last executing test programs:

1m19.901505243s ago: executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4)

1m18.984518059s ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = dup(r0)
getpeername$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000000)=0xfffffffffffffe94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket(0x2b, 0x1, 0x0)
bind$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x16, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0}}, 0x40) (async)
r6 = socket(0x2, 0x2, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x3, &(0x7f00000002c0)="d5", 0x1) (async)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000300)={[{@uni_xlate}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_lower}, {@nonumtail}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@utf8no}, {@uni_xlateno}]}, 0x5, 0x217, &(0x7f00000004c0)="$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") (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f00000000c0), 0xa5) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) (async)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000100)) (async)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x83, &(0x7f00000000c0)={0x0, 0xfffa}, 0x2)

1m17.643083073s ago: executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x2, 0x0, 0x4000}, 0x10)
close(r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x0, 0x4000}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'})
write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="76502bed382b4c6d9b1a5de6e4fab9bf471003eb9f0121be23a2fcfc7c53abfada40f11805b9ef165c9f74cea6f5ecee9e7778a17336adb2f946893a2d974ec0047d7b90f6a537854be789642e"], 0x118)
ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000140)={0x3, 0xffff, 0x7, 0x1, 0x7c, 0x7, "2a45d3658d522bc36c101fbb78d4bebe", 0x8, 0x1, 0x6, 0x0, 0x1, 0xaf, 0x40})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x7, 0x3032344d, 0x4, 0xfff, 0x2, @stepwise={{0x2, 0x2}, {0x47f, 0xc5}, {0xff000000, 0x401}}})
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r5, &(0x7f0000000400)={{0x2, @default}, [@null, @null, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x45)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x2, 0x0, 0x4000}, 0x10) (async)
close(r1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70) (async)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x0, 0x4000}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) (async)
write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="76502bed382b4c6d9b1a5de6e4fab9bf471003eb9f0121be23a2fcfc7c53abfada40f11805b9ef165c9f74cea6f5ecee9e7778a17336adb2f946893a2d974ec0047d7b90f6a537854be789642e"], 0x118) (async)
ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000140)={0x3, 0xffff, 0x7, 0x1, 0x7c, 0x7, "2a45d3658d522bc36c101fbb78d4bebe", 0x8, 0x1, 0x6, 0x0, 0x1, 0xaf, 0x40}) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x7, 0x3032344d, 0x4, 0xfff, 0x2, @stepwise={{0x2, 0x2}, {0x47f, 0xc5}, {0xff000000, 0x401}}}) (async)
syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async)
bind$ax25(r5, &(0x7f0000000400)={{0x2, @default}, [@null, @null, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x45) (async)

1m16.424190614s ago: executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x4000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000092970000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f3c0000001e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000100003800c000080080001"], 0xc0}}, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000300)={0x3, 0x7, 0x3, 0x8})
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000340)=<r4=>0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='net/softnet_stat\x00')
syz_emit_ethernet(0x519, &(0x7f0000001fc0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x4e3, 0x3a, 0x0, @remote, @mcast2, {[@dstopts={0x87, 0x4e, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3f, 0x100, [0xa0, 0x20, 0x10000]}}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x0, 0x9d, "72ebc60c9d64a1cb16f338e705cf89d3d6f54ddbf6db78731a38c0080b6cfcec4e54ae4d3a1bbb1abc49f4d96ef9492fb9bf5e5aa4456d48cc1cf9769f9f2db1afae56897985bac1e7821a77663a8f6c35170a292650fd78650fa435f5e02ba2dec1b04c8dd567eff1c5d0156ea1f8e8432637d1681818bceffbdcb1459f0c4ddd437bd1f72f2881160d36105bc4baef79fc6bc2799096427a5e3bc425"}, @calipso={0x7, 0x58, {0x1, 0x14, 0x6, 0x5, [0x2, 0x9, 0x59ae4f69, 0x6, 0x7fffffff, 0x8000000000000000, 0x7, 0x3, 0x1, 0x2]}}, @generic={0x0, 0xeb, "779e3337a1ae03e6c4ccc4deef24908c45855eb671f7e4b5b80a43afb0424a01b332a61f22feaade82685f2d2df1fd3df966207ed74edf25e39aa86fba0ab513092b9bbb637371d3ea3733eee74666a8a7faefb1dc2785d5176bb4d75745128a20624d3e2b35677d371eef207c95990be3733b749907704c8ba2a9b19e74d5b0f4c1d98356bf416122583f3527eca109719c2e7d5aad64093d8620314b11d30753e08555fce3202c34ba30ad57eaf56fe088b0b6d922366e1645eee5316f672794ad30229487ca220cb4016e4a1ab2df6002ab6988223ba8a1abcfaa71feff2e9bcc7c1e7d1ebb08645fac"}, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x3, [0xb72, 0x2, 0x0, 0x4]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0xfb, 0x8000, [0x9, 0x8000, 0x4, 0xfffffffffffffff8, 0x3]}}]}, @hopopts={0x3a, 0xf, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x5, 0x4e, "1e3bbf09f017ccc677b5af92f94e1ffde3efa32e86ae26e64288b49227ab02a956cf2e26fdc8722c86d66f690820b9330bf7a97fd8d93bd28740c38aae812847aca6429dcf5fcf335c9ae3604aa2"}, @ra={0x5, 0x2, 0xfe01}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x42}}]}, @routing={0x6c, 0x12, 0x1, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3d}, @remote, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @loopback, @mcast2]}, @dstopts={0x3b, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x8, {0x0, 0x0, 0x5, 0x8000}}]}, @srh={0x8, 0xc, 0x4, 0x6, 0x8, 0x68, 0xffff, [@empty, @loopback, @private1, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x0, 0xc, 0x1, 0x33, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x2}, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x8, "a78ce54006598080a896579269748e254c1e4a8a8b3f0a060000000000000034066d42ca0a5c15b37adac15084dbaf736b41e5af030200"/65}, {0x0, 0x1, "000000050000000026000400"}, {}]}}}}}}, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x10}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00')
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
r8 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x38011, r8, 0x0)
read(r5, &(0x7f0000001580)=""/4114, 0x1012)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@deltclass={0x2c, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xfff1}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendto(r9, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

44.392569932s ago: executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x4000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000092970000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f3c0000001e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000100003800c000080080001"], 0xc0}}, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000300)={0x3, 0x7, 0x3, 0x8})
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000340)=<r4=>0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='net/softnet_stat\x00')
syz_emit_ethernet(0x519, &(0x7f0000001fc0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x4e3, 0x3a, 0x0, @remote, @mcast2, {[@dstopts={0x87, 0x4e, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3f, 0x100, [0xa0, 0x20, 0x10000]}}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x0, 0x9d, "72ebc60c9d64a1cb16f338e705cf89d3d6f54ddbf6db78731a38c0080b6cfcec4e54ae4d3a1bbb1abc49f4d96ef9492fb9bf5e5aa4456d48cc1cf9769f9f2db1afae56897985bac1e7821a77663a8f6c35170a292650fd78650fa435f5e02ba2dec1b04c8dd567eff1c5d0156ea1f8e8432637d1681818bceffbdcb1459f0c4ddd437bd1f72f2881160d36105bc4baef79fc6bc2799096427a5e3bc425"}, @calipso={0x7, 0x58, {0x1, 0x14, 0x6, 0x5, [0x2, 0x9, 0x59ae4f69, 0x6, 0x7fffffff, 0x8000000000000000, 0x7, 0x3, 0x1, 0x2]}}, @generic={0x0, 0xeb, "779e3337a1ae03e6c4ccc4deef24908c45855eb671f7e4b5b80a43afb0424a01b332a61f22feaade82685f2d2df1fd3df966207ed74edf25e39aa86fba0ab513092b9bbb637371d3ea3733eee74666a8a7faefb1dc2785d5176bb4d75745128a20624d3e2b35677d371eef207c95990be3733b749907704c8ba2a9b19e74d5b0f4c1d98356bf416122583f3527eca109719c2e7d5aad64093d8620314b11d30753e08555fce3202c34ba30ad57eaf56fe088b0b6d922366e1645eee5316f672794ad30229487ca220cb4016e4a1ab2df6002ab6988223ba8a1abcfaa71feff2e9bcc7c1e7d1ebb08645fac"}, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x3, [0xb72, 0x2, 0x0, 0x4]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0xfb, 0x8000, [0x9, 0x8000, 0x4, 0xfffffffffffffff8, 0x3]}}]}, @hopopts={0x3a, 0xf, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x5, 0x4e, "1e3bbf09f017ccc677b5af92f94e1ffde3efa32e86ae26e64288b49227ab02a956cf2e26fdc8722c86d66f690820b9330bf7a97fd8d93bd28740c38aae812847aca6429dcf5fcf335c9ae3604aa2"}, @ra={0x5, 0x2, 0xfe01}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x42}}]}, @routing={0x6c, 0x12, 0x1, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3d}, @remote, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @loopback, @mcast2]}, @dstopts={0x3b, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x8, {0x0, 0x0, 0x5, 0x8000}}]}, @srh={0x8, 0xc, 0x4, 0x6, 0x8, 0x68, 0xffff, [@empty, @loopback, @private1, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x0, 0xc, 0x1, 0x33, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x2}, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x8, "a78ce54006598080a896579269748e254c1e4a8a8b3f0a060000000000000034066d42ca0a5c15b37adac15084dbaf736b41e5af030200"/65}, {0x0, 0x1, "000000050000000026000400"}, {}]}}}}}}, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x10}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00')
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
r8 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x38011, r8, 0x0)
read(r5, &(0x7f0000001580)=""/4114, 0x1012)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@deltclass={0x2c, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xfff1}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendto(r9, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

22.107848789s ago: executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000001c0), 0xff13)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
r4 = socket(0xa, 0x6, 0x0)
getsockopt$inet6_mreq(r4, 0x10d, 0xb8, 0x0, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000044001a80400004"], 0x64}}, 0x0)

18.593652693s ago: executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0206800002000056"], 0x10}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x408, &(0x7f0000000440)={[{@nodatacow}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x36]}}, {@max_inline={'max_inline', 0x3d, [0x31, 0x33, 0x39, 0x38, 0x78, 0x38, 0x0]}}, {@rescan_uuid_tree}, {@noenospc_debug}, {@nobarrier}, {@nossd}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.time\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7ff})
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', '', [], 0xa, "2acf9615"}, 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x12)
r3 = socket$key(0xf, 0x3, 0x2)
write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0'}, 0xb)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r0)
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000080)={0x1e})

16.642611319s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001500000000000000640000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10)
socket$key(0xf, 0x3, 0x2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x9)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x7, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
poll(&(0x7f00000020c0)=[{r4, 0x80}, {0xffffffffffffffff, 0x200}], 0x2, 0xf5)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

