632][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  207.026132][  T144] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  207.150766][ T6171] xt_CONNSECMARK: invalid mode: 66
[  207.195370][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  207.225185][  T144] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  207.459717][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  207.496204][  T144] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  208.140475][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  208.163358][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  208.189130][ T6175] overlayfs: failed to clone upperpath
[  208.894007][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  208.924970][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  209.049689][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.115298][ T4427] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  209.386410][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.722077][ T6188] xt_CT: You must specify a L4 protocol and not use inversions on it
[  209.821436][ T4427] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  209.945361][ T6194] device syzkaller0 entered promiscuous mode
[  209.979631][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.993282][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  210.141811][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  210.165667][ T4427] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  210.300653][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  210.420745][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  210.529501][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  210.679725][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  210.699115][ T6202] netlink: 'syz.0.577': attribute type 1 has an invalid length.
[  210.789638][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  210.910210][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  211.040622][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  211.178377][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  211.293193][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  211.530370][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  211.690501][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  211.813730][ T4420] net_ratelimit: 10 callbacks suppressed
[  211.814533][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  212.149577][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  212.157436][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  212.309661][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  212.317457][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  212.893485][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  212.909521][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  213.026008][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  213.044086][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  213.121670][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'.
[  213.178849][ T6260] device bond0 entered promiscuous mode
[  213.189571][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  213.207711][ T6260] device bond_slave_0 entered promiscuous mode
[  213.221069][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  213.235948][ T6260] device bond_slave_1 entered promiscuous mode
[  213.242537][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  213.258918][ T6260] device batadv0 entered promiscuous mode
[  213.274499][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  213.320182][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  213.397526][ T6260] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  213.429548][ T6260] Cannot create hsr debugfs directory
[  213.469628][ T6260] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  213.477239][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  213.495987][ T6260] 8021q: adding VLAN 0 to HW filter on device hsr1
[  213.507102][ T6263] netlink: 14 bytes leftover after parsing attributes in process `syz.2.584'.
[  213.519632][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  213.687314][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  213.849613][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  213.896638][   T26] audit: type=1804 audit(1784643311.229:191): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.588" name="/newroot/99/file0" dev="fuse" ino=1 res=1 errno=0
[  214.049947][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.345012][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.388142][ T6263] device bond0 left promiscuous mode
[  214.407278][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.416917][ T6263] device bond_slave_0 left promiscuous mode
[  214.423512][   T26] audit: type=1804 audit(1784643311.669:192): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.588" name="/newroot/99/file0" dev="fuse" ino=1 res=1 errno=0
[  214.451579][ T6263] device bond_slave_1 left promiscuous mode
[  214.471856][ T1170] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.530148][ T6263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.543399][ T6279] loop0: detected capacity change from 0 to 8
[  214.549656][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.561422][ T6263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.571133][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.589635][ T1170] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.608798][ T6263] bond0 (unregistering): Released all slaves
[  214.619610][ T1170] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.639640][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.660532][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.705495][ T6279] SQUASHFS error: Unable to read inode 0x127
[  214.713742][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  214.793160][ T6279] loop0: detected capacity change from 0 to 1764
[  214.863505][ T1170] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.878939][ T6279] iso9660: Corrupted directory entry in block 2 of inode 1920
[  214.888439][ T1170] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  215.042168][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  215.059774][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  215.128944][   T26] audit: type=1804 audit(1784643312.459:193): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.594" name="bus" dev="ramfs" ino=38497 res=1 errno=0
[  215.175195][   T26] audit: type=1804 audit(1784643312.479:194): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.594" name="bus" dev="ramfs" ino=38497 res=1 errno=0
[  215.195049][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  215.209450][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  215.344857][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  215.370282][  T144] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  215.500671][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  215.629556][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  215.819990][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  216.001645][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  216.160150][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  216.478002][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  216.609556][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  216.645474][ T6310] xt_CT: No such helper "syz1"
[  216.729535][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  216.919492][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  216.950091][ T4430] net_ratelimit: 8 callbacks suppressed
[  216.950191][ T4430] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  217.289700][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  217.367933][ T4430] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  217.582889][ T6321] device syzkaller0 entered promiscuous mode
[  217.619593][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  217.649636][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  217.698461][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  217.707187][ T6328] netlink: 52 bytes leftover after parsing attributes in process `syz.0.604'.
