last executing test programs:

17.453678344s ago: executing program 1 (id=179):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0)

17.050402359s ago: executing program 1 (id=180):
socket$inet(0x2, 0x3, 0x2)
socket$igmp(0x2, 0x3, 0x2)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x41, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0)

16.081937342s ago: executing program 1 (id=184):
timer_create(0x0, &(0x7f0000533fa0), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='ext4_discard_blocks\x00', r1}, 0x10)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x13, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x13\x00'}]}, 0x1c}}, 0x0)
fanotify_init(0x200, 0x0)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x3f000000, 0xaeae})
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback, 0x1}, 0xfffffffffffffc4f)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x44}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x24, 0x0, &(0x7f0000000300)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32], 0x0)
llistxattr(0x0, 0x0, 0x0)

12.597798236s ago: executing program 1 (id=195):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x80, &(0x7f0000000340)={[{@discard}, {@filestreams}, {@gqnoenforce}, {@bsdgroups}, {@gqnoenforce}, {@discard}]}, 0x1, 0x97e8, &(0x7f000001c700)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

10.482939711s ago: executing program 1 (id=213):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001740)=0x6)
ioprio_set$pid(0x3, 0x0, 0x0)
ioprio_get$pid(0x3, 0x0)

8.787930125s ago: executing program 1 (id=215):
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000002080)={@broadcast, @multicast, @val, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "13209f", 0x0, "0dc1e8"}}}}}}, 0x0)

8.000297226s ago: executing program 4 (id=218):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfeM\xb6\xe0\x02\x00\xd5\xa9u[\xf3\x15\xa5<\xd1=\x93\xf7\xf7Sn\x01\xfe\x1a\x96@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)=',\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc6Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80809440, 0x0)
r5 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0)
fstat(r5, &(0x7f0000000140))

6.785352298s ago: executing program 4 (id=220):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0100001900010000000000000003001d010000150003000000000000000000ee76dc5c8c55db8d010000001e0106000000ff"], 0x14c}}, 0x0)

6.591605669s ago: executing program 3 (id=223):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

6.401764423s ago: executing program 3 (id=225):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'gretap0\x00', <r1=>0x0, 0x40, 0x40, 0x3, 0x8000, {{0xb, 0x4, 0x0, 0x3d, 0x2c, 0x68, 0x0, 0xff, 0x2f, 0x0, @empty, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @generic={0x86, 0x12, "1ac08e0cbe07176ad612453e4e13abe0"}, @noop]}}}}})
r2 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000540)=0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf0ffffff, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "00000000b8890c3700000200"}}}]}, 0x48}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', <r10=>0x0, 0x7800, 0x0, 0x34b, 0xffffffff, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x65, 0x0, 0x7f, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp_prespec={0x44, 0x44, 0xc8, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@empty, 0xffffffc1}, {@broadcast, 0x4}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast2, 0x3}, {@broadcast, 0x6}, {@private=0xa010102, 0x81}]}, @timestamp_addr={0x44, 0xc, 0x5a, 0x1, 0x9, [{@local}]}, @rr={0x7, 0x7, 0x63, [@private=0xa010100]}, @lsrr={0x83, 0x1f, 0xdd, [@multicast2, @multicast1, @broadcast, @multicast1, @private=0xa010102, @multicast2, @local]}, @lsrr={0x83, 0x1f, 0xcc, [@dev={0xac, 0x14, 0x14, 0x20}, @remote, @multicast1, @private=0xa010101, @private=0xa010102, @broadcast, @private=0xa010102]}]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6gre0\x00', <r12=>0x0, 0x2f, 0x7f, 0x7f, 0x8000, 0x0, @mcast1, @loopback, 0x1, 0x40, 0x8, 0x4}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'erspan0\x00', &(0x7f0000000580)={'syztnl1\x00', <r13=>0x0, 0x20, 0x4006, 0x2b6, 0x81, {{0x22, 0x4, 0x1, 0x6, 0x88, 0x64, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4c, 0xf8, 0x3, 0x4, [{@empty, 0x3}, {@multicast1, 0x1}, {@private=0xa010101}, {@multicast2, 0xc}, {@multicast2, 0xffffffff}, {@multicast2, 0xfff}, {@local}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x7}, {@loopback, 0x10001}]}, @lsrr={0x83, 0x23, 0xbc, [@loopback, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010101, @multicast2, @multicast1]}]}}}}})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x84, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb0, 0x40101}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x58, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x6}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @link_local}, @IFLA_HSR_SLAVE1={0x8, 0x1, r11}, @IFLA_HSR_SLAVE1={0x8, 0x1, r12}, @IFLA_HSR_SLAVE1={0x8, 0x1, r13}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
r14 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x17ef, 0x60ee, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xfb, 0x0, 0x1, {0x22, 0x3f4}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r14, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0)
syz_usb_control_io(r14, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

5.643985194s ago: executing program 4 (id=226):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1800000, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c0053bb9f2c002ab7f7cb2a4d99f3072894dcdb613d674eea5cba876b9c21533cc3c712e60a8c298e03d687acaec5b3fcadcacec3f85e0f77ea103d31bbb53015218d70119109d781469939e5e12e5b6b0ea1c7ae80fe13725a3c6eb775cde22e0f9382f76fdfdd0a3f1b6d7b9fd07e6a272815fdc4117a31a6ace03486ad2f714559974d02b206b9c54d1a635e770f980f803aa3155fcfef8b0e7d18b5155e7824b6ac1b362afec5447d5c44e6ba55e5fdc0cd9b0ce34d70b1dbbe3c1cc3d67c0f053efad98da551a2fc8b20f6a073a0ae1eac2f3ed80347a786ff5b93cdd59df8d8"], 0x5, 0x1519, &(0x7f0000003ec0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6e}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)

5.317190277s ago: executing program 4 (id=228):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x2716, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)

3.986312748s ago: executing program 0 (id=233):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}], {0x14}}, 0x3c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="680000000000020000000000000000001400000000000000000000000000000000000001440004474009803e00000028feb3a1d8e656b0590d68d06bfe826a0884d397788cea3c9c700be24a30446c454baa6f0421a4707aa17d16574e0fbe63958c19b4f40b1e27"], 0x68}], 0x1}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0x3a, 0xb, 0x0, 0x0, {0x3}, [@nested={0xfffffffffffffec1, 0x0, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='\r4\xd8\x02j,'}]}]}, 0x2c}}, 0x0)

3.837684311s ago: executing program 0 (id=234):
socketpair$unix(0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2b, &(0x7f0000000080)={0xa, 0x0}, 0x10)

3.681970786s ago: executing program 3 (id=235):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newchain={0x24, 0x2e, 0x901, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)

3.19445805s ago: executing program 0 (id=236):
msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000)
msgsnd(0x0, &(0x7f0000000240)={0x3}, 0x4, 0x0)

2.652330633s ago: executing program 4 (id=239):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffffff}]}]}]}}]}, 0x9c}}, 0x0)

2.352227356s ago: executing program 2 (id=242):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000600)={[{@part={'part', 0x3d, 0x10ffff}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@codepage={'codepage', 0x3d, 'cp950'}}, {@gid}]}, 0x4, 0x343, &(0x7f0000000280)="$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")
mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

2.239463443s ago: executing program 0 (id=243):
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
open$dir(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x60103, 0x0)

2.083596372s ago: executing program 2 (id=244):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
dup2(r0, 0xffffffffffffffff)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$l2tp6(0xa, 0x2, 0x73)
socket$packet(0x11, 0x0, 0x300)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @mcast1, @private0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8460000f})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_getoverrun(0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r5, 0x40086608, &(0x7f0000000000))

1.054286102s ago: executing program 0 (id=245):
socketpair$unix(0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2b, &(0x7f0000000080)={0xa, 0x0}, 0x10)

880.13499ms ago: executing program 2 (id=246):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f3088222000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
gettid()
timer_create(0x3, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)

856.159739ms ago: executing program 2 (id=247):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000140)=""/228, 0xe4}, {0x0}], 0x2, 0x20, 0x0)