16.516546468s ago: executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x4000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000092970000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f3c0000001e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000100003800c000080080001"], 0xc0}}, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000300)={0x3, 0x7, 0x3, 0x8})
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000340)=<r4=>0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='net/softnet_stat\x00')
syz_emit_ethernet(0x519, &(0x7f0000001fc0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x4e3, 0x3a, 0x0, @remote, @mcast2, {[@dstopts={0x87, 0x4e, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3f, 0x100, [0xa0, 0x20, 0x10000]}}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x0, 0x9d, "72ebc60c9d64a1cb16f338e705cf89d3d6f54ddbf6db78731a38c0080b6cfcec4e54ae4d3a1bbb1abc49f4d96ef9492fb9bf5e5aa4456d48cc1cf9769f9f2db1afae56897985bac1e7821a77663a8f6c35170a292650fd78650fa435f5e02ba2dec1b04c8dd567eff1c5d0156ea1f8e8432637d1681818bceffbdcb1459f0c4ddd437bd1f72f2881160d36105bc4baef79fc6bc2799096427a5e3bc425"}, @calipso={0x7, 0x58, {0x1, 0x14, 0x6, 0x5, [0x2, 0x9, 0x59ae4f69, 0x6, 0x7fffffff, 0x8000000000000000, 0x7, 0x3, 0x1, 0x2]}}, @generic={0x0, 0xeb, "779e3337a1ae03e6c4ccc4deef24908c45855eb671f7e4b5b80a43afb0424a01b332a61f22feaade82685f2d2df1fd3df966207ed74edf25e39aa86fba0ab513092b9bbb637371d3ea3733eee74666a8a7faefb1dc2785d5176bb4d75745128a20624d3e2b35677d371eef207c95990be3733b749907704c8ba2a9b19e74d5b0f4c1d98356bf416122583f3527eca109719c2e7d5aad64093d8620314b11d30753e08555fce3202c34ba30ad57eaf56fe088b0b6d922366e1645eee5316f672794ad30229487ca220cb4016e4a1ab2df6002ab6988223ba8a1abcfaa71feff2e9bcc7c1e7d1ebb08645fac"}, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x3, [0xb72, 0x2, 0x0, 0x4]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0xfb, 0x8000, [0x9, 0x8000, 0x4, 0xfffffffffffffff8, 0x3]}}]}, @hopopts={0x3a, 0xf, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x5, 0x4e, "1e3bbf09f017ccc677b5af92f94e1ffde3efa32e86ae26e64288b49227ab02a956cf2e26fdc8722c86d66f690820b9330bf7a97fd8d93bd28740c38aae812847aca6429dcf5fcf335c9ae3604aa2"}, @ra={0x5, 0x2, 0xfe01}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x42}}]}, @routing={0x6c, 0x12, 0x1, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3d}, @remote, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @loopback, @mcast2]}, @dstopts={0x3b, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x8, {0x0, 0x0, 0x5, 0x8000}}]}, @srh={0x8, 0xc, 0x4, 0x6, 0x8, 0x68, 0xffff, [@empty, @loopback, @private1, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x0, 0xc, 0x1, 0x33, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x2}, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x8, "a78ce54006598080a896579269748e254c1e4a8a8b3f0a060000000000000034066d42ca0a5c15b37adac15084dbaf736b41e5af030200"/65}, {0x0, 0x1, "000000050000000026000400"}, {}]}}}}}}, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x10}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00')
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
r8 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x38011, r8, 0x0)
read(r5, &(0x7f0000001580)=""/4114, 0x1012)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@deltclass={0x2c, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xfff1}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendto(r9, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

10.913884564s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000100000000b4febbdb0000850000e06c00000095f832"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
write(r0, &(0x7f0000001780)="5dc4ee8c991240a8867bec1c5f676aeb8350c5ed94a66fc3fc66fd28ff894d6a986773e05f1589c566ad7e6a22f9b3a6c97f6dd4e65f52c4ed2e5360c5cd0883e75e182b39b50a8b0efce2c57b5ccf9088d1188f6c2a7020a74b00d3181e5707c9cfcdd490c654dc073853b063f3f2fc305f922a8a43b0af21ca86d05606f4db0ff45a68449037387d88e2a0958bfdd4b6c5458aaa810d82ff207e3522543f143458a06628bc7f36c035ed6f442aea48e5a0bb87d6b52645e3eda8f5340d06367d8eab407e3f2954924872a4ab9d8a27e26318acdf0740dddc8c0ac17db2017c", 0xe0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r1 = dup(0xffffffffffffffff)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)

9.037189569s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
creat(&(0x7f0000000340)='./file0\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = fanotify_init(0x200, 0x0)
r5 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r6 = dup(r5)
fanotify_mark(r4, 0x1, 0x48001059, r6, 0x0)
ftruncate(r5, 0xdcb)
sendfile(r5, r6, 0x0, 0x80000000)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x3, 0x6ed, &(0x7f0000000900)="$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")
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x7}, [@RTA_GATEWAY={0x8, 0x1e, @multicast2}]}, 0x24}}, 0x0)
sync_file_range(r0, 0x4, 0x5, 0x6)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)

7.514051953s ago: executing program 1:
syz_mount_image$nilfs2(&(0x7f0000000200), &(0x7f0000000f00)='./file0\x00', 0x4000450, &(0x7f0000000340)=ANY=[], 0x1, 0xefb, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78ef670efff3f7311209fb8cc158fa18f18591bb90dd1e0464d31ff30a7e5b227e08a2ee0643e735c3cd21b6e743176c8eefd41693"], 0xfc}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60efc7000030210000000000000000000000000000000000ff020000000000000000000000000001"], 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4547, 0x4)
bind$inet(r1, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./bus\x00')
recvmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x2001)
unlinkat(r0, &(0x7f0000005440)='./bus\x00', 0x200)

4.287279455s ago: executing program 3:
socket$kcm(0x10, 0x0, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
clock_gettime(0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x28, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@tail_call, @snprintf, @jmp={0x5, 0x0, 0xc, 0x6, 0x0, 0x1}, @tail_call, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x68, &(0x7f00000002c0)=""/104, 0x41100, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x80, 0x3, 0x2}, 0x10, 0x254dc, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x100}, 0x90)
r1 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}, 0x4000000)
bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000002900000043000000", 0x6033)
bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @initdev}, &(0x7f0000000640)=0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000040601040000000000000000f5ff00060500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040810}, 0x8000)

3.89045824s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r5}, 0x10)
write$cgroup_type(r3, &(0x7f0000000000), 0x9)

3.73006661s ago: executing program 3:
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0)

3.302274255s ago: executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)}, 0x0)
recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003440)={0x104, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xa9, 0x0, 0x0, 0x0, @binary="4c29ef4f7a96f263b46c720abe53d401cbc43a36f31a4354d5a9924f4360deec07340942c7dea7e10076d90019c18708463ab4442355a6955ffa816cc6c314fa8d3cf4e5661397df386d83ba4b1ab4b9876ccd6826e7e7be419f0e907360f799e83d9786f0e65e0ce1ba8cb79f906e375b5079320e149b43ae44d0315ede375b75b11c8a4210c3a00c24f330385c19aade2d43aeb2f63f18b46746c9b857b8f382a8c2b29a"}, @nested={0x39, 0x0, 0x0, 0x1, [@generic="529cfdf94f2e8f73895cb31906da80346032dcb3069a4f518751cbb1965f7a0eacfad285a83513b016c15862e2126c6d367bf507d8"]}]}, 0x104}}, 0x0)

3.205520831s ago: executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10)
r2 = accept(r1, 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5450, 0x0)
setsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0)

3.109192329s ago: executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = accept4$inet6(r1, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000), 0x4)

2.782031026s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000ef7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}})

2.718669974s ago: executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000009e00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000000), 0x9)

2.588513407s ago: executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)={0x3, 0x0, [{0x0, 0xb9, &(0x7f0000000800)=""/185}, {0x0, 0xab, &(0x7f0000000d00)=""/171}, {0x4000, 0x5a, &(0x7f0000000b00)=""/90}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000})

2.301067222s ago: executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0)
sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
close(r3)

2.118828149s ago: executing program 2:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$kcm(0x2, 0x3, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$kcm(0x1e, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'netdevsim0\x00', @random='\x00\x00\x00 \x00'})

1.934348574s ago: executing program 3:
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0)
mlockall(0x1)
fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r2}, &(0x7f0000bbdffc))

1.700782065s ago: executing program 0:
socket$kcm(0x10, 0x0, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
clock_gettime(0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x28, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@tail_call, @snprintf, @jmp={0x5, 0x0, 0xc, 0x6, 0x0, 0x1}, @tail_call, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x68, &(0x7f00000002c0)=""/104, 0x41100, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x80, 0x3, 0x2}, 0x10, 0x254dc, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x100}, 0x90)
r1 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}, 0x4000000)
bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000002900000043000000", 0x6033)
bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @initdev}, &(0x7f0000000640)=0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000040601040000000000000000f5ff00060500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040810}, 0x8000)

1.665846671s ago: executing program 2:
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0)

1.120777486s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10)
signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)

804.888518ms ago: executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1551], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

503.294184ms ago: executing program 2:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000740), 0xfe, 0x499, &(0x7f0000001780)="$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")
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