[  217.754657][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  217.917597][ T1170] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  217.969542][ T1170] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  218.050738][ T6336] set match dimension is over the limit!
[  218.753159][ T6338] bridge0: port 3(vlan3) entered blocking state
[  218.769665][ T6338] bridge0: port 3(vlan3) entered disabled state
[  218.797694][ T6338] device vlan3 entered promiscuous mode
[  218.832720][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  218.845837][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  218.856954][   T26] audit: type=1800 audit(1784643316.189:195): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.608" name="bus" dev="ramfs" ino=39480 res=0 errno=0
[  219.011584][ T1170] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  219.028592][ T1170] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  219.250893][ T6346] netlink: 'syz.3.610': attribute type 1 has an invalid length.
[  219.280303][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  219.472640][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  219.559546][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  219.679727][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  219.879624][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  220.049791][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  220.199591][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  220.329844][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  220.449829][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  220.559839][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  220.669700][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  220.733818][ T6346] 8021q: adding VLAN 0 to HW filter on device bond5
[  220.749526][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  220.780416][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  220.808141][ T6350] bond5: (slave vlan3): making interface the new active one
[  220.820617][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  220.879944][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  221.039739][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  221.153869][ T6350] bond5: (slave vlan3): Enslaving as an active interface with an up link
[  221.189774][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  221.280837][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  221.390157][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  221.555666][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  221.707568][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  221.739590][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  221.779701][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  221.940066][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  222.074742][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  222.119935][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  222.138205][ T4425] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  222.220760][ T6350] syz.3.610 (6350) used greatest stack depth: 18960 bytes left
[  222.402801][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  222.420599][  T144] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  223.523773][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  223.872249][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  224.149640][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  224.234588][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  224.511881][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  224.526170][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  224.669614][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  224.692959][  T144] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  224.819798][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  224.838454][ T4413] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  225.070666][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  225.240582][ T4420] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  225.351366][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  225.365490][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  225.636510][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'.
[  225.749559][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  225.839636][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  226.110473][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  226.130523][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  226.160144][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  226.179615][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  226.207044][ T6440] loop2: detected capacity change from 0 to 1024
[  226.249554][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  226.312137][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  226.356887][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  226.469886][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  226.630550][ T6440] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled
[  226.650056][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  226.877646][ T6440] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  226.892819][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  227.097141][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  227.121993][ T6440] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  227.129374][ T6440] EXT4-fs (loop2): Unrecognized mount option "subj_role=jqfmt=vfsv0" or missing value
[  227.169484][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  227.219748][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  227.451280][  T144] net_ratelimit: 2 callbacks suppressed
[  227.451472][  T144] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  228.098203][  T144] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  228.209852][  T144] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  228.254179][ T6469] netlink: 72 bytes leftover after parsing attributes in process `syz.4.640'.
[  228.697544][ T4430] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  228.794241][ T4430] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  229.130263][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  229.138165][ T4408] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  229.209678][ T6477] IPVS: Unknown mcast interface: dummy0
[  229.319574][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  229.590556][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  229.721559][ T4408] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  230.344793][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  230.384974][ T4415] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  230.664658][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  230.732296][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  230.939576][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  230.959605][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  231.730810][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  231.764203][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  231.883402][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  231.979748][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  232.072018][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  232.159682][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  232.256964][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  232.289636][ T4423] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  232.321224][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'.
[  232.400148][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  232.409738][ T4415] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  232.519930][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  232.528623][ T4415] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  232.840983][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  232.896826][ T4413] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  233.009487][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  233.032576][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  233.201852][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  233.260604][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  233.284479][ T6529] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  233.316906][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  233.469864][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  234.603985][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  234.679544][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  234.749521][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  234.779722][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  234.803763][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  234.870807][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  234.900996][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  234.920763][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  234.960487][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  234.980476][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.010141][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.029664][ T6526] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  235.055257][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.099533][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.138617][ T6526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.159756][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.179802][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.199644][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.220537][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.230166][ T6530] netlink: 'syz.2.657': attribute type 1 has an invalid length.