692.610849ms ago: executing program 2 (id=248):
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r4}})
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

489.522024ms ago: executing program 0 (id=249):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
unshare(0x6040600)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, 0x0)

387.981058ms ago: executing program 2 (id=250):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000030000000100ffff0900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180080001006c6f6700200002800900024073797a300000000008000340000000060800034000000002380401800c000100626974776973650028040280080003400000000808000240000000140800064000000002080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340fffffff8080003400000000908000340684dbc5808000180ffffffff6200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb0d00020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000002900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc0800018000000007080003408000000108000340000000050b0001000bca99f460f4b0002800028008000180fffffffb0900020073797a3000000000080003400000000308000340000001ff04000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d65746100000000240002800800024000000002080003400000000d08000340000000090800034000000001100001800a0001006c696d69740000000900010073797a30"], 0x548}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
memfd_create(0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="d64018d045425ac05ef8825ab12f4cdfaf249ed25b2237ec697b1a2672f0eebf752b42a90d7ce1bb6cecde79137894996f34a9ddd06068a9360753eac71eb73e721b50443ae5e8577a1d34201aee2aa328c12d859757fb0edfbdea0f3628fe3f4a7644a465df876afdcdcd2e30859763deda795aefd8d36d1fba16e6c96c78a38742063c8de5acbfc6308a7fd282d958725da202db52c2d49bed515de5035d8fb6b24ae8d37accc6181d74535e8f01aaabd131cd5f44030f5d26eda9c4f7f0168557ca9e3a9f0ee806", 0xc9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180400000100f1ff0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8f9f000000000000000004000000180001801400020076657468300001000000000000000000"], 0x2c}}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100))
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x3000, 0x0, 0x1ff}})
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1b, 0x0, "05be04f85f24b3154478c908c2f6ecd93900e179a582b52ce9cfeb10f466693ce04d4c38eef0cdc8075077a1f8d2e67f41bbcb62a57680a053b58536349d9c41", "e3c055e4c17b5fec8c1737c24bc5bbb0751fe63b9e0c55b1e82eac590b9d7f057b8d7c7af91d8d9d0b4f7525250c81dd277b5b6cbc5b00", "7a91b590b9c06821ef5c606d5f4ba751aae2edcc2717a215ed6e2285e774391e", [0x7, 0x2]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x15}, {0x5}, {0x6, 0x8d, 0x0, 0x1}]})
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80100, 0x0, 0x20}, 0x18)
fcntl$setownex(r7, 0xf, &(0x7f00000000c0))
open_tree(r7, &(0x7f0000000100)='./file0\x00', 0x9000)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400280, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
pipe(&(0x7f0000000140)={<r8=>0xffffffffffffffff})
connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10)

382.769145ms ago: executing program 3 (id=251):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x1c, 0x3e, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0)

308.061928ms ago: executing program 4 (id=252):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
getsockopt$bt_BT_SECURITY(r0, 0x111, 0x5, 0x0, 0x20001f00)

224.96695ms ago: executing program 3 (id=253):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000600)={[{@part={'part', 0x3d, 0x10ffff}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@codepage={'codepage', 0x3d, 'cp950'}}, {@gid}]}, 0x4, 0x343, &(0x7f0000000280)="$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")
mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