0s ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0xd28ab64e462fd206, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts.
2024/06/01 08:00:25 fuzzer started
2024/06/01 08:00:26 dialing manager at 10.128.0.169:30024
[  164.731196][ T5045] cgroup: Unknown subsys name 'net'
[  164.954745][ T5045] cgroup: Unknown subsys name 'rlimit'
2024/06/01 08:01:14 starting 5 executor processes
[  210.891177][ T5047] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  213.424046][ T5073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  213.444010][ T5073] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  213.465076][ T5073] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  213.498013][ T5078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  213.513765][ T5080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  213.524790][ T5080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  213.548013][ T5078] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  213.557787][ T5078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.568189][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  213.577177][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.593599][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.603614][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  213.605539][ T5082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.612585][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  213.624728][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.628718][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  213.643300][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  213.643622][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  213.659895][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  213.693629][ T5073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  213.720235][ T5073] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  213.745038][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  213.756477][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  213.767131][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  214.186524][   T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  214.207765][   T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  214.217193][   T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  214.231105][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  214.242603][   T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  214.251912][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  214.956468][ T5081] chnl_net:caif_netlink_parms(): no params data found
[  215.349912][ T5077] chnl_net:caif_netlink_parms(): no params data found
[  215.372241][ T5076] chnl_net:caif_netlink_parms(): no params data found
[  215.713829][ T5086] Bluetooth: hci1: command tx timeout
[  215.741529][ T5072] chnl_net:caif_netlink_parms(): no params data found
[  215.762129][ T5086] Bluetooth: hci3: command tx timeout
[  215.767773][ T5086] Bluetooth: hci0: command tx timeout
[  215.922180][ T5086] Bluetooth: hci2: command tx timeout
[  216.148460][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.156423][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.166222][ T5081] bridge_slave_0: entered allmulticast mode
[  216.175445][ T5081] bridge_slave_0: entered promiscuous mode
[  216.324195][ T5086] Bluetooth: hci4: command tx timeout
[  216.387218][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.395107][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.402994][ T5081] bridge_slave_1: entered allmulticast mode
[  216.412001][ T5081] bridge_slave_1: entered promiscuous mode
[  216.466270][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.476617][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.485929][ T5077] bridge_slave_0: entered allmulticast mode
[  216.495090][ T5077] bridge_slave_0: entered promiscuous mode
[  216.594231][ T5091] chnl_net:caif_netlink_parms(): no params data found
[  216.614851][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.622900][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.630559][ T5077] bridge_slave_1: entered allmulticast mode
[  216.639556][ T5077] bridge_slave_1: entered promiscuous mode
[  216.650131][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.658976][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.666979][ T5076] bridge_slave_0: entered allmulticast mode
[  216.675115][ T5076] bridge_slave_0: entered promiscuous mode
[  216.739407][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.816700][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.824600][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.832562][ T5076] bridge_slave_1: entered allmulticast mode
[  216.841466][ T5076] bridge_slave_1: entered promiscuous mode
[  216.893099][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.988865][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.059195][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.067074][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.074927][ T5072] bridge_slave_0: entered allmulticast mode
[  217.084132][ T5072] bridge_slave_0: entered promiscuous mode
[  217.145744][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.198053][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.205923][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.213601][ T5072] bridge_slave_1: entered allmulticast mode
[  217.221562][ T5072] bridge_slave_1: entered promiscuous mode
[  217.240206][ T5076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.353012][ T5081] team0: Port device team_slave_0 added
[  217.378303][ T5076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.438092][ T5077] team0: Port device team_slave_0 added
[  217.454172][ T5081] team0: Port device team_slave_1 added
[  217.477512][ T5072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.528620][ T5077] team0: Port device team_slave_1 added
[  217.668228][ T5072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.764471][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.773890][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.801610][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.806669][ T5086] Bluetooth: hci1: command tx timeout
[  217.842017][ T5086] Bluetooth: hci0: command tx timeout
[  217.849326][ T5086] Bluetooth: hci3: command tx timeout
[  217.900150][ T5076] team0: Port device team_slave_0 added
[  217.918280][ T5076] team0: Port device team_slave_1 added
[  217.948166][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.955690][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.983290][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.004111][   T50] Bluetooth: hci2: command tx timeout
[  218.029556][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.037022][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.063808][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.234210][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.241471][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.268617][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.286677][ T5072] team0: Port device team_slave_0 added
[  218.351624][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.359301][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.385897][ T5076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.400994][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.408861][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.412250][   T50] Bluetooth: hci4: command tx timeout
[  218.417678][ T5091] bridge_slave_0: entered allmulticast mode
[  218.430713][ T5091] bridge_slave_0: entered promiscuous mode
[  218.448636][ T5072] team0: Port device team_slave_1 added
[  218.456632][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.466037][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.473993][ T5091] bridge_slave_1: entered allmulticast mode
[  218.483104][ T5091] bridge_slave_1: entered promiscuous mode
[  218.532238][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.539426][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.566512][ T5076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.684560][ T5081] hsr_slave_0: entered promiscuous mode
[  218.694991][ T5081] hsr_slave_1: entered promiscuous mode
[  218.795517][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.850363][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.857675][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.884548][ T5072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.934377][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.052341][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.059601][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.086275][ T5072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.125327][ T5077] hsr_slave_0: entered promiscuous mode
[  219.140506][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[  219.147285][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
[  219.160556][ T5077] hsr_slave_1: entered promiscuous mode
[  219.169490][ T5077] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.177526][ T5077] Cannot create hsr debugfs directory
[  219.228463][ T5076] hsr_slave_0: entered promiscuous mode
[  219.237213][ T5076] hsr_slave_1: entered promiscuous mode
[  219.247332][ T5076] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.256137][ T5076] Cannot create hsr debugfs directory
[  219.355254][ T5091] team0: Port device team_slave_0 added
[  219.441651][ T5091] team0: Port device team_slave_1 added
[  219.718690][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.726063][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.753372][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.782884][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.790047][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.816767][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.838836][ T5072] hsr_slave_0: entered promiscuous mode
[  219.847845][   T50] Bluetooth: hci1: command tx timeout
[  219.855336][ T5072] hsr_slave_1: entered promiscuous mode
[  219.863720][ T5072] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.871445][ T5072] Cannot create hsr debugfs directory
[  219.932127][   T50] Bluetooth: hci3: command tx timeout
[  219.937152][ T5086] Bluetooth: hci0: command tx timeout
[  220.093246][ T5086] Bluetooth: hci2: command tx timeout
[  220.482386][ T5086] Bluetooth: hci4: command tx timeout
[  220.503317][ T5091] hsr_slave_0: entered promiscuous mode
[  220.512773][ T5091] hsr_slave_1: entered promiscuous mode
[  220.520711][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  220.528656][ T5091] Cannot create hsr debugfs directory
[  220.739096][ T5077] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  220.816753][ T5077] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  220.848123][ T5077] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  220.906494][ T5077] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  221.058406][ T5081] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  221.131351][ T5081] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  221.155229][ T5081] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  221.190603][ T5081] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  221.464379][ T5076] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  221.535429][ T5076] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  221.561101][ T5072] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  221.595590][ T5072] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  221.616596][ T5072] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  221.637446][ T5076] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  221.656615][ T5076] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  221.706213][ T5072] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  221.924105][ T5086] Bluetooth: hci1: command tx timeout
[  222.008192][ T5086] Bluetooth: hci0: command tx timeout
[  222.016724][   T50] Bluetooth: hci3: command tx timeout
[  222.090508][ T5091] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  222.173615][ T5086] Bluetooth: hci2: command tx timeout
[  222.179462][ T5091] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  222.205151][ T5091] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  222.247601][ T5091] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  222.479829][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.592641][ T5086] Bluetooth: hci4: command tx timeout
[  222.780740][ T5077] 8021q: adding VLAN 0 to HW filter on device team0
[  222.808216][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.924385][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.932327][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.982601][ T5081] 8021q: adding VLAN 0 to HW filter on device team0
[  223.060120][ T5076] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.182755][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.190524][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.210500][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.218414][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.253432][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.261177][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.317216][ T5072] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.473337][ T5076] 8021q: adding VLAN 0 to HW filter on device team0
[  223.639652][ T5072] 8021q: adding VLAN 0 to HW filter on device team0
[  223.701562][ T5077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  223.714787][ T5077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  223.749672][  T780] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.757476][  T780] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.835989][  T780] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.843790][  T780] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.957879][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.971453][  T779] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.979281][  T779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.110617][ T5081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  224.187881][  T779] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.195675][  T779] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.291279][ T5091] 8021q: adding VLAN 0 to HW filter on device team0
[  224.444975][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.452825][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.579783][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.587707][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.679296][ T5072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  225.664102][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.185728][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.280340][ T5077] veth0_vlan: entered promiscuous mode
[  226.431552][ T5077] veth1_vlan: entered promiscuous mode
[  226.498359][ T5076] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.780801][ T5072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.863110][ T5077] veth0_macvtap: entered promiscuous mode
[  226.896464][ T5081] veth0_vlan: entered promiscuous mode
[  226.939360][ T5077] veth1_macvtap: entered promiscuous mode
[  226.966600][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.053436][ T5081] veth1_vlan: entered promiscuous mode
[  227.166840][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.280017][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.440075][ T5077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.454685][ T5077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.465209][ T5077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.474468][ T5077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.516457][ T5072] veth0_vlan: entered promiscuous mode
[  227.615079][ T5072] veth1_vlan: entered promiscuous mode
[  227.689463][ T5081] veth0_macvtap: entered promiscuous mode
[  227.729694][ T5091] veth0_vlan: entered promiscuous mode