[  235.270531][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.290790][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.324898][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.343958][ T4415] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  235.479622][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.487543][ T4413] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  235.620719][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.628588][ T4423] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  235.789821][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.815658][ T4415] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  235.959964][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.989519][ T4423] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  236.417300][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  236.498554][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  237.893386][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  238.000209][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  238.129475][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  238.168922][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  238.347712][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  238.428526][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  238.861404][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  239.455547][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  239.618877][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  239.638078][ T4415] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  239.763448][ T4340] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  239.811468][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  239.849454][ T4413] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  239.908290][ T6630] capability: warning: `syz.4.680' uses deprecated v2 capabilities in a way that may be insecure
[  241.607291][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  241.638978][ T4415] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  241.735127][ T6641] netlink: 'syz.0.684': attribute type 1 has an invalid length.
[  241.790892][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'.
[  241.811081][ T6647] netlink: 996 bytes leftover after parsing attributes in process `syz.2.683'.
[  241.830774][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  241.849504][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  241.860303][ T4340] usb 1-1: device not accepting address 3, error -71
[  241.860661][ T6641] netlink: 'syz.0.684': attribute type 4 has an invalid length.
[  241.910220][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  241.939713][ T6641] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.684'.
[  241.969578][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.049709][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.142532][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.195707][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.212805][ T6650] netlink: 'syz.0.684': attribute type 1 has an invalid length.
[  242.234579][ T6650] netlink: 'syz.0.684': attribute type 4 has an invalid length.
[  242.268965][ T6650] netlink: 9491 bytes leftover after parsing attributes in process `syz.0.684'.
[  242.279850][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.299586][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.319897][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.328467][ T4427] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  242.444069][ T6668] netlink: 'syz.4.691': attribute type 1 has an invalid length.
[  242.502121][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.543953][ T6668] 8021q: adding VLAN 0 to HW filter on device bond2
[  242.550969][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.589575][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.609865][ T6666] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  242.629977][ T6666] device bridge_slave_0 left promiscuous mode
[  242.639183][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.650959][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.669973][ T6648] syz.3.686 (6648) used greatest stack depth: 17712 bytes left
[  242.680872][ T6666] device bridge_slave_1 left promiscuous mode
[  242.687124][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.690104][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.723508][ T6666] team0: Port device team_slave_0 removed
[  242.730609][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.758480][ T6666] team0: Port device team_slave_1 removed
[  242.780015][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.784933][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.800560][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.821063][ T6666] bond2: (slave geneve2): Releasing active interface
[  242.834798][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.866199][ T6666] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.875337][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.889583][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.898915][ T6666] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.923250][ T6666] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.939891][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.952696][ T6666] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.981076][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  242.998301][ T6679] bond2: (slave geneve2): making interface the new active one
[  243.007125][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  243.029691][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  243.057326][ T6679] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  243.066377][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  243.101743][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  243.110590][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  243.139498][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  243.171836][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  243.458947][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  243.478842][ T4415] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  244.371686][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  244.429228][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  244.508239][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'.
[  244.717221][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  244.725469][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  244.964588][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  245.046921][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  245.320403][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  245.467243][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  245.595731][ T6724] netlink: 277 bytes leftover after parsing attributes in process `syz.3.703'.
[  245.641645][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  245.675407][ T4435] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  245.777224][ T6732] netlink: 'syz.1.705': attribute type 1 has an invalid length.
[  245.810617][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  245.829615][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  245.846160][ T6735] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  245.874148][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  245.913502][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  245.939024][ T6735] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  245.969544][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  245.989153][ T6735] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  245.991485][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.006900][ T6735] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  246.019474][ T5610] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  246.035835][ T6735] bond2: (slave geneve2): making interface the new active one
[  246.047662][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.075405][ T6735] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  246.089469][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.124563][ T6732] bond2 (unregistering): (slave geneve2): Releasing active interface
[  246.133196][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.154769][ T6732] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  246.169624][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.178805][ T6732] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  246.199547][ T6732] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  246.208674][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.217067][ T6732] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  246.243825][ T6732] bond2 (unregistering): Released all slaves
[  246.250706][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.269563][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.289488][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.321081][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.359675][ T4423] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  246.379734][ T5610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.419511][ T5610] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  246.428821][ T5610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.469568][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.471025][ T5610] usb 1-1: config 0 descriptor??