0s ago: executing program 3 (id=254):
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
open$dir(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x60103, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts.
[   71.763460][ T5079] cgroup: Unknown subsys name 'net'
[   71.881909][ T5079] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   73.831738][ T5079] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.428673][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.441292][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.462814][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.471690][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.478734][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.480160][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.495474][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.499378][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.503227][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.518695][ T5107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.522399][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.527121][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.533598][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.542004][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.549155][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   76.558416][ T5108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.564344][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.570836][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.577866][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.588089][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.591599][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.600752][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   76.614896][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.622936][   T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   76.631848][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   76.640885][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.648763][ T5107] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   76.659058][ T5107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.668628][ T5107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.676217][ T4488] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.206513][ T5090] chnl_net:caif_netlink_parms(): no params data found
[   77.395269][ T5092] chnl_net:caif_netlink_parms(): no params data found
[   77.406609][ T5089] chnl_net:caif_netlink_parms(): no params data found
[   77.505880][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.513746][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.521600][ T5090] bridge_slave_0: entered allmulticast mode
[   77.529072][ T5090] bridge_slave_0: entered promiscuous mode
[   77.559453][ T5105] chnl_net:caif_netlink_parms(): no params data found
[   77.596805][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.604195][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.612000][ T5090] bridge_slave_1: entered allmulticast mode
[   77.619373][ T5090] bridge_slave_1: entered promiscuous mode
[   77.818268][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.842509][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.853961][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.862512][ T5089] bridge_slave_0: entered allmulticast mode
[   77.873086][ T5089] bridge_slave_0: entered promiscuous mode
[   77.882086][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.892462][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.900058][ T5092] bridge_slave_0: entered allmulticast mode
[   77.908417][ T5092] bridge_slave_0: entered promiscuous mode
[   77.920394][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.930291][ T5098] chnl_net:caif_netlink_parms(): no params data found
[   77.969339][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.976643][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.984252][ T5089] bridge_slave_1: entered allmulticast mode
[   77.991999][ T5089] bridge_slave_1: entered promiscuous mode
[   77.999295][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.006854][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.014792][ T5092] bridge_slave_1: entered allmulticast mode
[   78.023225][ T5092] bridge_slave_1: entered promiscuous mode
[   78.048557][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.056200][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.064187][ T5105] bridge_slave_0: entered allmulticast mode
[   78.071911][ T5105] bridge_slave_0: entered promiscuous mode
[   78.133391][ T5090] team0: Port device team_slave_0 added
[   78.140053][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.147223][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.155179][ T5105] bridge_slave_1: entered allmulticast mode
[   78.163086][ T5105] bridge_slave_1: entered promiscuous mode
[   78.234829][ T5090] team0: Port device team_slave_1 added
[   78.257302][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.275149][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.288583][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.320523][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.347396][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.360766][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.468562][ T5092] team0: Port device team_slave_0 added
[   78.490724][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.497822][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.530459][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.547444][ T5105] team0: Port device team_slave_0 added
[   78.558265][ T5105] team0: Port device team_slave_1 added
[   78.583131][ T5092] team0: Port device team_slave_1 added
[   78.594699][ T5089] team0: Port device team_slave_0 added
[   78.603598][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.612030][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.619300][ T5098] bridge_slave_0: entered allmulticast mode
[   78.621075][ T5107] Bluetooth: hci1: command tx timeout
[   78.629164][ T5098] bridge_slave_0: entered promiscuous mode
[   78.640788][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.648307][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.677292][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.700148][ T5107] Bluetooth: hci4: command tx timeout
[   78.706311][ T5107] Bluetooth: hci0: command tx timeout
[   78.731646][ T5089] team0: Port device team_slave_1 added
[   78.751894][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.760281][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.769366][ T5098] bridge_slave_1: entered allmulticast mode
[   78.777323][ T5098] bridge_slave_1: entered promiscuous mode
[   78.783656][ T5101] Bluetooth: hci3: command tx timeout
[   78.790359][ T5107] Bluetooth: hci2: command tx timeout
[   78.833939][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.841361][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.868369][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.893629][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.901088][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.927171][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.958071][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.973732][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.984019][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.991741][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.018039][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.042494][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.053973][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.081197][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.137374][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.144462][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.171265][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.184665][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.191849][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.218268][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.242882][ T5090] hsr_slave_0: entered promiscuous mode
[   79.250659][ T5090] hsr_slave_1: entered promiscuous mode
[   79.265701][ T5098] team0: Port device team_slave_0 added
[   79.323047][ T5098] team0: Port device team_slave_1 added
[   79.347776][ T5105] hsr_slave_0: entered promiscuous mode
[   79.356124][ T5105] hsr_slave_1: entered promiscuous mode
[   79.363180][ T5105] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.371235][ T5105] Cannot create hsr debugfs directory
[   79.477835][ T5092] hsr_slave_0: entered promiscuous mode
[   79.485197][ T5092] hsr_slave_1: entered promiscuous mode
[   79.492401][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.500629][ T5092] Cannot create hsr debugfs directory
[   79.533662][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.541331][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.568072][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.603950][ T5089] hsr_slave_0: entered promiscuous mode
[   79.611746][ T5089] hsr_slave_1: entered promiscuous mode
[   79.618004][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.626230][ T5089] Cannot create hsr debugfs directory
[   79.653790][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.661084][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.688061][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.925486][ T5098] hsr_slave_0: entered promiscuous mode
[   79.933222][ T5098] hsr_slave_1: entered promiscuous mode
[   79.941120][ T5098] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.948955][ T5098] Cannot create hsr debugfs directory
[   80.298147][ T5090] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.320467][ T5090] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.334247][ T5090] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.350337][ T5090] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.414657][ T5092] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.427345][ T5092] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.438729][ T5092] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.464458][ T5092] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.574230][ T5105] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   80.592471][ T5105] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   80.608087][ T5105] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   80.630672][ T5105] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   80.700024][ T5107] Bluetooth: hci1: command tx timeout
[   80.782010][ T5107] Bluetooth: hci0: command tx timeout
[   80.783145][ T5101] Bluetooth: hci4: command tx timeout
[   80.795272][ T5089] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.817976][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.830196][ T5089] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   80.841341][ T5089] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   80.859887][ T5101] Bluetooth: hci2: command tx timeout
[   80.860081][ T5107] Bluetooth: hci3: command tx timeout
[   80.894741][ T5089] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.954192][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.008360][ T5098] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.024151][ T5098] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.039117][ T5098] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.051840][ T5098] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.072402][ T5090] 8021q: adding VLAN 0 to HW filter on device team0