[  227.846990][ T5081] veth1_macvtap: entered promiscuous mode
[  227.879379][ T5091] veth1_vlan: entered promiscuous mode
[  228.053155][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.065046][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.080187][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.145555][ T5072] veth0_macvtap: entered promiscuous mode
[  228.207940][ T5072] veth1_macvtap: entered promiscuous mode
[  228.242787][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.253684][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.268944][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.384822][ T5081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.395639][ T5081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.406192][ T5081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.415399][ T5081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.450347][ T5091] veth0_macvtap: entered promiscuous mode
[  228.492855][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.504881][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.515187][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.525952][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.540996][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.588682][ T5091] veth1_macvtap: entered promiscuous mode
[  228.704650][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.717039][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.730034][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.741505][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.751656][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.762541][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.777900][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.831380][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.842318][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.854839][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.866903][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.889376][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.027404][ T5072] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.037986][ T5072] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.047559][ T5072] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.056737][ T5072] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.166344][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.177234][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.187501][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.198419][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.210234][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.224209][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.239279][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.425930][ T5076] veth0_vlan: entered promiscuous mode
[  229.534688][ T5091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.543975][ T5091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.553280][ T5091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.562416][ T5091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.598838][ T5076] veth1_vlan: entered promiscuous mode
[  229.972533][ T5076] veth0_macvtap: entered promiscuous mode
[  230.055727][ T5076] veth1_macvtap: entered promiscuous mode
[  230.304460][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.315295][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.325526][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.336378][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.346555][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.357329][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.367598][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.378439][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.393773][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.791632][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.804912][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.815198][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.825951][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.836122][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.846905][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.857109][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.867857][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.884463][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.191456][ T5076] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.202022][ T5076] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.211043][ T5076] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.220523][ T5076] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.624027][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.632143][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.893648][ T5132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.903553][ T5132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.733300][ T3758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.741384][ T3758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.962312][ T2468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.970382][ T2468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.011972][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.020036][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.252352][  T779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.260416][  T779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.417132][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.425631][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.634201][ T4198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.642379][ T4198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.886268][ T5257] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  237.244030][ T5132] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  237.638099][ T5273] tmpfs: Bad value for 'mpol'
[  237.672556][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  237.690553][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  237.711708][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  237.722042][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  237.839159][ T5277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  237.935168][ T5132] usb 1-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5
[  237.945694][ T5132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.954766][ T5132] usb 1-1: Product: syz
[  237.959173][ T5132] usb 1-1: Manufacturer: syz
[  237.964287][ T5132] usb 1-1: SerialNumber: syz
[  238.010521][ T5132] usb 1-1: config 0 descriptor??
[  238.069498][ T5132] sierra 1-1:0.0: Sierra USB modem converter detected
[  238.264501][ T5275] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  238.305994][ T3758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.314397][ T3758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.493847][ T5132] usb 1-1: Sierra USB modem converter now attached to ttyUSB0
[  238.663938][ T5132] usb 1-1: USB disconnect, device number 2
[  238.679842][ T3758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.688379][ T3758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.792068][ T5132] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  238.808776][ T5132] sierra 1-1:0.0: device disconnected
[  239.188747][ T5284] loop3: detected capacity change from 0 to 512
[  239.433682][ T5284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 256 (level 2)
[  239.474426][ T5284] EXT4-fs (loop3): 2 truncates cleaned up
[  239.480438][ T5284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.519820][ T5284] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 5: invalid block bitmap
[  239.556421][ T5294] overlayfs: missing 'lowerdir'
[  239.605636][ T5290] loop1: detected capacity change from 0 to 256
[  239.638401][ T5290] FAT-fs (loop1): Unrecognized mount option "shortn" or missing value
[  239.732829][  T779] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  239.756036][ T5294] loop0: detected capacity change from 0 to 1024
[  239.882089][ T5072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.910898][ T5294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  239.972683][  T779] usb 5-1: Using ep0 maxpacket: 32
[  240.133126][  T779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.144971][  T779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.155214][  T779] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  240.164878][  T779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.275431][  T779] usb 5-1: config 0 descriptor??
[  240.348452][  T779] hub 5-1:0.0: USB hub found
[  241.488120][ T5303] loop3: detected capacity change from 0 to 40427
[  241.513070][  T779] hub 5-1:0.0: 1 port detected
[  241.593836][ T5303] F2FS-fs (loop3): invalid crc value
[  241.689182][ T5303] F2FS-fs (loop3): Found nat_bits in checkpoint
[  241.956077][  T779] hub 5-1:0.0: activate --> -90
[  241.973484][ T5303] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  242.024043][ T5289] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
[  242.716758][ T5072] syz-executor.3: attempt to access beyond end of device
[  242.716758][ T5072] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  243.353114][  T779] hub 5-1:0.0: hub_ext_port_status failed (err = -32)
[  243.572399][   T29] audit: type=1326 audit(1717228906.740:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5323 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb77bc7cee9 code=0x0
[  244.592730][ T5328] loop2: detected capacity change from 0 to 40427
[  245.514438][ T5126] usb 5-1: USB disconnect, device number 2
[  246.106601][ T5337] loop4: detected capacity change from 0 to 256
[  246.267413][ T5343] pim6reg1: entered promiscuous mode
[  246.278972][ T5343] pim6reg1: entered allmulticast mode
[  246.528209][ T5342] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  246.732251][  T779] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  246.880109][ T5352] loop0: detected capacity change from 0 to 256
[  246.954241][ T5352] FAT-fs (loop0): Unrecognized mount option "codepage=<66" or missing value
[  247.146039][  T779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.158582][  T779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.169606][  T779] usb 2-1: New USB device found, idVendor=056a, idProduct=0014, bcdDevice= 0.00
[  247.179095][  T779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.375757][  T779] usb 2-1: config 0 descriptor??
[  247.802589][ T5135] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  247.892023][ T5343] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure
[  248.009016][ T5354] loop4: detected capacity change from 0 to 40427
[  248.048930][ T5354] F2FS-fs (loop4): invalid crc value
[  248.057865][ T5356] loop3: detected capacity change from 0 to 128
[  248.097326][ T5354] F2FS-fs (loop4): Found nat_bits in checkpoint
[  248.108474][ T5356] befs: (loop3): No write support. Marking filesystem read-only
[  248.199915][ T5356] befs: (loop3): invalid magic header
[  248.282820][ T5135] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.294276][ T5135] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.304836][ T5135] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  248.314216][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.370372][ T5135] usb 1-1: config 0 descriptor??
[  248.400599][ T5354] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  248.717453][ T5076] syz-executor.4: attempt to access beyond end of device
[  248.717453][ T5076] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  248.793634][  T779] wacom 0003:056A:0014.0001: Unknown device_type for 'HID 056a:0014'. Assuming pen.
[  248.869306][  T779] wacom 0003:056A:0014.0001: hidraw0: USB HID v0.00 Device [HID 056a:0014] on usb-dummy_hcd.1-1/input0
[  248.885201][  T779] input: Wacom Graphire3 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0014.0001/input/input5
[  249.184334][ T5135] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0
[  249.500504][ T5368] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  249.608271][ T5352] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  249.621596][ T5352] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  249.632911][ T5352] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  249.723886][ T5135] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71
[  249.741275][ T5135] usb 1-1: USB disconnect, device number 3
[  249.789113][ T5374] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it!
[  249.895251][ T5370] loop3: detected capacity change from 0 to 128
[  250.026052][ T5370] befs: (loop3): invalid magic header
[  250.268225][ T5126] usb 2-1: reset high-speed USB device number 2 using dummy_hcd
[  251.078234][ T5379] loop2: detected capacity change from 0 to 164
[  251.311988][  T779] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  251.557111][  T780] usb 2-1: USB disconnect, device number 2
[  251.893002][  T779] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  251.906725][  T779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.916355][  T779] usb 4-1: Product: syz
[  251.920757][  T779] usb 4-1: Manufacturer: syz
[  251.925743][  T779] usb 4-1: SerialNumber: syz
[  251.985082][  T779] usb 4-1: config 0 descriptor??
[  252.011525][ T5386] loop0: detected capacity change from 0 to 512
[  252.047293][  T779] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 002
[  252.059945][ T5386] EXT4-fs: Ignoring removed mblk_io_submit option
[  252.066799][ T5386] EXT4-fs: Ignoring removed bh option
[  252.205165][ T5386] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  252.257342][ T5386] EXT4-fs (loop0): orphan cleanup on readonly fs
[  252.264195][ T5386] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  252.277615][ T5386] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 2 len 1
[  252.300226][ T5386] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  252.323249][ T5386] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0)
[  252.425981][ T5386] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1)
[  252.475369][ T5392] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  252.536913][ T5386] EXT4-fs (loop0): 1 truncate cleaned up
[  252.543304][ T5386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  252.693213][ T5395] ptrace attach of "/root/syz-executor.2 exec"[5077] was attempted by "/root/syz-executor.2 exec"[5395]
[  252.808642][  T779] i2c i2c-1: failure reading functionality
[  252.847968][ T5386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  252.977549][  T779] i2c i2c-1: connected i2c-tiny-usb device
[  253.162532][  T779] usb 4-1: USB disconnect, device number 2
[  253.467285][ T5395] loop2: detected capacity change from 0 to 32768
[  253.490133][ T5395] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5395)
[  253.900841][ T5081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.396691][ T5399] loop1: detected capacity change from 0 to 40427
[  254.452390][ T5399] F2FS-fs (loop1): invalid crc value
[  254.481280][ T5395] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  254.495133][ T5395] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm
[  254.506878][ T5395] BTRFS info (device loop2): disk space caching is enabled
[  254.535450][ T5399] F2FS-fs (loop1): Found nat_bits in checkpoint
[  254.818253][ T5399] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  255.030514][ T5091] syz-executor.1: attempt to access beyond end of device
[  255.030514][ T5091] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  255.054872][ T5395] BTRFS info (device loop2): rebuilding free space tree
[  255.107320][ T5395] BTRFS info (device loop2): disabling free space tree
[  255.114791][ T5395] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  255.124902][ T5395] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  255.495191][ T5132] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  255.963096][ T5428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  256.109376][ T5077] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  256.637499][ T5430] netlink: 766 bytes leftover after parsing attributes in process `syz-executor.0'.