[  246.490867][ T4423] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  246.619199][ T6740] bridge0: port 3(vlan4) entered blocking state
[  246.625720][ T4423] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.654950][ T6740] bridge0: port 3(vlan4) entered disabled state
[  246.662030][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.679819][ T6740] device vlan4 entered promiscuous mode
[  246.685592][ T6740] device bond0 entered promiscuous mode
[  246.692032][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.704399][ T6715] loop2: detected capacity change from 0 to 65536
[  246.709778][ T6740] bridge0: port 3(vlan4) entered blocking state
[  246.717224][ T6740] bridge0: port 3(vlan4) entered forwarding state
[  246.727484][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.758506][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  246.769605][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.790574][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.802629][ T6748] batman_adv: batadv0: Interface deactivated: dummy0
[  246.834979][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.848311][ T6715] XFS (loop2): Mounting V5 Filesystem
[  246.864642][ T6748] batman_adv: batadv0: Removing interface: dummy0
[  246.877386][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  246.886953][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  246.899617][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  246.909671][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.933504][ T6748] device bridge_slave_0 left promiscuous mode
[  246.940189][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.956194][ T6715] XFS (loop2): Ending clean mount
[  246.963303][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.979680][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  246.993146][ T5610] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[  247.006121][ T6715] XFS (loop2): Quotacheck needed: Please wait.
[  247.012928][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.028012][ T5610] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5
[  247.048276][ T6748] device bridge_slave_1 left promiscuous mode
[  247.052829][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.054993][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.072954][ T6748] device vlan4 left promiscuous mode
[  247.078299][ T6748] device bond0 left promiscuous mode
[  247.089632][ T4425] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.098833][ T6748] bond0: (slave bond_slave_0): Releasing backup interface
[  247.109631][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.122548][ T4413] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x25 dinode
[  247.134260][ T6748] device bond_slave_0 left promiscuous mode
[  247.140336][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.142178][ T4413] XFS (loop2): Unmount and run xfs_repair
[  247.155082][ T4413] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  247.162620][ T4413] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00  IN..............
[  247.166454][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.182923][ T4413] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  247.195150][ T4413] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[  247.205191][ T4413] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27  4.Xhz.DM.......'
[  247.214558][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.225507][ T4413] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  247.235246][ T4413] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4  .............DI.
[  247.244573][ T4413] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02  ................
[  247.244924][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.255636][ T4413] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  247.275266][ T6748] bond0: (slave bond_slave_1): Releasing backup interface
[  247.289037][ T6748] device bond_slave_1 left promiscuous mode
[  247.299569][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.325772][ T6715] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  247.358495][ T5610] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  247.373729][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.404932][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.459562][ T4420] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.493158][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.547114][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.609655][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.633129][ T6748] team0: Port device team_slave_1 removed
[  247.655494][ T6748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.669910][ T4435] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.698893][ T6748] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.709808][    C1] keytouch 0003:0926:3333.0001: Event data for report 0 was too short (8 vs 4)
[  247.719702][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.740399][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.774833][ T6748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.785502][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.822670][ T6748] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.830469][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.879928][ T6748] bond1: (slave macvlan2): Releasing active interface
[  247.890209][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.921328][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  247.968035][ T4232] usb 1-1: USB disconnect, device number 5
[  248.109729][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.150887][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.229796][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.310502][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.379610][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.459639][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.541350][ T5610] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x8001 
[  248.564457][ T5610] XFS (loop2): Unmount and run xfs_repair
[  248.579670][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.605624][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.619100][ T5610] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  248.640105][ T6748] bond3: (slave geneve2): Releasing active interface
[  248.647689][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.659671][ T4413] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.669822][ T5610] 00000000: 58 41 47 46 00 00 00 01 00 00 00 01 00 00 40 00  XAGF..........@.
[  248.680551][ T6715] loop2: detected capacity change from 65536 to 64
[  248.697033][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.702421][ T5610] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  248.740825][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.769982][ T4427] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.815371][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.840680][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.868111][ T5610] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  248.873860][ T4408] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.878328][ T5610] 00000030: 00 00 00 04 00 00 3b 5f 00 00 3b 5c 00 00 00 00  ......;_..;\....
[  248.893966][ T5610] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  248.902909][ T5610] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  248.911845][ T5610] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  248.920818][ T5610] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  248.930087][ T6768] XFS (loop2): metadata I/O error in "xfs_read_agf+0x239/0x4f0" at daddr 0x8001 len 1 error 74
[  248.970586][ T4415] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms
[  248.987825][ T6748] bond4: (slave ip6gretap1): Releasing active interface
[  249.710695][ T4191] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x25 dinode
[  249.724702][ T6748] bond5: (slave vlan3): Releasing active interface
[  249.776500][ T4191] XFS (loop2): Unmount and run xfs_repair
[  250.302320][ T4191] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  250.393175][ T6748] bridge0: port 3(vlan4) entered disabled state
[  250.529634][ T4191] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00  IN..............