[   81.163235][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.170798][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.214683][ T5092] 8021q: adding VLAN 0 to HW filter on device team0
[   81.225730][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.232982][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.283351][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.290583][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.343804][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.379461][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.386714][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.409283][ T5105] 8021q: adding VLAN 0 to HW filter on device team0
[   81.498348][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.536579][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.543866][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.611131][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.618387][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.646807][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.685028][ T5089] 8021q: adding VLAN 0 to HW filter on device team0
[   81.717469][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.724726][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.771684][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.778962][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.806060][ T5098] 8021q: adding VLAN 0 to HW filter on device team0
[   81.868728][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.876040][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.894858][ T5105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.936953][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.944387][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.152396][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.181807][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.284434][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.406800][ T5090] veth0_vlan: entered promiscuous mode
[   82.542799][ T5090] veth1_vlan: entered promiscuous mode
[   82.645139][ T5092] veth0_vlan: entered promiscuous mode
[   82.668942][ T5092] veth1_vlan: entered promiscuous mode
[   82.730718][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.780240][ T5107] Bluetooth: hci1: command tx timeout
[   82.817802][ T5090] veth0_macvtap: entered promiscuous mode
[   82.859506][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.867220][ T5107] Bluetooth: hci4: command tx timeout
[   82.870518][ T5107] Bluetooth: hci0: command tx timeout
[   82.897746][ T5090] veth1_macvtap: entered promiscuous mode
[   82.922406][ T5092] veth0_macvtap: entered promiscuous mode
[   82.934025][ T5092] veth1_macvtap: entered promiscuous mode
[   82.942350][ T5107] Bluetooth: hci2: command tx timeout
[   82.942475][ T5101] Bluetooth: hci3: command tx timeout
[   82.979174][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.008881][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.020500][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.038958][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.061233][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.073931][ T5090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.083283][ T5090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.092542][ T5090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.106565][ T5090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.120728][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.131523][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.144221][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.162294][ T5098] veth0_vlan: entered promiscuous mode
[   83.182811][ T5092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.191925][ T5092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.202640][ T5092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.212054][ T5092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.245156][ T5098] veth1_vlan: entered promiscuous mode
[   83.258843][ T5105] veth0_vlan: entered promiscuous mode
[   83.277109][ T5105] veth1_vlan: entered promiscuous mode
[   83.458544][ T5098] veth0_macvtap: entered promiscuous mode
[   83.485063][ T5089] veth0_vlan: entered promiscuous mode
[   83.566733][ T5105] veth0_macvtap: entered promiscuous mode
[   83.576663][ T5098] veth1_macvtap: entered promiscuous mode
[   83.591917][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.606469][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.624841][ T5089] veth1_vlan: entered promiscuous mode
[   83.644115][ T5105] veth1_macvtap: entered promiscuous mode
[   83.661459][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.672971][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.681594][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.686713][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.702708][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.714895][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.728408][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.771987][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.784572][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.796682][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.811777][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.824532][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.846191][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.870666][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.883565][ T5098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.893868][ T5098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.904798][ T5098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.914167][ T5098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.968380][  T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.998717][  T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.021591][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.035755][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.048667][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.059424][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.070257][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.080802][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.093518][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.163620][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.185924][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.197327][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.217127][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.248159][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.265866][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.286821][ T5179] loop0: detected capacity change from 0 to 128
[   84.291565][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.339274][ T5105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.361504][ T5105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.393374][ T5105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.424885][ T5105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.457444][ T5180] loop0: detected capacity change from 0 to 512
[   84.464663][ T5089] veth0_macvtap: entered promiscuous mode
[   84.494607][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.518658][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.565818][ T5180] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   84.575650][ T5180] EXT4-fs (loop0): 1 truncate cleaned up
[   84.577879][ T5089] veth1_macvtap: entered promiscuous mode
[   84.585029][ T5180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.647968][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.678271][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.758546][ T5092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.844023][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.863783][ T5101] Bluetooth: hci1: command tx timeout
[   84.878684][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.920255][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.931451][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.949856][ T5101] Bluetooth: hci0: command tx timeout
[   84.955184][ T5107] Bluetooth: hci4: command tx timeout
[   84.955473][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.975684][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.986355][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.007648][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.021533][ T5107] Bluetooth: hci2: command tx timeout
[   85.027058][ T5107] Bluetooth: hci3: command tx timeout
[   85.037877][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.072361][ T5181] dccp_close: ABORT with 60 bytes unread
[   85.094983][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.128549][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.160788][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.194243][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.213453][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.237674][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.247856][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.267615][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.282246][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.321594][  T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.323860][ T5089] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.348164][ T5089] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.369884][  T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.369918][ T5089] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.418281][ T5089] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.520542][ T5145] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   85.612085][  T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.652012][  T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.722196][ T5206] netlink: 'syz.3.12': attribute type 29 has an invalid length.
[   85.756019][ T5145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7
[   85.760158][ T5206] netlink: 'syz.3.12': attribute type 29 has an invalid length.
[   85.787416][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.806822][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.814527][ T5145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0
[   85.840662][ T5145] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   85.856205][ T5209] netlink: 'syz.3.12': attribute type 29 has an invalid length.
[   85.872631][ T5145] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   85.886907][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.960793][ T5145] usb 3-1: config 0 descriptor??
[   86.027125][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.057302][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.447878][ T5145] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   86.458664][ T5096] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   86.468975][ T5145] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   86.561235][ T5145] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   86.729181][ T5107] Bluetooth: hci5: sending frame failed (-49)
[   86.737183][ T5101] Bluetooth: hci5: Opcode 0x1003 failed: -49
[   86.737310][ T5096] usb 5-1: Using ep0 maxpacket: 8