[  256.743448][ T5429] delete_channel: no stack
[  256.939060][ T5428] loop4: detected capacity change from 0 to 40427
[  256.952492][ T5132] usb 4-1: Using ep0 maxpacket: 32
[  256.979070][ T5428] F2FS-fs (loop4): Mismatch start address, segment0(512) cp_blkaddr(2304)
[  256.988524][ T5428] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  257.006952][ T5428] F2FS-fs (loop4): invalid crc value
[  257.019826][ T5428] F2FS-fs (loop4): invalid crc value
[  257.032024][ T5428] F2FS-fs (loop4): Failed to get valid F2FS checkpoint
[  257.619778][ T5132] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  257.628813][ T5132] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  257.642076][ T5132] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  257.651318][ T5132] usb 4-1: config 1 has no interface number 0
[  257.659617][ T5132] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  257.671087][ T5132] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  257.684799][ T5132] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  257.694334][ T5132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.876692][ T5132] usb 4-1: can't set config #1, error -71
[  257.908189][ T5132] usb 4-1: USB disconnect, device number 3
[  258.309708][ T5438] vlan2: entered promiscuous mode
[  258.315248][ T5438] dummy0: entered promiscuous mode
[  258.321483][ T5438] vlan2: entered allmulticast mode
[  258.327062][ T5438] dummy0: entered allmulticast mode
[  258.500238][ T5438] dummy0: left allmulticast mode
[  258.505671][ T5438] dummy0: left promiscuous mode
[  258.792115][ T5130] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  259.165462][ T5130] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  259.178999][ T5130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.262856][ T5130] usb 4-1: config 0 descriptor??
[  259.322840][ T5130] cp210x 4-1:0.0: cp210x converter detected
[  259.342300][ T5126] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  259.602294][ T5126] usb 3-1: Using ep0 maxpacket: 8
[  259.742521][ T5126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.754039][ T5126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.760254][ T5449] loop4: detected capacity change from 0 to 512
[  259.764425][ T5126] usb 3-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00
[  259.780087][ T5126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.869949][ T5126] usb 3-1: config 0 descriptor??
[  259.900924][ T5449] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  259.915200][ T5449] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  260.032820][ T5130] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[  260.040925][ T5130] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  260.110277][ T5449] EXT4-fs (loop4): orphan cleanup on readonly fs
[  260.135642][ T5130] usb 4-1: cp210x converter now attached to ttyUSB0
[  260.208082][ T5449] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.4: corrupted in-inode xattr: bad e_name length
[  260.263428][ T5130] usb 4-1: USB disconnect, device number 4
[  260.282654][ T5449] EXT4-fs (loop4): Remounting filesystem read-only
[  260.289790][ T5449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  260.426444][ T5130] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  260.437276][ T5130] cp210x 4-1:0.0: device disconnected
[  260.466733][ T5449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.901196][ T5126] wacom 0003:056A:0343.0003: unknown main item tag 0x0
[  260.991628][ T5126] wacom 0003:056A:0343.0003: hidraw0: USB HID v0.00 Device [HID 056a:0343] on usb-dummy_hcd.2-1/input0
[  261.133488][ T5126] usb 3-1: USB disconnect, device number 2
[  261.174961][ T5463] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  261.495083][ T5465] loop3: detected capacity change from 0 to 512
[  261.519484][ T5465] =======================================================
[  261.519484][ T5465] WARNING: The mand mount option has been deprecated and
[  261.519484][ T5465]          and is ignored by this kernel. Remove the mand
[  261.519484][ T5465]          option from the mount to silence this warning.
[  261.519484][ T5465] =======================================================
[  261.559052][ T5465] EXT4-fs: Ignoring removed orlov option
[  261.566798][ T5465] EXT4-fs: Ignoring removed nomblk_io_submit option
[  261.591014][ T5470] netlink: 766 bytes leftover after parsing attributes in process `syz-executor.0'.
[  261.717183][ T5465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  261.747318][ T5469] loop4: detected capacity change from 0 to 512
[  261.783069][ T5469] /dev/loop4: Can't open blockdev
[  261.867072][ T5465] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  261.875880][ T5465] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  261.914975][ T5465] EXT4-fs (loop3): orphan cleanup on readonly fs
[  261.918851][ T5469] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  261.921644][ T5465] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  261.948233][ T5465] EXT4-fs warning (device loop3): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  261.964601][ T5465] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  261.996621][ T5465] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 40: padding at end of block bitmap is not set
[  262.019457][ T5465] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6537: Corrupt filesystem
[  262.048492][ T5465] EXT4-fs (loop3): 1 truncate cleaned up
[  262.054567][ T5465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  262.118271][ T5474] loop1: detected capacity change from 0 to 1024
[  262.137765][    C1] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 0
[  262.303518][ T5466] delete_channel: no stack
[  262.386241][ T5474] hfsplus: xattr searching failed
[  262.402082][   T29] audit: type=1800 audit(1717228925.580:3): pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=25 res=0 errno=0
[  263.399098][ T5483] loop1: detected capacity change from 0 to 512
[  263.608744][ T5483] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.1: corrupted in-inode xattr: bad e_name length
[  263.697520][ T5483] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117)
[  263.717861][ T5483] EXT4-fs (loop1): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.821114][ T5487] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  263.838612][ T5483] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  263.838754][ T5483] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  263.861961][ T5483] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  263.914694][ T5489] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  263.927157][ T5489] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  263.938849][ T5489] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  263.949890][ T5489] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  263.960955][ T5489] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  264.020773][ T5483] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 312: padding at end of block bitmap is not set
[  264.158032][ T5483] overlayfs: failed to verify upper root origin
[  264.528218][ T5091] EXT4-fs (loop1): unmounting filesystem 00000004-0000-0000-0000-000000000000.
[  264.658015][ T5497] vlan2: entered promiscuous mode
[  264.663505][ T5497] dummy0: entered promiscuous mode
[  264.669709][ T5497] vlan2: entered allmulticast mode
[  264.675278][ T5497] dummy0: entered allmulticast mode
[  264.860307][ T5497] dummy0: left allmulticast mode
[  264.865886][ T5497] dummy0: left promiscuous mode
[  265.267747][  T779] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  265.517278][ T5499] loop2: detected capacity change from 0 to 4096
[  265.609921][ T5499] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  265.672711][  T779] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  265.682387][  T779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.739947][ T5510] loop4: detected capacity change from 0 to 512
[  265.753723][ T5510] /dev/loop4: Can't open blockdev
[  265.764949][  T779] usb 1-1: config 0 descriptor??
[  265.845080][  T779] cp210x 1-1:0.0: cp210x converter detected
[  265.979942][    C0] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 0
[  266.107576][   T29] audit: type=1800 audit(1717228929.230:4): pid=5499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=33 res=0 errno=0
[  266.612337][  T779] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[  266.620574][  T779] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  266.683033][  T779] usb 1-1: cp210x converter now attached to ttyUSB0
[  266.778215][ T5518] loop4: detected capacity change from 0 to 64
[  266.832703][  T779] usb 1-1: USB disconnect, device number 4
[  266.910331][ T5072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.933390][  T779] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  266.944187][  T779] cp210x 1-1:0.0: device disconnected
[  267.074651][ T3758] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.188552][ T3758] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.278819][ T5520] netlink: 766 bytes leftover after parsing attributes in process `syz-executor.2'.
[  267.343442][ T5519] delete_channel: no stack
[  267.453497][ T3758] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.652417][ T3758] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.191637][ T3758] bridge_slave_1: left allmulticast mode
[  268.197781][ T3758] bridge_slave_1: left promiscuous mode
[  268.204740][ T3758] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.254601][ T5529] loop2: detected capacity change from 0 to 8
[  268.272201][ T3758] bridge_slave_0: left allmulticast mode
[  268.278112][ T3758] bridge_slave_0: left promiscuous mode
[  268.290616][ T3758] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.592009][ T5529] SQUASHFS error: zlib decompression failed, data probably corrupt
[  268.600215][ T5529] SQUASHFS error: Failed to read block 0x13e: -5
[  268.612670][ T5529] SQUASHFS error: Unable to read metadata cache entry [13c]
[  268.620305][ T5529] SQUASHFS error: Unable to read directory block [13c:26]
[  268.704655][ T5529] tipc: Can't bind to reserved service type 0
[  269.143635][ T3758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.234204][ T3758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  269.323965][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  269.334977][ T3758] bond0 (unregistering): Released all slaves
[  269.793619][ T5537] loop0: detected capacity change from 0 to 512
[  269.844315][ T5537] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  269.882965][ T5537] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  269.913502][ T5537] EXT4-fs (loop0): Remounting filesystem read-only
[  269.921007][ T5537] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2847: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  269.940255][ T5537] EXT4-fs warning (device loop0): ext4_evict_inode:254: couldn't mark inode dirty (err -5)
[  269.950707][ T5537] EXT4-fs (loop0): 1 orphan inode deleted
[  269.956772][ T5537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.080360][ T5537] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'.
[  270.295325][ T5081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.503991][ T5546] loop4: detected capacity change from 0 to 512
[  270.513275][ T5546] /dev/loop4: Can't open blockdev
[  270.753352][ T3758] hsr_slave_0: left promiscuous mode
[  270.799929][    C0] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 0
[  270.814324][ T3758] hsr_slave_1: left promiscuous mode
[  270.865142][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  270.873023][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_0
[  270.953746][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  270.961472][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.109725][ T3758] veth1_macvtap: left promiscuous mode
[  271.115682][ T3758] veth0_macvtap: left promiscuous mode
[  271.121699][ T3758] veth1_vlan: left promiscuous mode
[  271.127543][ T3758] veth0_vlan: left promiscuous mode
[  271.506844][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  271.520495][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  271.537222][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  271.654921][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  271.682844][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  271.693085][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  272.062152][  T780] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  272.290813][ T5572] loop1: detected capacity change from 0 to 64
[  272.305346][ T5572] hfs: unable to parse mount options
[  272.510987][ T3758] team0 (unregistering): Port device team_slave_1 removed
[  272.660227][  T780] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  272.670158][  T780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.740739][ T3758] team0 (unregistering): Port device team_slave_0 removed
[  272.759904][  T780] usb 3-1: config 0 descriptor??
[  272.811200][  T780] cp210x 3-1:0.0: cp210x converter detected
[  272.891640][ T5566] delete_channel: no stack
[  273.280408][ T5560] vlan2: entered promiscuous mode
[  273.285900][ T5560] dummy0: entered promiscuous mode
[  273.292700][ T5560] vlan2: entered allmulticast mode
[  273.298034][ T5560] dummy0: entered allmulticast mode
[  273.394411][ T5560] dummy0: left allmulticast mode
[  273.399728][ T5560] dummy0: left promiscuous mode
[  273.546294][ T5569] netlink: 766 bytes leftover after parsing attributes in process `syz-executor.4'.
[  273.802474][  T780] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  273.810546][  T780] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  273.853997][ T5082] Bluetooth: hci0: command tx timeout
[  273.966527][  T780] usb 3-1: cp210x converter now attached to ttyUSB0
[  274.068254][  T780] usb 3-1: USB disconnect, device number 3
[  274.158961][  T780] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  274.187974][  T780] cp210x 3-1:0.0: device disconnected
[  275.313391][ T5602] loop2: detected capacity change from 0 to 512
[  275.334448][ T5602] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  275.397281][ T5557] chnl_net:caif_netlink_parms(): no params data found
[  275.476480][ T5602] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  275.496166][ T5602] EXT4-fs (loop2): Remounting filesystem read-only
[  275.504207][ T5602] EXT4-fs warning (device loop2): ext4_evict_inode:254: couldn't mark inode dirty (err -5)
[  275.514797][ T5602] EXT4-fs (loop2): 1 orphan inode deleted
[  275.520777][ T5602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.570775][ T5602] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.2'.
[  275.715076][ T5077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.922254][ T5082] Bluetooth: hci0: command tx timeout
[  276.500992][ T5617] loop2: detected capacity change from 0 to 512
[  276.658375][ T5617] /dev/loop2: Can't open blockdev
[  277.116077][    C1] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 0
[  277.863921][ T5632] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  277.883532][ T5557] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.891249][ T5557] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.899525][ T5557] bridge_slave_0: entered allmulticast mode
[  277.908874][ T5557] bridge_slave_0: entered promiscuous mode
[  277.945036][ T5630] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  278.022202][ T5082] Bluetooth: hci0: command tx timeout
[  278.081032][ T5557] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.089298][ T5557] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.097796][ T5557] bridge_slave_1: entered allmulticast mode
[  278.107295][ T5557] bridge_slave_1: entered promiscuous mode