[  250.538580][ T4191] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  250.597305][ T4191] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[  250.606557][ T4191] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27  4.Xhz.DM.......'
[  250.648689][ T4191] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  250.694937][ T4191] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4  .............DI.
[  250.723744][ T4191] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02  ................
[  250.739801][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'.
[  250.778757][ T4191] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  250.800070][ T4191] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x25 dinode
[  250.811642][ T4191] XFS (loop2): Unmount and run xfs_repair
[  250.817493][ T4191] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  250.825761][ T4191] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00  IN..............
[  250.835396][ T4191] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  250.844750][ T4191] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[  250.854142][ T4191] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27  4.Xhz.DM.......'
[  250.869815][ T4191] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  250.882194][ T4191] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4  .............DI.
[  250.932859][ T4191] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02  ................
[  250.985313][ T4191] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  252.403137][   T26] audit: type=1804 audit(1784643349.739:196): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.724" name="bus" dev="ramfs" ino=40062 res=1 errno=0
[  252.472557][   T26] audit: type=1804 audit(1784643349.779:197): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.724" name="bus" dev="ramfs" ino=40062 res=1 errno=0
[  253.465285][ T4191] attempt to access beyond end of device
[  253.465285][ T4191] loop2: rw=432129, want=32896, limit=64
[  253.501480][  T150] XFS (loop2): log I/O error -5
[  253.509822][  T150] XFS (loop2): Log I/O Error (0x2) detected at xlog_ioend_work+0xbf/0x110 (fs/xfs/xfs_log.c:1347).  Shutting down filesystem.
[  253.523440][  T150] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  253.540980][ T4191] XFS (loop2): Unmounting Filesystem
[  254.504699][ T6760] ==================================================================
[  254.513348][ T6760] BUG: KASAN: use-after-free in xfs_iflush_cluster+0xe8/0x1230
[  254.520924][ T6760] Read of size 8 at addr ffff888074eeb1d0 by task xfsaild/loop2/6760
[  254.529004][ T6760] 
[  254.531335][ T6760] CPU: 0 PID: 6760 Comm: xfsaild/loop2 Not tainted syzkaller #0
[  254.538973][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  254.549054][ T6760] Call Trace:
[  254.552348][ T6760]  <TASK>
[  254.555291][ T6760]  dump_stack_lvl+0x188/0x250
[  254.559993][ T6760]  ? show_regs_print_info+0x20/0x20
[  254.565215][ T6760]  ? load_image+0x410/0x410
[  254.569728][ T6760]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  254.575211][ T6760]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  254.580899][ T6760]  print_address_description+0x60/0x2d0
[  254.586471][ T6760]  ? xfs_iflush_cluster+0xe8/0x1230
[  254.591686][ T6760]  kasan_report+0xdf/0x130
[  254.596120][ T6760]  ? xfs_iflush_cluster+0xe8/0x1230
[  254.601331][ T6760]  xfs_iflush_cluster+0xe8/0x1230
[  254.606382][ T6760]  xfs_inode_item_push+0x1c3/0x2a0
[  254.611560][ T6760]  xfsaild+0xd04/0x26f0
[  254.615753][ T6760]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  254.621667][ T6760]  ? xfs_trans_ail_init+0x230/0x230