[   86.840040][ T5096] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   86.889538][ T5096] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   86.910385][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.957068][ T5096] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[   86.991743][ T5096] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   87.083777][ T5096] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   87.107453][ T5226] loop3: detected capacity change from 0 to 2048
[   87.122368][ T5096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.154060][ T5228] netlink: 'syz.1.18': attribute type 10 has an invalid length.
[   87.224034][ T5226] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.244369][ T5228] team0: Port device netdevsim0 added
[   87.294424][ T5229] netlink: 'syz.1.18': attribute type 10 has an invalid length.
[   87.388632][ T5231] 8021q: VLANs not supported on hsr0
[   87.404836][ T5096] usb 5-1: GET_CAPABILITIES returned 0
[   87.432380][ T5096] usbtmc 5-1:16.0: can't read capabilities
[   87.667263][ T5096] usb 5-1: USB disconnect, device number 2
[   87.954002][ T5243] netlink: 'syz.0.24': attribute type 29 has an invalid length.
[   87.983616][ T5243] netlink: 'syz.0.24': attribute type 29 has an invalid length.
[   88.032955][ T5247] netlink: 'syz.0.24': attribute type 29 has an invalid length.
[   88.162896][ T5242] loop1: detected capacity change from 0 to 4096
[   88.210475][ T5242] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[   88.308534][ T5242] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   88.342970][ T5242] ntfs3: loop1: Failed to load $MFT (-22).
[   89.565851][    T9] usb 3-1: USB disconnect, device number 2
[   89.915689][ T2818] Bluetooth: hci5: Frame reassembly failed (-84)
[   90.134840][ T5269] 8021q: VLANs not supported on hsr0
[   90.555997][ T5278] loop4: detected capacity change from 0 to 4096
[   90.598043][ T5278] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[   90.648395][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   90.694772][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   90.738456][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   90.766182][ T5278] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[   90.779979][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   91.189567][ T5283] netlink: 'syz.4.37': attribute type 10 has an invalid length.
[   91.235718][ T5283] team0: Failed to send options change via netlink (err -105)
[   91.273808][ T5284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.37'.
[   91.274953][ T5283] team0: Port device netdevsim0 added
[   91.358499][ T5177] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[   91.418237][ T5287] loop0: detected capacity change from 0 to 2048
[   91.456509][ T5287] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.477528][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   91.640607][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   91.871619][    T9] usb 5-1: Using ep0 maxpacket: 8
[   91.888230][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.899801][    T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   91.913885][    T9] usb 5-1: config 1 has no interface number 1
[   91.927120][    T9] usb 5-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30
[   91.941845][    T9] usb 5-1: config 1 interface 2 altsetting 220 has an invalid endpoint descriptor of length 3, skipping
[   91.961153][    T9] usb 5-1: config 1 interface 2 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 113
[   91.978588][    T9] usb 5-1: config 1 interface 2 has no altsetting 0
[   91.980489][ T5101] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   91.990905][ T5107] Bluetooth: hci5: command 0x1003 tx timeout
[   92.013935][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   92.025957][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.036141][    T9] usb 5-1: Product: 쑿퉈ਝ쑻
[   92.041623][    T9] usb 5-1: Manufacturer: ф
[   92.056823][    T9] usb 5-1: SerialNumber: syz
[   92.377376][ T5297] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.406796][ T5297] xt_socket: unknown flags 0x50
[   92.603114][ T1154] cfg80211: failed to load regulatory.db
[   93.407922][ T5303] loop1: detected capacity change from 0 to 512
[   93.427384][ T5303] EXT4-fs: Ignoring removed nomblk_io_submit option
[   93.457632][ T5303] EXT4-fs: old and new quota format mixing
[   93.689886][    T9] usb 5-1: USB disconnect, device number 3
[   93.743667][ T5309] loop2: detected capacity change from 0 to 512
[   94.629223][ T5303] loop1: detected capacity change from 0 to 1764
[   94.657667][ T5309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.670528][ T5309] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   94.901940][ T5217] udevd[5217]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   95.768344][ T5098] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.775572][ T5322] loop0: detected capacity change from 0 to 2048
[   95.858188][ T5322] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.259193][ T5332] xt_socket: unknown flags 0x50
[   97.466653][ T5349] warning: `syz.4.60' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   97.489813][ T5344] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   97.724897][ T5353] loop4: detected capacity change from 0 to 1024
[   97.792040][ T5355] loop1: detected capacity change from 0 to 512
[   97.866830][ T5355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.961505][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   98.008128][ T5355] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   98.790170][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.046311][ T5101] Bluetooth: hci4: ISO packet for unknown connection handle 0
[   99.085519][ T5365] netlink: 50 bytes leftover after parsing attributes in process `syz.0.66'.
[   99.123500][ T5089] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.570375][ T5377] loop4: detected capacity change from 0 to 128
[  100.611008][ T5377] =======================================================
[  100.611008][ T5377] WARNING: The mand mount option has been deprecated and
[  100.611008][ T5377]          and is ignored by this kernel. Remove the mand
[  100.611008][ T5377]          option from the mount to silence this warning.
[  100.611008][ T5377] =======================================================
[  100.744168][ T5097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  100.754061][ T5097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  100.773116][ T5097] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  100.798636][ T5097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  100.811172][ T5097] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  100.824383][ T5097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  100.890111][ T5147] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  101.020297][ T5390] loop1: detected capacity change from 0 to 512
[  101.110782][ T5147] usb 1-1: Using ep0 maxpacket: 8
[  101.131674][ T5390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.190181][ T5147] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  101.216849][ T5390] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  101.229016][ T5147] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  101.229103][ T5147] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  101.229133][ T5147] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  101.229184][ T5147] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  101.229212][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.462403][ T5147] usb 1-1: GET_CAPABILITIES returned 0
[  101.462488][ T5147] usbtmc 1-1:16.0: can't read capabilities
[  102.306437][ T5384] chnl_net:caif_netlink_parms(): no params data found
[  102.452024][ T5089] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.502440][   T47] usb 1-1: USB disconnect, device number 2
[  102.929130][ T5418] netlink: 'syz.1.81': attribute type 21 has an invalid length.
[  102.940015][ T5101] Bluetooth: hci5: command tx timeout
[  102.966909][ T5418] netlink: 'syz.1.81': attribute type 4 has an invalid length.
[  102.991813][ T5418] netlink: 156 bytes leftover after parsing attributes in process `syz.1.81'.
[  103.008127][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.044165][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.066673][ T5384] bridge_slave_0: entered allmulticast mode
[  103.106597][ T5384] bridge_slave_0: entered promiscuous mode
[  103.116071][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.123447][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.131542][ T5384] bridge_slave_1: entered allmulticast mode
[  103.141928][ T5384] bridge_slave_1: entered promiscuous mode
[  103.266509][ T5384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.285338][ T5384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.455677][ T5430] netlink: 'syz.4.87': attribute type 7 has an invalid length.
[  103.515781][ T5384] team0: Port device team_slave_0 added
[  103.557676][ T5384] team0: Port device team_slave_1 added
[  103.723251][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.799807][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.849861][ T5384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.873251][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.893472][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.959804][   T29] audit: type=1326 audit(1720491390.925:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.4.91" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8531d75bd9 code=0x0
[  103.976282][ T5437] loop1: detected capacity change from 0 to 512
[  104.000212][ T5384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.061422][ T5437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.127376][ T5437] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.405834][ T5384] hsr_slave_0: entered promiscuous mode
[  104.437182][ T5384] hsr_slave_1: entered promiscuous mode
[  104.465713][ T5384] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.479830][ T5384] Cannot create hsr debugfs directory
[  105.134789][ T5101] Bluetooth: hci5: command tx timeout
[  105.396798][ T5089] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.731609][ T5462] loop0: detected capacity change from 0 to 512
[  105.779942][ T5462] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  105.835522][ T5462] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  105.872350][ T5462] EXT4-fs (loop0): 1 truncate cleaned up
[  105.890303][ T5462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.945450][ T5384] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.975390][ T5469] loop4: detected capacity change from 0 to 736
[  106.003885][ T5470] netlink: 'syz.1.101': attribute type 7 has an invalid length.
[  106.060317][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  106.096561][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  106.133868][ T5474] No such timeout policy "syz0"
[  106.166426][ T5384] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.256347][ T5469] Symlink component flag not implemented
[  106.268834][ T5469] Symlink component flag not implemented (247)
[  106.321515][ T5092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.440349][ T5384] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.469802][   T47] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  106.514140][ T5481] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  106.863624][   T47] usb 3-1: config 0 descriptor has 1 excess byte, ignoring