[  278.643896][ T5557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.777044][ T5557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.913848][ T5636] loop1: detected capacity change from 0 to 4096
[  279.002123][ T5636] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  279.070478][ T5557] team0: Port device team_slave_0 added
[  279.071231][ T5636] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  279.154515][ T5557] team0: Port device team_slave_1 added
[  279.289846][ T5646] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  279.632005][ T5557] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.639183][ T5557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.669552][ T5557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.028780][ T5557] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.038275][ T5557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.068504][ T5557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.084181][ T5082] Bluetooth: hci0: command tx timeout
[  280.583549][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[  280.590254][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
[  280.818846][ T5557] hsr_slave_0: entered promiscuous mode
[  280.862131][ T5557] hsr_slave_1: entered promiscuous mode
[  280.877382][ T5557] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.889391][ T5557] Cannot create hsr debugfs directory
[  280.980442][ T3758] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.174165][ T3758] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.455653][ T3758] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.650114][ T3758] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.228285][ T3758] bridge_slave_1: left allmulticast mode
[  282.234772][ T3758] bridge_slave_1: left promiscuous mode
[  282.241309][ T3758] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.269460][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  282.283365][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  282.302783][ T3758] bridge_slave_0: left allmulticast mode
[  282.308690][ T3758] bridge_slave_0: left promiscuous mode
[  282.320525][ T3758] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.331403][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  282.383001][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  282.476718][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  282.489365][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  283.051128][ T3758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  283.107336][ T5680] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'.
[  283.108250][ T3758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  283.189552][ T3758] bond0 (unregistering): Released all slaves
[  283.486756][ T5680] can: request_module (can-proto-0) failed.
[  283.920392][ T5684] loop0: detected capacity change from 0 to 512
[  283.965435][ T5684] /dev/loop0: Can't open blockdev
[  284.073756][ T5690] binder: 5687:5690 ioctl 4018620d 20000100 returned -22
[  284.088806][    C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 0
[  284.308512][ T3758] hsr_slave_0: left promiscuous mode
[  284.334498][ T3758] hsr_slave_1: left promiscuous mode
[  284.353595][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  284.368347][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_0
[  284.402839][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  284.410973][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_1
[  284.438556][ T3758] veth1_macvtap: left promiscuous mode
[  284.444734][ T3758] veth0_macvtap: left promiscuous mode
[  284.450649][ T3758] veth1_vlan: left promiscuous mode
[  284.456431][ T3758] veth0_vlan: left promiscuous mode
[  284.693973][ T5086] Bluetooth: hci1: command tx timeout
[  285.440207][ T3758] team0 (unregistering): Port device team_slave_1 removed
[  285.580622][ T3758] team0 (unregistering): Port device team_slave_0 removed
[  286.286521][  T780] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  286.552104][  T780] usb 1-1: Using ep0 maxpacket: 32
[  286.652845][ T5557] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  286.730148][ T5086] Bluetooth: hci1: command tx timeout
[  286.733182][ T5557] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  286.799169][ T5557] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  286.833384][ T5557] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  286.926065][ T5718] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614)
[  286.926200][ T5718] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  286.933531][ T5718] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de
[  287.492876][ T5671] chnl_net:caif_netlink_parms(): no params data found
[  288.809187][ T5086] Bluetooth: hci1: command tx timeout
[  289.393473][ T5557] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.510836][ T5671] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.520333][ T5671] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.534009][ T5671] bridge_slave_0: entered allmulticast mode
[  289.543448][ T5671] bridge_slave_0: entered promiscuous mode
[  289.612072][  T780] usb 1-1: unable to get BOS descriptor or descriptor too short
[  289.654122][ T5557] 8021q: adding VLAN 0 to HW filter on device team0
[  289.682337][  T780] usb 1-1: unable to read config index 0 descriptor/start: -71
[  289.692816][  T780] usb 1-1: can't read configurations, error -71
[  289.727427][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.735279][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.761148][ T5671] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.769088][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.777033][ T5671] bridge_slave_1: entered allmulticast mode
[  289.792202][ T5671] bridge_slave_1: entered promiscuous mode
[  289.844678][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.852504][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.965176][ T5736] loop2: detected capacity change from 0 to 4096
[  290.064202][ T5736] ntfs3: Unknown parameter '0x0000000000000000'
[  290.222006][ T5126] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  290.229542][ T5671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.256344][ T5671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.569043][ T5671] team0: Port device team_slave_0 added
[  290.623227][ T5671] team0: Port device team_slave_1 added
[  290.716987][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  290.728805][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  290.740346][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  290.750575][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  290.760657][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  290.882375][ T5086] Bluetooth: hci1: command tx timeout
[  290.997673][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.006143][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.035696][ T5671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.092531][ T5126] usb 2-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5
[  291.102083][ T5126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.110351][ T5126] usb 2-1: Product: syz
[  291.115894][ T5126] usb 2-1: Manufacturer: syz
[  291.123837][ T5126] usb 2-1: SerialNumber: syz
[  291.214263][ T5126] usb 2-1: config 0 descriptor??
[  291.268853][ T5736] loop2: detected capacity change from 0 to 4096
[  291.317998][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.329557][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.345296][ T5736] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  291.356982][ T5671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.407321][ T5126] sierra 2-1:0.0: Sierra USB modem converter detected
[  291.521479][ T5736] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  291.557336][ T5736] ntfs3: loop2: Failed to load $AttrDef (-2)
[  291.592703][ T5126] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[  291.653007][ T5126] usb 2-1: Sierra USB modem converter now attached to ttyUSB1
[  291.733274][ T5126] usb 2-1: USB disconnect, device number 3
[  291.806128][ T5126] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  291.876865][ T5126] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  291.887262][ T5126] sierra 2-1:0.0: device disconnected
[  292.120837][ T5671] hsr_slave_0: entered promiscuous mode
[  292.193972][ T5671] hsr_slave_1: entered promiscuous mode
[  292.272874][ T5671] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  292.280950][ T5671] Cannot create hsr debugfs directory
[  292.913438][ T5557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  293.493834][ T5768] loop2: detected capacity change from 0 to 4096
[  293.524768][ T5557] veth0_vlan: entered promiscuous mode
[  293.672973][ T5557] veth1_vlan: entered promiscuous mode
[  293.687338][ T5772] loop1: detected capacity change from 0 to 2048
[  293.714188][ T5772] udf: Unknown parameter '01777777777777777777777'
[  294.104236][ T5777] syz-executor.1 (pid 5777) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  294.214735][ T5557] veth0_macvtap: entered promiscuous mode
[  294.281016][ T5671] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  294.315632][ T5777] fscrypt (sda1, inode 1953): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  294.330798][ T5777] fscrypt (sda1, inode 1953): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  294.388048][ T5557] veth1_macvtap: entered promiscuous mode
[  294.537721][ T5671] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  294.716291][ T5671] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  294.886710][ T5671] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  295.027186][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.040031][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.051484][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.064627][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.075205][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.085986][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.101389][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_0
[  295.439282][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.451680][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.462759][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.473578][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.483813][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.494580][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.507860][ T5798] loop2: detected capacity change from 0 to 128
[  295.509671][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.633619][ T5160] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  295.641263][ T5798] affs: No valid root block on device loop2
[  295.808905][ T5557] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.818314][ T5557] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.827571][ T5557] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.839998][ T5557] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.952853][ T5160] usb 2-1: Using ep0 maxpacket: 32
[  296.539485][ T5671] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.759101][ T5671] 8021q: adding VLAN 0 to HW filter on device team0
[  296.900333][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.900834][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.041974][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.042471][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.239903][ T5671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  297.240026][ T5671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  297.523289][ T5135] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  297.663694][   T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  297.784212][ T5135] usb 1-1: Using ep0 maxpacket: 16
[  297.914896][ T5135] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  297.915045][ T5135] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  298.072665][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  298.072825][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  298.072998][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  298.073143][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  298.073285][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  298.113045][ T5135] usb 1-1: New USB device found, idVendor=506f, idProduct=be92, bcdDevice=b8.ea
[  298.113206][ T5135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.113382][ T5135] usb 1-1: Product: syz
[  298.113471][ T5135] usb 1-1: Manufacturer: syz
[  298.113562][ T5135] usb 1-1: SerialNumber: syz
[  298.121607][ T5135] usb 1-1: config 0 descriptor??
[  298.236229][   T25] usb 3-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5
[  298.236396][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.236525][   T25] usb 3-1: Product: syz
[  298.236628][   T25] usb 3-1: Manufacturer: syz
[  298.236732][   T25] usb 3-1: SerialNumber: syz
[  298.248445][   T25] usb 3-1: config 0 descriptor??
[  298.297670][   T25] sierra 3-1:0.0: Sierra USB modem converter detected
[  298.444874][ T5132] usb 1-1: USB disconnect, device number 7
[  298.524037][   T25] usb 3-1: Sierra USB modem converter now attached to ttyUSB0
[  298.551073][   T25] usb 3-1: Sierra USB modem converter now attached to ttyUSB1
[  298.559187][   T25] usb 3-1: USB disconnect, device number 4
[  298.591045][   T25] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  298.603518][   T25] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  298.604796][   T25] sierra 3-1:0.0: device disconnected
[  298.953871][ T5671] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.642674][ T5160] usb 2-1: unable to get BOS descriptor or descriptor too short
[  299.736209][ T5160] usb 2-1: unable to read config index 0 descriptor/start: -71
[  299.744321][ T5160] usb 2-1: can't read configurations, error -71
[  300.810098][   T29] audit: type=1326 audit(1717228963.920:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000
[  300.833135][    C1] vkms_vblank_simulate: vblank timer overrun
[  300.840837][   T29] audit: type=1326 audit(1717228963.920:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000
[  300.863661][    C1] vkms_vblank_simulate: vblank timer overrun
[  300.873531][   T29] audit: type=1326 audit(1717228963.920:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000
[  300.896797][   T29] audit: type=1326 audit(1717228963.920:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000
[  300.919915][   T29] audit: type=1326 audit(1717228963.920:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000
[  300.943007][   T29] audit: type=1326 audit(1717228963.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000
[  300.965853][    C1] vkms_vblank_simulate: vblank timer overrun
[  300.975542][   T29] audit: type=1326 audit(1717228963.930:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000
[  300.998327][    C1] vkms_vblank_simulate: vblank timer overrun
[  301.004885][   T29] audit: type=1326 audit(1717228963.930:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000
[  301.028143][   T29] audit: type=1326 audit(1717228963.960:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb77bc7ec67 code=0x7ffc0000
[  301.051048][    C1] vkms_vblank_simulate: vblank timer overrun
[  301.061458][   T29] audit: type=1326 audit(1717228963.960:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb77bc7ebdc code=0x7ffc0000
[  301.084368][    C1] vkms_vblank_simulate: vblank timer overrun
[  301.254695][ T5852] fuse: Unknown parameter '00000000000000000000'
[  301.580410][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  302.111462][ T5671] veth0_vlan: entered promiscuous mode
[  302.276220][ T5671] veth1_vlan: entered promiscuous mode
[  302.375198][ T5875] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  302.453810][ T5875] usb usb5: usbfs: process 5875 (syz-executor.0) did not claim interface 0 before use
[  302.653667][ T5671] veth0_macvtap: entered promiscuous mode
[  302.754007][ T5671] veth1_macvtap: entered promiscuous mode