[  254.626890][ T6760]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  254.632810][ T6760]  ? __kthread_parkme+0x14e/0x1b0
[  254.637856][ T6760]  kthread+0x42e/0x520
[  254.641937][ T6760]  ? xfs_trans_ail_init+0x230/0x230
[  254.647153][ T6760]  ? kthread_blkcg+0xd0/0xd0
[  254.651763][ T6760]  ret_from_fork+0x1f/0x30
[  254.656209][ T6760]  </TASK>
[  254.659241][ T6760] 
[  254.661574][ T6760] Allocated by task 6715:
[  254.665997][ T6760]  __kasan_slab_alloc+0x92/0xc0
[  254.670867][ T6760]  slab_post_alloc_hook+0x4c/0x380
[  254.676077][ T6760]  kmem_cache_alloc+0x15d/0x280
[  254.680937][ T6760]  xfs_inode_item_init+0x2f/0xc0
[  254.685894][ T6760]  xfs_trans_ijoin+0xb2/0xe0
[  254.690501][ T6760]  xfs_setattr_size+0x504/0xb90
[  254.695369][ T6760]  xfs_vn_setattr+0x260/0x310
[  254.700073][ T6760]  notify_change+0xbc6/0xee0
[  254.704679][ T6760]  do_truncate+0x1ac/0x240
[  254.709112][ T6760]  path_openat+0x293b/0x2fb0
[  254.713715][ T6760]  do_filp_open+0x1df/0x400
[  254.718232][ T6760]  do_sys_openat2+0x14b/0x500
[  254.722935][ T6760]  __x64_sys_creat+0x8c/0xb0
[  254.727537][ T6760]  do_syscall_64+0x4c/0xa0
[  254.731964][ T6760]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  254.737871][ T6760] 
[  254.740207][ T6760] Freed by task 14:
[  254.744016][ T6760]  kasan_set_track+0x4b/0x70
[  254.748620][ T6760]  kasan_set_free_info+0x1f/0x40
[  254.753580][ T6760]  ____kasan_slab_free+0xd5/0x110
[  254.758618][ T6760]  slab_free_freelist_hook+0xec/0x170
[  254.764011][ T6760]  kmem_cache_free+0x8f/0x210
[  254.768726][ T6760]  xfs_inode_free_callback+0x1bc/0x230
[  254.774202][ T6760]  rcu_core+0x96e/0x1650
[  254.778455][ T6760]  handle_softirqs+0x336/0x830
[  254.783225][ T6760]  run_ksoftirqd+0xa4/0x100
[  254.787735][ T6760]  smpboot_thread_fn+0x520/0x990
[  254.792714][ T6760]  kthread+0x42e/0x520
[  254.796797][ T6760]  ret_from_fork+0x1f/0x30
[  254.801235][ T6760] 
[  254.803588][ T6760] The buggy address belongs to the object at ffff888074eeb140
[  254.803588][ T6760]  which belongs to the cache xfs_ili of size 256
[  254.817333][ T6760] The buggy address is located 144 bytes inside of
[  254.817333][ T6760]  256-byte region [ffff888074eeb140, ffff888074eeb240)
[  254.830624][ T6760] The buggy address belongs to the page:
[  254.836361][ T6760] page:ffffea0001d3bac0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74eeb
[  254.846530][ T6760] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  254.854119][ T6760] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801e39bb40
[  254.862719][ T6760] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[  254.871313][ T6760] page dumped because: kasan: bad access detected
[  254.877750][ T6760] page_owner tracks the page as allocated
[  254.883469][ T6760] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 6715, ts 246987782834, free_ts 177888463037
[  254.902672][ T6760]  get_page_from_freelist+0x24f6/0x2670
[  254.908241][ T6760]  __alloc_pages+0x1ee/0x480
[  254.912839][ T6760]  new_slab+0xc0/0x4b0
[  254.916915][ T6760]  ___slab_alloc+0x807/0xdd0
[  254.921514][ T6760]  kmem_cache_alloc+0xf0/0x280
[  254.926289][ T6760]  xfs_inode_item_init+0x2f/0xc0
[  254.931240][ T6760]  xfs_trans_ijoin+0xb2/0xe0
[  254.935839][ T6760]  xfs_init_new_inode+0xa98/0xde0
[  254.940874][ T6760]  xfs_qm_qino_alloc+0x498/0x990
[  254.945822][ T6760]  xfs_qm_init_quotainos+0x4b3/0x6b0
[  254.951121][ T6760]  xfs_qm_init_quotainfo+0xa3/0x9a0
[  254.956346][ T6760]  xfs_qm_mount_quotas+0x95/0x5f0
[  254.961391][ T6760]  xfs_mountfs+0x144a/0x1ae0
[  254.965998][ T6760]  xfs_fs_fill_super+0x119b/0x13e0
[  254.971117][ T6760]  get_tree_bdev+0x3e6/0x610
[  254.975725][ T6760]  vfs_get_tree+0x88/0x270
[  254.980152][ T6760] page last free stack trace:
[  254.984825][ T6760]  free_unref_page_prepare+0x637/0x6c0
[  254.990295][ T6760]  free_unref_page+0x8f/0x2a0
[  254.994985][ T6760]  __unfreeze_partials+0x188/0x1e0
[  255.000109][ T6760]  put_cpu_partial+0x12d/0x190
[  255.004912][ T6760]  qlist_free_all+0x35/0x90
[  255.009514][ T6760]  kasan_quarantine_reduce+0x150/0x160
[  255.014980][ T6760]  __kasan_krealloc+0xa7/0x1b0
[  255.019840][ T6760]  krealloc+0xb1/0xf0
[  255.023832][ T6760]  do_check+0x2dec/0xefc0
[  255.028173][ T6760]  do_check_common+0xe7f/0x16e0
[  255.033029][ T6760]  bpf_check+0x88c1/0xf6b0
[  255.037463][ T6760]  bpf_prog_load+0xfdf/0x14e0
[  255.042153][ T6760]  __sys_bpf+0x532/0x6f0
[  255.046408][ T6760]  __x64_sys_bpf+0x78/0x90
[  255.050828][ T6760]  do_syscall_64+0x4c/0xa0
[  255.055254][ T6760]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  255.061166][ T6760] 
[  255.063505][ T6760] Memory state around the buggy address:
[  255.069139][ T6760]  ffff888074eeb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.077209][ T6760]  ffff888074eeb100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  255.085279][ T6760] >ffff888074eeb180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.093343][ T6760]                                                  ^
[  255.100025][ T6760]  ffff888074eeb200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  255.108107][ T6760]  ffff888074eeb280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  255.116175][ T6760] ==================================================================
[  255.124271][ T6760] Disabling lock debugging due to kernel taint
[  255.204124][ T6836] bridge0: port 4(vlan5) entered blocking state
[  255.220500][ T6836] bridge0: port 4(vlan5) entered disabled state
[  255.238946][ T6760] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  255.246353][ T6760] CPU: 1 PID: 6760 Comm: xfsaild/loop2 Tainted: G    B             syzkaller #0
[  255.255440][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  255.265519][ T6760] Call Trace:
[  255.268835][ T6760]  <TASK>
[  255.271788][ T6760]  dump_stack_lvl+0x188/0x250
[  255.276507][ T6760]  ? show_regs_print_info+0x20/0x20
[  255.281740][ T6760]  ? load_image+0x410/0x410
[  255.286282][ T6760]  panic+0x2f8/0x850
[  255.290205][ T6760]  ? bpf_jit_dump+0xd0/0xd0
[  255.294752][ T6760]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  255.300753][ T6760]  ? _raw_spin_unlock+0x40/0x40
[  255.305632][ T6760]  ? xfs_iflush_cluster+0xe8/0x1230
[  255.306514][ T6836] device vlan5 entered promiscuous mode
[  255.310850][ T6760]  check_panic_on_warn+0x80/0xa0
[  255.310874][ T6760]  ? xfs_iflush_cluster+0xe8/0x1230
[  255.310894][ T6760]  end_report+0x6d/0xf0
[  255.330719][ T6760]  kasan_report+0x102/0x130
[  255.331213][ T6836] device bond0 entered promiscuous mode
[  255.335290][ T6760]  ? xfs_iflush_cluster+0xe8/0x1230
[  255.335333][ T6760]  xfs_iflush_cluster+0xe8/0x1230
[  255.351143][ T6760]  xfs_inode_item_push+0x1c3/0x2a0
[  255.356294][ T6760]  xfsaild+0xd04/0x26f0
[  255.360542][ T6760]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  255.363312][ T6836] device bond_slave_0 entered promiscuous mode
[  255.366472][ T6760]  ? xfs_trans_ail_init+0x230/0x230
[  255.377869][ T6760]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  255.383805][ T6760]  ? __kthread_parkme+0x14e/0x1b0
[  255.388132][ T6836] device bond_slave_1 entered promiscuous mode
[  255.388855][ T6760]  kthread+0x42e/0x520
[  255.388880][ T6760]  ? xfs_trans_ail_init+0x230/0x230
[  255.404418][ T6760]  ? kthread_blkcg+0xd0/0xd0
[  255.409036][ T6760]  ret_from_fork+0x1f/0x30
[  255.413494][ T6760]  </TASK>
[  255.416854][ T6760] Kernel Offset: disabled
[  255.421203][ T6760] Rebooting in 86400 seconds..