[  106.875765][ T5384] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.895344][   T47] usb 3-1: config 0 has no interfaces?
[  106.927710][   T47] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  106.944266][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.955289][   T47] usb 3-1: Product: syz
[  106.974681][   T47] usb 3-1: Manufacturer: syz
[  107.015699][   T47] usb 3-1: SerialNumber: syz
[  107.061052][   T47] usb 3-1: config 0 descriptor??
[  107.078172][ T5484] loop0: detected capacity change from 0 to 2048
[  107.193871][ T5101] Bluetooth: hci5: command tx timeout
[  107.379904][ T5484]  loop0: p3 < > p4 < >
[  107.402557][ T5484] loop0: partition table partially beyond EOD, truncated
[  107.439979][ T5144] usb 3-1: USB disconnect, device number 3
[  107.513041][ T5484] loop0: p3 start 4284289 is beyond EOD, truncated
[  107.534581][ T5384] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  107.552864][ T5384] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  107.577999][ T5384] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  107.628796][ T5384] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  107.720612][ T4544]  loop0: p3 < > p4 < >
[  107.724849][ T4544] loop0: partition table partially beyond EOD, truncated
[  107.771780][ T4544] loop0: p3 start 4284289 is beyond EOD, truncated
[  107.873735][ T5217] udevd[5217]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  107.992769][ T5321] udevd[5321]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  108.172816][ T5384] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.297612][ T5384] 8021q: adding VLAN 0 to HW filter on device team0
[  108.351138][ T5500] loop1: detected capacity change from 0 to 256
[  108.420259][ T5502] use of bytesused == 0 is deprecated and will be removed in the future,
[  108.431629][ T5502] use the actual size instead.
[  108.445986][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.454076][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.518402][ T5500] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  108.551423][ T5491] kvm: emulating exchange as write
[  108.558274][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.566773][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.640952][ T5500] netlink: 'syz.1.113': attribute type 8 has an invalid length.
[  108.739596][ T5504] loop2: detected capacity change from 0 to 736
[  109.027063][ T5504] Symlink component flag not implemented
[  109.036776][ T5507] loop1: detected capacity change from 0 to 1024
[  109.050287][ T5504] Symlink component flag not implemented (247)
[  109.079329][ T5507] hfsplus: failed to load root directory
[  109.261665][ T5101] Bluetooth: hci5: command tx timeout
[  109.396248][ T5514] loop0: detected capacity change from 0 to 2048
[  109.470215][ T5514] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  109.557627][ T5514] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.576749][ T5384] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.615826][ T5516] loop1: detected capacity change from 0 to 64
[  109.646076][ T5516] hfs: bad catalog namelength
[  109.655189][ T5516] hfs: get root inode failed
[  110.072687][ T5523] loop4: detected capacity change from 0 to 64
[  110.141994][ T5384] veth0_vlan: entered promiscuous mode
[  110.199949][ T5384] veth1_vlan: entered promiscuous mode
[  111.188110][ T5384] veth0_macvtap: entered promiscuous mode
[  111.218232][ T5527] netlink: 2 bytes leftover after parsing attributes in process `syz.2.121'.
[  111.242308][ T5384] veth1_macvtap: entered promiscuous mode
[  111.290770][   T29] audit: type=1326 audit(1720491398.255:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.2.121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0d75bd9 code=0x0
[  111.354664][ T5531] capability: warning: `syz.4.123' uses deprecated v2 capabilities in a way that may be insecure
[  111.402846][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.422145][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.437045][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.450586][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.461906][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.475370][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.485857][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.496748][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.507066][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.517805][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.537564][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.560694][ T5531] tipc: Started in network mode
[  111.599402][ T5531] tipc: Node identity ac1414aa, cluster identity 4711
[  111.619083][ T5531] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  111.653441][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.719846][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.728097][ T5534] loop1: detected capacity change from 0 to 256
[  111.747977][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.780648][ T5534] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  111.869667][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.931051][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.947414][ T5534] netlink: 'syz.1.125': attribute type 8 has an invalid length.
[  111.985845][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.016206][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.048552][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.059146][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.069871][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.085188][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.108245][ T5384] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.265799][ T5384] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.436388][ T5384] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.608349][ T5384] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.919768][ T5147] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  113.129867][ T5147] usb 5-1: Using ep0 maxpacket: 8
[  113.165353][ T5147] usb 5-1: config 32 has an invalid interface number: 1 but max is 0
[  113.195156][ T5147] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  113.254817][ T5147] usb 5-1: config 32 has no interface number 0
[  113.284013][ T5147] usb 5-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.eb
[  113.333252][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.394843][ T5147] usb 5-1: Product: syz
[  113.399458][ T5147] usb 5-1: Manufacturer: syz
[  113.509464][ T5147] usb 5-1: SerialNumber: syz
[  113.553055][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.574145][ T5556] loop1: detected capacity change from 0 to 64
[  113.626602][ T5147] usb 5-1: bad CDC descriptors
[  113.631980][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.644063][ T5147] option 5-1:32.1: GSM modem (1-port) converter detected
[  113.715642][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.770026][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.055635][ T5560] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  114.334643][ T5566] tipc: Started in network mode
[  114.380701][ T5566] tipc: Node identity ac1414aa, cluster identity 4711
[  114.477825][ T5566] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  117.504205][ T5578] pim6reg1: entered promiscuous mode
[  117.513761][ T5578] pim6reg1: entered allmulticast mode
[  117.554072][ T5574] loop1: detected capacity change from 0 to 512
[  117.564128][ T5574] EXT4-fs: Ignoring removed mblk_io_submit option
[  117.595301][ T5574] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  117.731221][ T5574] EXT4-fs: error -4 creating inode table initialization thread
[  117.760654][ T5587] bond0: (slave veth3): Enslaving as an active interface with an up link
[  117.790685][ T5574] EXT4-fs (loop1): mount failed
[  117.801227][ T5585] veth3: entered promiscuous mode
[  117.809356][ T5585] veth3: entered allmulticast mode
[  117.933656][ T1154] usb 5-1: USB disconnect, device number 4
[  117.948146][ T1154] option 5-1:32.1: device disconnected
[  119.200478][ T5606] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  119.460076][ T5613] loop1: detected capacity change from 0 to 512
[  119.472255][ T5614] loop4: detected capacity change from 0 to 512
[  119.494436][ T5614] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent
[  119.633010][ T5613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.654361][ T5613] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  119.686550][ T5622] loop2: detected capacity change from 0 to 512
[  119.695344][ T5616] netlink: 'syz.0.151': attribute type 1 has an invalid length.
[  119.703999][ T5622] EXT4-fs: Ignoring removed mblk_io_submit option
[  119.752725][ T5622] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  119.800300][ T5622] EXT4-fs (loop2): 1 truncate cleaned up
[  119.861103][ T5622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.043186][ T5623] bond1: entered promiscuous mode
[  120.057169][ T5623] bond1: entered allmulticast mode
[  120.105265][ T5089] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.671464][ T5636] loop4: detected capacity change from 0 to 256
[  120.812655][ T5098] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.240563][ T5661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.165'.
[  122.704129][ T5671] binder: 5659:5671 ioctl c0046209 0 returned -22
[  123.245436][ T5672] loop3: detected capacity change from 0 to 512
[  123.259287][ T5655] loop1: detected capacity change from 0 to 8192
[  123.291545][ T5672] EXT4-fs: Ignoring removed i_version option
[  123.329050][ T5672] EXT4-fs: Ignoring removed mblk_io_submit option
[  123.368307][ T5655] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  123.370151][ T5672] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  123.446138][ T5672] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056e118, mo2=0002]
[  123.455824][ T5672] System zones: 1-12
[  123.466736][ T5672] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.168: corrupted in-inode xattr: e_value size too large
[  123.489292][ T5672] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.168: couldn't read orphan inode 15 (err -117)
[  123.535822][ T5672] EXT4-fs (loop3): mounted filesystem 00000000-00c8-1300-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.559384][ T5655] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046)
[  123.609846][ T5655] FAT-fs (loop1): Filesystem has been set read-only
[  123.638648][ T5679] loop4: detected capacity change from 0 to 1024
[  123.682522][ T5679] hfsplus: failed to load root directory
[  123.730412][ T5682] loop2: detected capacity change from 0 to 256
[  123.746598][ T5089] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046)
[  124.103273][ T5684] loop4: detected capacity change from 0 to 64
[  124.167178][   T59] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  124.192799][ T5684] hfs: bad catalog namelength
[  124.198247][ T5684] hfs: get root inode failed
[  124.422768][   T59] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 149, changing to 11