[  302.878118][ T5888] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  302.990915][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.006226][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.017736][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.028678][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.038882][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.050494][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.061135][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.071995][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.087419][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.155016][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.166670][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.177134][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.187945][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.198137][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.213861][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.226027][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.236928][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.252338][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.315228][ T5126] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  303.325112][ T5671] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.334819][ T5671] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.344368][ T5671] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.353790][ T5671] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.382771][ T5132] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  303.589366][ T4198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.597825][ T4198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.672747][ T5132] usb 2-1: Using ep0 maxpacket: 32
[  303.750572][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  303.762551][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  303.773945][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  303.784044][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  303.794181][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  303.868569][   T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.876985][   T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.043407][ T5126] usb 1-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5
[  304.053203][ T5126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.061507][ T5126] usb 1-1: Product: syz
[  304.061617][ T5126] usb 1-1: Manufacturer: syz
[  304.061876][ T5126] usb 1-1: SerialNumber: syz
[  304.133452][ T5132] usb 2-1: unable to get BOS descriptor or descriptor too short
[  304.154989][ T5126] usb 1-1: config 0 descriptor??
[  304.218989][ T5126] sierra 1-1:0.0: Sierra USB modem converter detected
[  304.271072][ T5132] usb 2-1: unable to read config index 0 descriptor/start: -71
[  304.279249][ T5132] usb 2-1: can't read configurations, error -71
[  304.552902][ T5126] usb 1-1: Sierra USB modem converter now attached to ttyUSB0
[  304.612488][ T5126] usb 1-1: USB disconnect, device number 8
[  304.685228][ T5126] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  304.695410][ T5126] sierra 1-1:0.0: device disconnected
[  304.938346][ T5904] loop3: detected capacity change from 0 to 4096
[  304.990692][ T5904] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  305.481428][ T5917] loop2: detected capacity change from 0 to 512
[  305.509405][ T5917] EXT4-fs: Ignoring removed mblk_io_submit option
[  305.565627][ T5917] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  305.711670][ T5917] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz-executor.2: attempt to clear invalid blocks 2 len 1
[  305.733764][ T5917] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  305.748989][ T5917] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 0)
[  305.797473][ T5917] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 1)
[  305.830668][ T5917] EXT4-fs (loop2): 1 truncate cleaned up
[  305.837068][ T5917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.000776][ T5917] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'.
[  306.012803][ T5917] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  306.203605][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  306.667549][ T5077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.263524][   T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  307.552103][ T5132] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  307.685330][ T5160] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  307.853356][   T25] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  307.863015][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.871279][   T25] usb 4-1: Product: syz
[  307.876726][   T25] usb 4-1: Manufacturer: syz
[  307.881608][   T25] usb 4-1: SerialNumber: syz
[  307.934125][ T5132] usb 3-1: config 0 has an invalid interface number: 217 but max is 2
[  307.942813][ T5132] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  307.953308][ T5132] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  307.957200][   T25] usb 4-1: config 0 descriptor??
[  307.962744][ T5132] usb 3-1: config 0 has no interface number 1
[  307.982672][ T5160] usb 1-1: Using ep0 maxpacket: 32
[  308.036079][   T25] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 005
[  308.152542][ T5132] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=16.fc
[  308.163344][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.163482][ T5132] usb 3-1: Product: syz
[  308.163585][ T5132] usb 3-1: Manufacturer: syz
[  308.163689][ T5132] usb 3-1: SerialNumber: syz
[  308.206167][ T5132] usb 3-1: config 0 descriptor??
[  308.232385][ T5160] usb 1-1: unable to get BOS descriptor or descriptor too short
[  308.245381][  T780] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  308.278567][ T5132] usb_ehset_test 3-1:0.217: probe with driver usb_ehset_test failed with error -32
[  308.312543][ T5160] usb 1-1: unable to read config index 0 descriptor/start: -71
[  308.314864][ T5132] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32
[  308.320480][ T5160] usb 1-1: can't read configurations, error -71
[  308.492781][   T25]  (null): failure reading functionality
[  308.518395][ T5135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.526887][ T5135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.545063][ T5949] loop2: detected capacity change from 0 to 256
[  308.550415][   T25] i2c i2c-1: failure reading functionality
[  308.578734][   T25] i2c i2c-1: connected i2c-tiny-usb device
[  308.620615][ T4198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.629632][ T4198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.649054][   T25] usb 4-1: USB disconnect, device number 5
[  308.667074][  T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  308.677543][  T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  308.689773][  T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  308.699911][  T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  308.710109][  T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  308.793706][ T5949] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  308.895936][ T5949] 9pnet_fd: Insufficient options for proto=fd
[  308.922578][  T780] usb 2-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5
[  308.932096][  T780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.943620][  T780] usb 2-1: Product: syz
[  308.949116][  T780] usb 2-1: Manufacturer: syz
[  308.954077][  T780] usb 2-1: SerialNumber: syz
[  308.980614][ T5132] usb 3-1: USB disconnect, device number 5
[  308.993085][  T780] usb 2-1: config 0 descriptor??
[  309.070422][  T780] sierra 2-1:0.0: Sierra USB modem converter detected
[  309.329907][  T780] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[  309.378871][ T3967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.414461][  T780] usb 2-1: USB disconnect, device number 8
[  309.471011][  T780] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  309.481030][  T780] sierra 2-1:0.0: device disconnected
[  309.537933][ T3967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.698351][ T3967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.728586][ T5963] loop0: detected capacity change from 0 to 4096
[  309.905685][ T3967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.908158][ T5963] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  310.442562][ T3967] bridge_slave_1: left allmulticast mode
[  310.448545][ T3967] bridge_slave_1: left promiscuous mode
[  310.455403][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.494815][   T29] kauditd_printk_skb: 29 callbacks suppressed
[  310.494901][   T29] audit: type=1800 audit(1717228973.680:44): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=33 res=0 errno=0
[  310.527445][ T3967] bridge_slave_0: left allmulticast mode
[  310.533736][ T3967] bridge_slave_0: left promiscuous mode
[  310.540305][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.197882][ T3967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  311.254744][ T3967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  311.307320][ T3967] bond0 (unregistering): Released all slaves
[  311.349693][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  312.560916][ T5995] loop3: detected capacity change from 0 to 128
[  312.645714][ T5995] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  312.783970][ T5995] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  313.295374][ T3967] hsr_slave_0: left promiscuous mode
[  313.363481][ T3967] hsr_slave_1: left promiscuous mode
[  313.393918][ T3967] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  313.405726][ T3967] batman_adv: batadv0: Removing interface: batadv_slave_0
[  313.471457][ T3967] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  313.479404][ T3967] batman_adv: batadv0: Removing interface: batadv_slave_1
[  313.531276][ T3967] veth1_macvtap: left promiscuous mode
[  313.537385][ T3967] veth0_macvtap: left promiscuous mode
[  313.543617][ T3967] veth1_vlan: left promiscuous mode
[  313.553224][ T3967] veth0_vlan: left promiscuous mode
[  313.575051][ T5160] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  313.796882][   T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  313.829067][ T5082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  313.845781][ T5082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  313.876816][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  313.924691][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  314.085411][ T5082] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  314.097777][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  314.118926][ T5160] usb 1-1: Using ep0 maxpacket: 32
[  314.375668][ T6013] loop3: detected capacity change from 0 to 4096
[  314.407852][ T6013] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  314.542536][ T3967] team0 (unregistering): Port device team_slave_1 removed
[  314.567643][   T25] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  314.580457][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.589916][   T25] usb 3-1: Product: syz
[  314.594477][   T25] usb 3-1: Manufacturer: syz
[  314.599308][   T25] usb 3-1: SerialNumber: syz
[  314.612569][ T3967] team0 (unregistering): Port device team_slave_0 removed
[  314.624107][   T25] usb 3-1: config 0 descriptor??
[  314.740704][   T25] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 006
[  314.745075][  T780] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  314.957808][   T29] audit: type=1800 audit(1717228978.130:45): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=33 res=0 errno=0
[  315.239156][ T5160] usb 1-1: unable to get BOS descriptor or descriptor too short
[  315.333057][   T25]  (null): failure reading functionality
[  315.353437][ T5160] usb 1-1: unable to read config index 0 descriptor/start: -71
[  315.361515][ T5160] usb 1-1: can't read configurations, error -71
[  315.363296][  T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  315.377719][   T25] i2c i2c-1: failure reading functionality
[  315.384218][  T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  315.393478][   T25] i2c i2c-1: connected i2c-tiny-usb device
[  315.398524][  T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  315.412159][  T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  315.422347][  T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  315.461391][   T25] usb 3-1: USB disconnect, device number 6
[  315.624443][  T780] usb 2-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5
[  315.633937][  T780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.642321][  T780] usb 2-1: Product: syz
[  315.646711][  T780] usb 2-1: Manufacturer: syz
[  315.651520][  T780] usb 2-1: SerialNumber: syz
[  315.739892][  T780] usb 2-1: config 0 descriptor??
[  315.808641][  T780] sierra 2-1:0.0: Sierra USB modem converter detected
[  315.923188][ T6007] chnl_net:caif_netlink_parms(): no params data found
[  316.110581][  T780] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[  316.159848][  T780] usb 2-1: USB disconnect, device number 9
[  316.175615][ T5082] Bluetooth: hci1: command tx timeout
[  316.184025][  T780] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  316.195852][  T780] sierra 2-1:0.0: device disconnected
[  316.570980][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  316.948513][ T6036] fuse: Bad value for 'fd'
[  317.022415][   T29] audit: type=1804 audit(1717228980.190:46): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1599771042/syzkaller.QRT1YF/53/file0" dev="sda1" ino=1940 res=1 errno=0
[  317.331122][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.344306][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.352675][ T6007] bridge_slave_0: entered allmulticast mode
[  317.362022][ T6007] bridge_slave_0: entered promiscuous mode
[  317.471063][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.479057][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.486942][ T6007] bridge_slave_1: entered allmulticast mode
[  317.496198][ T6007] bridge_slave_1: entered promiscuous mode
[  317.787459][ T6007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.873130][ T6007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.184710][ T6007] team0: Port device team_slave_0 added
[  318.251614][ T5082] Bluetooth: hci1: command tx timeout
[  318.276051][ T6007] team0: Port device team_slave_1 added
[  318.309377][ T6054] loop0: detected capacity change from 0 to 512
[  318.414348][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.421532][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.448285][ T6007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.575699][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.583054][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.608048][ T6054] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  318.609227][ T6007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.616753][ T6054] UDF-fs: Scanning with blocksize 512 failed
[  318.700819][ T6054] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  318.708939][ T6054] UDF-fs: Scanning with blocksize 1024 failed
[  318.722562][ T5160] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  318.778580][ T6054] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  318.786577][ T6054] UDF-fs: Scanning with blocksize 2048 failed
[  318.877239][ T6054] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  318.998028][   T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  319.012077][ T5160] usb 4-1: Using ep0 maxpacket: 32
[  319.088952][ T6007] hsr_slave_0: entered promiscuous mode
[  319.110968][ T6007] hsr_slave_1: entered promiscuous mode
[  319.139174][ T6054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  319.145269][ T6007] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  319.156427][ T6007] Cannot create hsr debugfs directory
[  319.313360][ T5160] usb 4-1: unable to get BOS descriptor or descriptor too short