[  124.444660][   T59] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  124.510624][   T59] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  124.560129][   T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.598027][ T5672] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  125.981715][ T5709] loop2: detected capacity change from 0 to 256
[  126.028509][ T5709] FAT-fs (loop2): bogus number of directory entries (4)
[  126.060592][ T5709] FAT-fs (loop2): Can't find a valid FAT filesystem
[  126.338506][ T5718] binder: 5707:5718 ioctl c0046209 0 returned -22
[  127.727625][   T59] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  127.781820][   T59] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input5
[  127.900771][ T1154] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  127.901630][   T59] usb 4-1: USB disconnect, device number 2
[  127.908695][    C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  127.999430][ T5384] EXT4-fs (loop3): unmounting filesystem 00000000-00c8-1300-0000-000000000000.
[  128.115617][ T1154] usb 2-1: config 1 has an invalid descriptor of length 208, skipping remainder of the config
[  128.155790][ T1154] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  128.196171][ T1154] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  128.239183][ T1154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  128.272918][ T1154] usb 2-1: SerialNumber: syz
[  128.349393][ T5717] loop0: detected capacity change from 0 to 2048
[  128.404745][ T5732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.190'.
[  128.495075][ T5733] loop2: detected capacity change from 0 to 1024
[  128.531694][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.541997][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.642364][ T1154] usb 2-1: invalid UAC_HEADER (v1)
[  128.693489][ T5717] NILFS (loop0): corrupt root inode
[  128.712309][ T5732] bridge0: entered promiscuous mode
[  128.893554][ T1154] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  128.967285][ T1154] usb 2-1: USB disconnect, device number 2
[  129.062785][ T5712] loop0: detected capacity change from 0 to 512
[  129.120115][ T5712] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 40960
[  129.130954][ T5101] Bluetooth: Unknown BR/EDR signaling command 0x0e
[  129.139417][ T5101] Bluetooth: Wrong link type (-22)
[  129.145061][ T5101] Bluetooth: hci4: link tx timeout
[  129.152675][ T5101] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  129.238959][ T5321] udevd[5321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.795788][ T5749] netlink: 36 bytes leftover after parsing attributes in process `syz.4.197'.
[  129.858608][ T5749] loop4: detected capacity change from 0 to 512
[  129.895718][ T5749] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  129.923938][ T5749] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  129.941520][ T5749] System zones: 1-12
[  129.984635][ T5749] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  130.045081][ T5749] EXT4-fs (loop4): 1 truncate cleaned up
[  130.067964][ T5749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.255459][   T29] audit: type=1804 audit(1720491417.215:4): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.197" name="/newroot/43/file2/bus" dev="loop4" ino=18 res=1 errno=0
[  130.692178][ T5101] Bluetooth: Unknown BR/EDR signaling command 0x0e
[  130.698828][ T5101] Bluetooth: Wrong link type (-22)
[  130.704473][ T5101] Bluetooth: hci3: link tx timeout
[  130.710347][ T5101] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  130.730281][ T5745] loop1: detected capacity change from 0 to 32768
[  130.747399][ T5105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.842048][ T5745] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  131.051945][ T5745] XFS (loop1): Ending clean mount
[  131.133239][ T5745] XFS (loop1): Quotacheck needed: Please wait.
[  131.184135][ T5107] Bluetooth: hci4: command 0x0406 tx timeout
[  131.245372][ T5791] loop2: detected capacity change from 0 to 2048
[  131.266231][ T5791] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  131.317649][ T5745] XFS (loop1): Quotacheck: Done.
[  131.347868][ T5791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.429859][ T5147] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  132.631964][ T5147] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  132.656022][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.668936][ T5147] usb 5-1: Product: syz
[  132.697263][ T5147] usb 5-1: Manufacturer: syz
[  132.709733][ T5147] usb 5-1: SerialNumber: syz
[  132.748899][ T5147] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  132.796478][ T5097] Bluetooth: hci3: command 0x0406 tx timeout
[  132.870615][ T1154] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  132.960684][ T5089] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  133.255713][   T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.381439][ T5333] kworker/u8:9: attempt to access beyond end of device
[  133.381439][ T5333] loop2: rw=1, sector=3617, nr_sectors = 1 limit=2048
[  133.412621][ T5144] usb 5-1: USB disconnect, device number 5
[  133.441626][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[  133.451534][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
[  133.461229][ T5333] Buffer I/O error on dev loop2, logical block 3617, lost async page write
[  133.474449][ T5333] kworker/u8:9: attempt to access beyond end of device
[  133.474449][ T5333] loop2: rw=1, sector=3618, nr_sectors = 1 limit=2048
[  133.521057][ T5333] Buffer I/O error on dev loop2, logical block 3618, lost async page write
[  133.540709][   T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.544166][ T5333] kworker/u8:9: attempt to access beyond end of device
[  133.544166][ T5333] loop2: rw=1, sector=3619, nr_sectors = 1 limit=2048
[  133.619580][ T5333] Buffer I/O error on dev loop2, logical block 3619, lost async page write
[  133.642517][ T5333] kworker/u8:9: attempt to access beyond end of device
[  133.642517][ T5333] loop2: rw=1, sector=3620, nr_sectors = 1 limit=2048
[  133.702161][ T5333] Buffer I/O error on dev loop2, logical block 3620, lost async page write
[  133.730343][ T5333] kworker/u8:9: attempt to access beyond end of device
[  133.730343][ T5333] loop2: rw=1, sector=3621, nr_sectors = 1 limit=2048
[  133.782948][ T5333] Buffer I/O error on dev loop2, logical block 3621, lost async page write
[  133.789336][   T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.818696][ T5333] kworker/u8:9: attempt to access beyond end of device
[  133.818696][ T5333] loop2: rw=1, sector=3622, nr_sectors = 1 limit=2048
[  133.875452][ T5333] Buffer I/O error on dev loop2, logical block 3622, lost async page write
[  133.905938][ T5333] kworker/u8:9: attempt to access beyond end of device
[  133.905938][ T5333] loop2: rw=1, sector=3623, nr_sectors = 1 limit=2048
[  133.939706][ T5333] Buffer I/O error on dev loop2, logical block 3623, lost async page write
[  133.969949][ T5333] kworker/u8:9: attempt to access beyond end of device
[  133.969949][ T5333] loop2: rw=1, sector=3626, nr_sectors = 1 limit=2048
[  133.990383][ T1154] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  134.010006][   T66] team0: Port device netdevsim0 removed
[  134.022868][ T1154] ath9k_htc: Failed to initialize the device
[  134.040706][   T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.062512][ T5333] Buffer I/O error on dev loop2, logical block 3626, lost async page write
[  134.076101][ T5144] usb 5-1: ath9k_htc: USB layer deinitialized
[  134.107346][ T5333] kworker/u8:9: attempt to access beyond end of device
[  134.107346][ T5333] loop2: rw=1, sector=3627, nr_sectors = 2312 limit=2048
[  134.515825][ T5809] binder: 5806:5809 ioctl c0046209 0 returned -22
[  135.275136][   T66] bridge_slave_1: left allmulticast mode
[  135.296627][   T66] bridge_slave_1: left promiscuous mode
[  135.317326][   T66] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.358189][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  135.372224][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  135.381143][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  135.399152][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  135.418094][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  135.426747][   T66] bridge_slave_0: left allmulticast mode
[  135.442161][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  135.478668][   T66] bridge_slave_0: left promiscuous mode
[  135.515977][   T66] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.909895][ T5147] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  136.125816][ T1154] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  136.134148][ T5147] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  136.144411][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.165294][ T5147] usb 1-1: config 0 descriptor??
[  136.173515][   T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.191181][ T5147] gspca_main: cpia1-2.14.0 probing 0813:0001
[  136.197896][   T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.215420][   T66] bond0 (unregistering): Released all slaves
[  136.300225][ T5830] netem: change failed
[  136.358785][ T1154] usb 4-1: Using ep0 maxpacket: 16
[  136.374265][ T1154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  136.395385][ T5835] loop4: detected capacity change from 0 to 256
[  136.413510][   T66] tipc: Left network mode
[  136.439858][ T1154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  136.456144][ T5835] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000e8a4, chksum : 0xe00de75b, utbl_chksum : 0xe619d30d)
[  136.465990][ T1154] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  136.513583][ T1154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.566083][ T1154] usb 4-1: config 0 descriptor??
[  136.643898][ T5147] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[  136.653951][ T5097] Bluetooth: hci3: unexpected event for opcode 0x040e
[  136.831635][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.850548][ T5097] Bluetooth: Unknown BR/EDR signaling command 0x0e
[  136.858014][ T5097] Bluetooth: Wrong link type (-22)
[  136.916195][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.214544][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.240272][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.284177][ T5147] gspca_cpia1: usb_control_msg 05, error -71
[  137.309359][ T1154] hid (null): bogus close delimiter
[  137.330460][ T5147] cpia1 1-1:0.0: unexpected systemstate: 00
[  137.371631][ T1154] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0
[  137.397709][ T5147] usb 1-1: USB disconnect, device number 3
[  137.411615][ T1154] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0
[  137.439496][ T1154] hid-generic 0003:0158:0100.0002: bogus close delimiter
[  137.460498][ T1154] hid-generic 0003:0158:0100.0002: item 0 0 2 10 parsing failed
[  137.484387][ T1154] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22
[  137.499839][ T5097] Bluetooth: hci0: command tx timeout
[  137.527366][ T1154] usb 4-1: USB disconnect, device number 3
[  137.717137][   T66] hsr_slave_0: left promiscuous mode
[  137.745545][   T66] hsr_slave_1: left promiscuous mode
[  137.773773][   T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.799575][   T66] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.827627][   T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.851473][   T66] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.907702][   T66] veth1_macvtap: left promiscuous mode
[  137.915241][   T66] veth0_macvtap: left promiscuous mode
[  137.927346][   T66] veth1_vlan: left promiscuous mode
[  137.934457][   T66] veth0_vlan: left promiscuous mode
[  139.581996][ T5097] Bluetooth: hci0: command tx timeout
[  139.654432][   T66] team0 (unregistering): Port device team_slave_1 removed
[  139.733207][ T5895] loop2: detected capacity change from 0 to 64
[  139.800645][   T66] team0 (unregistering): Port device team_slave_0 removed
[  141.546500][   T29] audit: type=1326 audit(1720491428.515:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.0.249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdae0d75bd9 code=0x0
[  141.670283][ T5097] Bluetooth: hci0: command tx timeout
[  141.832980][ T5817] chnl_net:caif_netlink_parms(): no params data found
[  141.861157][ T5925] loop3: detected capacity change from 0 to 64
[  141.997305][ T2818] ==================================================================
[  142.005523][ T2818] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330
[  142.013674][ T2818] Read of size 8 at addr ffff88807b1328b8 by task kworker/u8:7/2818
[  142.021761][ T2818] 
[  142.024145][ T2818] CPU: 1 UID: 0 PID: 2818 Comm: kworker/u8:7 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0
[  142.034707][ T2818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
SYZFAIL: failed to recv rpc
fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor)
[  142.045010][ T2818] Workqueue: l2tp l2tp_tunnel_del_work
[  142.050707][ T2818] Call Trace:
[  142.054019][ T2818]  <TASK>
[  142.056987][ T2818]  dump_stack_lvl+0x241/0x360
[  142.061713][ T2818]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.066966][ T2818]  ? __pfx__printk+0x10/0x10
[  142.071607][ T2818]  ? _printk+0xd5/0x120
[  142.075889][ T2818]  ? __virt_addr_valid+0x183/0x530
[  142.081048][ T2818]  ? __virt_addr_valid+0x183/0x530
[  142.086208][ T2818]  print_report+0x169/0x550
[  142.090756][ T2818]  ? __virt_addr_valid+0x183/0x530
[  142.095914][ T2818]  ? __virt_addr_valid+0x183/0x530
[  142.101071][ T2818]  ? __virt_addr_valid+0x45f/0x530
[  142.106233][ T2818]  ? __phys_addr+0xba/0x170
[  142.110781][ T2818]  ? l2tp_tunnel_del_work+0xe5/0x330
[  142.116144][ T2818]  kasan_report+0x143/0x180
[  142.120693][ T2818]  ? l2tp_tunnel_del_work+0xe5/0x330
[  142.126024][ T2818]  l2tp_tunnel_del_work+0xe5/0x330
[  142.131181][ T2818]  ? process_scheduled_works+0x945/0x1830
[  142.136954][ T2818]  process_scheduled_works+0xa2c/0x1830
[  142.142581][ T2818]  ? __pfx_process_scheduled_works+0x10/0x10
[  142.148980][ T2818]  ? assign_work+0x364/0x3d0
[  142.154064][ T2818]  worker_thread+0x86d/0xd40
[  142.158735][ T2818]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  142.165417][ T2818]  ? __kthread_parkme+0x169/0x1d0
[  142.170496][ T2818]  ? __pfx_worker_thread+0x10/0x10
[  142.175859][ T2818]  kthread+0x2f0/0x390
[  142.179973][ T2818]  ? __pfx_worker_thread+0x10/0x10
[  142.185134][ T2818]  ? __pfx_kthread+0x10/0x10
[  142.189772][ T2818]  ret_from_fork+0x4b/0x80
[  142.194234][ T2818]  ? __pfx_kthread+0x10/0x10
[  142.198879][ T2818]  ret_from_fork_asm+0x1a/0x30
[  142.203711][ T2818]  </TASK>
[  142.206765][ T2818] 
[  142.209202][ T2818] Allocated by task 5924:
[  142.213667][ T2818]  kasan_save_track+0x3f/0x80
[  142.218481][ T2818]  __kasan_kmalloc+0x98/0xb0
[  142.223116][ T2818]  __kmalloc_noprof+0x1fc/0x400
[  142.228019][ T2818]  l2tp_session_create+0x3b/0xc20
[  142.233085][ T2818]  pppol2tp_connect+0xca3/0x17a0
[  142.238063][ T2818]  __sys_connect+0x2df/0x310
[  142.242694][ T2818]  __x64_sys_connect+0x7a/0x90
[  142.247500][ T2818]  do_syscall_64+0xf3/0x230
[  142.252144][ T2818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.258256][ T2818] 
[  142.260787][ T2818] Freed by task 24:
[  142.264628][ T2818]  kasan_save_track+0x3f/0x80
[  142.269518][ T2818]  kasan_save_free_info+0x40/0x50
[  142.269683][   T29] audit: type=1326 audit(1720491429.075:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.2.250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0d75bd9 code=0x0
[  142.274662][ T2818]  poison_slab_object+0xe0/0x150
[  142.301257][ T2818]  __kasan_slab_free+0x37/0x60
[  142.306176][ T2818]  kfree+0x149/0x360
[  142.310495][ T2818]  __sk_destruct+0x58/0x5f0
[  142.315048][ T2818]  rcu_core+0xaaa/0x17a0
[  142.319575][ T2818]  handle_softirqs+0x2c4/0x970
[  142.324662][ T2818]  run_ksoftirqd+0xca/0x130
[  142.329478][ T2818]  smpboot_thread_fn+0x544/0xa30
[  142.334458][ T2818]  kthread+0x2f0/0x390
[  142.338869][ T2818]  ret_from_fork+0x4b/0x80
[  142.343431][ T2818]  ret_from_fork_asm+0x1a/0x30
[  142.348257][ T2818] 
[  142.350655][ T2818] Last potentially related work creation:
[  142.356503][ T2818]  kasan_save_stack+0x3f/0x60
[  142.361231][ T2818]  __kasan_record_aux_stack+0xac/0xc0
[  142.366652][ T2818]  call_rcu+0x167/0xa70
[  142.370854][ T2818]  pppol2tp_release+0x24b/0x350
[  142.375736][ T2818]  sock_close+0xbc/0x240
[  142.380030][ T2818]  __fput+0x24a/0x8a0
[  142.384070][ T2818]  task_work_run+0x24f/0x310
[  142.388687][ T2818]  syscall_exit_to_user_mode+0x168/0x370
[  142.394374][ T2818]  do_syscall_64+0x100/0x230
[  142.399002][ T2818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.404941][ T2818] 
[  142.407286][ T2818] The buggy address belongs to the object at ffff88807b132800
[  142.407286][ T2818]  which belongs to the cache kmalloc-1k of size 1024
[  142.421983][ T2818] The buggy address is located 184 bytes inside of
[  142.421983][ T2818]  freed 1024-byte region [ffff88807b132800, ffff88807b132c00)
[  142.436163][ T2818] 
[  142.438506][ T2818] The buggy address belongs to the physical page:
[  142.445044][ T2818] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b130
[  142.453862][ T2818] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  142.462596][ T2818] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  142.470270][ T2818] page_type: 0xfdffffff(slab)
[  142.474974][ T2818] raw: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122
[  142.483890][ T2818] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000
[  142.492517][ T2818] head: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122
[  142.501267][ T2818] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000
[  142.510067][ T2818] head: 00fff00000000003 ffffea0001ec4c01 ffffffffffffffff 0000000000000000
[  142.519030][ T2818] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  142.527906][ T2818] page dumped because: kasan: bad access detected
[  142.534372][ T2818] page_owner tracks the page as allocated
[  142.540293][ T2818] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5255, tgid 5255 (kworker/u8:8), ts 111252166328, free_ts 111201208568
[  142.561374][ T2818]  post_alloc_hook+0x1f3/0x230
[  142.566276][ T2818]  get_page_from_freelist+0x2ccb/0x2d80
[  142.571872][ T2818]  __alloc_pages_noprof+0x256/0x6c0
[  142.577109][ T2818]  alloc_slab_page+0x5f/0x120
[  142.581816][ T2818]  allocate_slab+0x5a/0x2f0
[  142.586437][ T2818]  ___slab_alloc+0xcd1/0x14b0
[  142.591141][ T2818]  __slab_alloc+0x58/0xa0
[  142.595499][ T2818]  __kmalloc_noprof+0x25a/0x400
[  142.600389][ T2818]  ___neigh_create+0x691/0x2470
[  142.605270][ T2818]  ip6_finish_output2+0x1631/0x1680
[  142.610507][ T2818]  ip6_finish_output+0x41e/0x810
[  142.615509][ T2818]  ndisc_send_skb+0xab2/0x1380
[  142.620323][ T2818]  addrconf_dad_completed+0x76c/0xcd0
[  142.625734][ T2818]  addrconf_dad_work+0xdc2/0x16f0
[  142.630797][ T2818]  process_scheduled_works+0xa2c/0x1830
[  142.636383][ T2818]  worker_thread+0x86d/0xd40
[  142.641150][ T2818] page last free pid 5527 tgid 5526 stack trace:
[  142.647505][ T2818]  free_unref_page+0xd22/0xea0
[  142.652409][ T2818]  __put_partials+0xeb/0x130
[  142.657062][ T2818]  put_cpu_partial+0x17c/0x250
[  142.661871][ T2818]  __slab_free+0x2ea/0x3d0
[  142.666328][ T2818]  qlist_free_all+0x9e/0x140
[  142.670967][ T2818]  kasan_quarantine_reduce+0x14f/0x170
[  142.676459][ T2818]  __kasan_slab_alloc+0x23/0x80
[  142.681350][ T2818]  __kmalloc_node_noprof+0x1d2/0x440
[  142.686684][ T2818]  __kvmalloc_node_noprof+0x72/0x190
[  142.692019][ T2818]  bpf_check+0xc9b/0x19690
[  142.696647][ T2818]  bpf_prog_load+0x1667/0x20f0
[  142.701455][ T2818]  __sys_bpf+0x4ee/0x810
[  142.705744][ T2818]  __x64_sys_bpf+0x7c/0x90
[  142.710195][ T2818]  do_syscall_64+0xf3/0x230
[  142.714809][ T2818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.720728][ T2818] 
[  142.723070][ T2818] Memory state around the buggy address:
[  142.728726][ T2818]  ffff88807b132780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  142.736815][ T2818]  ffff88807b132800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.744908][ T2818] >ffff88807b132880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.752993][ T2818]                                         ^
[  142.758911][ T2818]  ffff88807b132900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.767008][ T2818]  ffff88807b132980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.775100][ T2818] ==================================================================
[  142.783203][    C1] vkms_vblank_simulate: vblank timer overrun
[  142.789349][ T2818] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  142.796657][ T2818] CPU: 1 UID: 0 PID: 2818 Comm: kworker/u8:7 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0
[  142.807039][ T2818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  142.817141][ T2818] Workqueue: l2tp l2tp_tunnel_del_work
[  142.822642][ T2818] Call Trace:
[  142.825942][ T2818]  <TASK>
[  142.828902][ T2818]  dump_stack_lvl+0x241/0x360
[  142.833639][ T2818]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.839217][ T2818]  ? __pfx__printk+0x10/0x10
[  142.843859][ T2818]  ? vscnprintf+0x5d/0x90
[  142.848274][ T2818]  panic+0x349/0x870
[  142.853128][ T2818]  ? check_panic_on_warn+0x21/0xb0
[  142.858388][ T2818]  ? __pfx_panic+0x10/0x10
[  142.862916][ T2818]  ? mark_lock+0x9a/0x360
[  142.867356][ T2818]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  142.873473][ T2818]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  142.879383][ T2818]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  142.886153][ T2818]  ? print_report+0x502/0x550
[  142.890863][ T2818]  check_panic_on_warn+0x86/0xb0
[  142.895848][ T2818]  ? l2tp_tunnel_del_work+0xe5/0x330
[  142.901158][ T2818]  end_report+0x77/0x160
[  142.905422][ T2818]  kasan_report+0x154/0x180
[  142.909953][ T2818]  ? l2tp_tunnel_del_work+0xe5/0x330
[  142.915265][ T2818]  l2tp_tunnel_del_work+0xe5/0x330
[  142.920383][ T2818]  ? process_scheduled_works+0x945/0x1830
[  142.926106][ T2818]  process_scheduled_works+0xa2c/0x1830
[  142.931666][ T2818]  ? __pfx_process_scheduled_works+0x10/0x10
[  142.937735][ T2818]  ? assign_work+0x364/0x3d0
[  142.942370][ T2818]  worker_thread+0x86d/0xd40
[  142.947017][ T2818]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  142.952937][ T2818]  ? __kthread_parkme+0x169/0x1d0
[  142.958026][ T2818]  ? __pfx_worker_thread+0x10/0x10
[  142.963154][ T2818]  kthread+0x2f0/0x390
[  142.967322][ T2818]  ? __pfx_worker_thread+0x10/0x10
[  142.972542][ T2818]  ? __pfx_kthread+0x10/0x10
[  142.977134][ T2818]  ret_from_fork+0x4b/0x80
[  142.981555][ T2818]  ? __pfx_kthread+0x10/0x10
[  142.986153][ T2818]  ret_from_fork_asm+0x1a/0x30
[  142.991200][ T2818]  </TASK>
[  142.994488][ T2818] Kernel Offset: disabled
[  142.998923][ T2818] Rebooting in 86400 seconds..