[  319.371975][  T780] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  319.402966][ T5160] usb 4-1: unable to read config index 0 descriptor/start: -71
[  319.410873][ T5160] usb 4-1: can't read configurations, error -71
[  319.512980][ T5130] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  319.694917][   T25] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  319.704559][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.712998][   T25] usb 2-1: Product: syz
[  319.717396][   T25] usb 2-1: Manufacturer: syz
[  319.722995][   T25] usb 2-1: SerialNumber: syz
[  319.746088][  T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  319.753811][   T25] usb 2-1: config 0 descriptor??
[  319.757428][  T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  319.773317][  T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  319.783370][  T780] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  319.797823][  T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  319.804811][   T25] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 010
[  319.808854][  T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  319.982692][ T5130] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  319.990988][ T5130] usb 1-1: config 0 has no interface number 0
[  320.001457][ T5130] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.016741][ T5130] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.027771][ T5130] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  320.037416][ T5130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.053027][ T5130] usb 1-1: config 0 descriptor??
[  320.059490][  T780] usb 3-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5
[  320.069526][  T780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.078157][  T780] usb 3-1: Product: syz
[  320.082935][  T780] usb 3-1: Manufacturer: syz
[  320.087777][  T780] usb 3-1: SerialNumber: syz
[  320.116386][  T780] usb 3-1: config 0 descriptor??
[  320.171462][  T780] sierra 3-1:0.0: Sierra USB modem converter detected
[  320.249866][   T25]  (null): failure reading functionality
[  320.298871][   T25] i2c i2c-1: failure reading functionality
[  320.325485][ T5082] Bluetooth: hci1: command tx timeout
[  320.337740][ T6007] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  320.359069][   T25] i2c i2c-1: connected i2c-tiny-usb device
[  320.378202][   T25] usb 2-1: USB disconnect, device number 10
[  320.380857][ T6007] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  320.421967][  T780] usb 3-1: Sierra USB modem converter now attached to ttyUSB0
[  320.450606][  T780] usb 3-1: USB disconnect, device number 7
[  320.465243][ T6007] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  320.487564][  T780] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  320.498258][  T780] sierra 3-1:0.0: device disconnected
[  320.502184][ T6007] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  320.724187][ T5130] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0004/input/input11
[  320.943689][ T5130] holtek_kbd 0003:04D9:A055.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1
[  321.426242][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  321.499767][ T6076] fuse: Bad value for 'fd'
[  321.570024][ T6007] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.623384][   T29] audit: type=1804 audit(1717228984.730:47): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2176608962/syzkaller.j1JaaC/14/file0" dev="sda1" ino=1961 res=1 errno=0
[  321.766761][ T6007] 8021q: adding VLAN 0 to HW filter on device team0
[  321.831599][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.839446][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.954473][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.962330][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.073870][  T780] usb 1-1: reset high-speed USB device number 13 using dummy_hcd
[  322.418860][ T5082] Bluetooth: hci1: command tx timeout
[  322.960914][    T8] usb 1-1: USB disconnect, device number 13
[  323.284200][ T6100] loop0: detected capacity change from 0 to 256
[  323.412602][  T780] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  323.436404][ T6100] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  323.450335][ T6100] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  323.606652][   T29] audit: type=1800 audit(1717228986.750:48): pid=6100 uid=255 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=1048603 res=0 errno=0
[  323.669013][  T780] usb 4-1: Using ep0 maxpacket: 32
[  323.862507][   T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  323.944626][ T6007] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.956287][  T780] usb 4-1: unable to get BOS descriptor or descriptor too short
[  324.059057][  T780] usb 4-1: unable to read config index 0 descriptor/start: -71
[  324.067280][  T780] usb 4-1: can't read configurations, error -71
[  324.264438][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  324.275169][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  324.286359][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  324.296501][   T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  324.310622][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  324.321954][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  324.534667][   T25] usb 2-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5
[  324.544250][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.553640][   T25] usb 2-1: Product: syz
[  324.558149][   T25] usb 2-1: Manufacturer: syz
[  324.563286][   T25] usb 2-1: SerialNumber: syz
[  324.646697][   T25] usb 2-1: config 0 descriptor??
[  324.657021][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  324.738217][   T25] sierra 2-1:0.0: Sierra USB modem converter detected
[  324.948047][   T25] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[  324.995705][   T25] usb 2-1: USB disconnect, device number 11
[  325.084040][   T25] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  325.094742][   T25] sierra 2-1:0.0: device disconnected
[  325.851464][ T6007] veth0_vlan: entered promiscuous mode
[  325.912126][  T780] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  325.931347][ T6007] veth1_vlan: entered promiscuous mode
[  325.980151][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  325.993099][ T6137] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  326.192479][  T780] usb 3-1: Using ep0 maxpacket: 8
[  326.231366][ T6141] loop0: detected capacity change from 0 to 256
[  326.321945][ T6141] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  326.335413][ T6141] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  326.358151][  T780] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.504794][   T29] audit: type=1800 audit(1717228989.630:49): pid=6141 uid=255 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=1048605 res=0 errno=0
[  326.544651][  T780] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28
[  326.557385][  T780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.567104][  T780] usb 3-1: Product: syz
[  326.571573][  T780] usb 3-1: Manufacturer: syz
[  326.576784][  T780] usb 3-1: SerialNumber: syz
[  326.644157][  T780] usb 3-1: config 0 descriptor??
[  326.971676][  T780] usb 3-1: Found UVC 0.00 device syz (8086:0b03)
[  326.978752][  T780] usb 3-1: No valid video chain found.
[  327.126874][ T6007] veth0_macvtap: entered promiscuous mode
[  327.170777][   T25] usb 3-1: USB disconnect, device number 8
[  327.234939][ T6007] veth1_macvtap: entered promiscuous mode
[  327.399469][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.410437][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.420879][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.431768][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.441999][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.452756][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.462965][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.477866][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.482343][ T5160] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  327.494292][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.552215][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.563496][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.573690][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.590300][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.606149][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.616992][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.627318][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.638162][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.653574][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.664807][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  327.713264][ T6007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.722600][ T6007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.731856][ T6007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.740886][ T6007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.813132][ T5160] usb 4-1: Using ep0 maxpacket: 32
[  327.924434][ T6158] netlink: 556 bytes leftover after parsing attributes in process `syz-executor.0'.
[  328.223551][ T5160] usb 4-1: unable to get BOS descriptor or descriptor too short
[  328.309334][ T5160] usb 4-1: unable to read config index 0 descriptor/start: -71
[  328.317538][ T5160] usb 4-1: can't read configurations, error -71
[  328.645258][   T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  329.018860][ T6164] loop1: detected capacity change from 0 to 32768
[  329.037244][ T6164] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6164)
[  329.093073][   T25] usb 1-1: unable to read config index 0 descriptor/start: -71
[  329.100970][   T25] usb 1-1: can't read configurations, error -71
[  329.160539][ T6164] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  329.171438][ T6164] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[  329.182973][ T6164] BTRFS info (device loop1): using free-space-tree
[  331.957685][ T5091] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  334.256276][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  334.876516][ T6232] Zero length message leads to an empty skb
[  335.172134][    T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  335.452055][   T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  335.933206][ T3967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.941282][ T3967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.949522][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  335.959592][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  335.974960][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  335.986257][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  335.996294][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  336.006378][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  336.105947][ T6242] loop1: detected capacity change from 0 to 32768
[  336.128915][ T6242] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6242)
[  336.165496][ T6242] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  336.180840][ T6242] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[  336.192463][ T6242] BTRFS info (device loop1): using free-space-tree
[  336.200165][    T8] usb 4-1: Using ep0 maxpacket: 32
[  336.220336][ T3967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.229060][ T3967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.296184][   T25] usb 3-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5
[  336.305664][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.315120][   T25] usb 3-1: Product: syz
[  336.319536][   T25] usb 3-1: Manufacturer: syz
[  336.324480][   T25] usb 3-1: SerialNumber: syz
[  336.434512][   T25] usb 3-1: config 0 descriptor??
[  336.581418][   T25] sierra 3-1:0.0: Sierra USB modem converter detected
[  336.801869][   T25] usb 3-1: Sierra USB modem converter now attached to ttyUSB0
[  336.862476][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  336.918102][   T25] usb 3-1: Sierra USB modem converter now attached to ttyUSB1
[  336.973170][    T8] usb 4-1: unable to read config index 0 descriptor/start: -71
[  336.981450][    T8] usb 4-1: can't read configurations, error -71
[  337.063990][   T25] usb 3-1: USB disconnect, device number 9
[  337.149717][ T3758] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.215699][   T25] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  337.293953][   T25] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  337.310728][   T25] sierra 3-1:0.0: device disconnected
[  337.334686][ T5091] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  337.337395][ T3758] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.863070][ T3758] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.477725][ T3758] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.565595][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  338.977082][ T3758] bridge_slave_1: left allmulticast mode
[  338.983285][ T3758] bridge_slave_1: left promiscuous mode
[  338.989853][ T3758] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.013329][ T5080] Bluetooth: hci3: command 0x0406 tx timeout
[  339.019911][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  339.027854][ T5082] Bluetooth: hci4: command 0x0406 tx timeout
[  339.134229][ T3758] bridge_slave_0: left allmulticast mode
[  339.140318][ T3758] bridge_slave_0: left promiscuous mode
[  339.154695][ T3758] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.053042][ T3758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  340.118731][ T3758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  340.176757][ T3758] bond0 (unregistering): Released all slaves
[  342.032028][    T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  342.050192][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[  342.058442][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
[  342.083450][ T3758] hsr_slave_0: left promiscuous mode
[  342.137852][ T3758] hsr_slave_1: left promiscuous mode
[  342.152356][ T6290] loop0: detected capacity change from 0 to 32768
[  342.170402][ T6290] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6290)
[  342.198350][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  342.206446][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_0
[  342.215189][ T6290] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  342.229558][ T6290] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[  342.242346][ T6290] BTRFS info (device loop0): using free-space-tree
[  342.253644][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  342.261312][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_1
[  342.268830][ T5130] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  342.303858][ T3758] veth1_macvtap: left promiscuous mode
[  342.309701][ T3758] veth0_macvtap: left promiscuous mode
[  342.316054][ T3758] veth1_vlan: left promiscuous mode
[  342.327385][ T3758] veth0_vlan: left promiscuous mode
[  342.359347][ T5082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  342.370741][ T5082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  342.391355][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  342.462057][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  342.506504][ T5082] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  342.520957][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  342.703437][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  342.716364][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  342.729267][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  342.742925][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  342.754477][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  342.764679][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  342.813147][ T5130] usb 4-1: Using ep0 maxpacket: 32
[  343.015706][    T8] usb 3-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5
[  343.025463][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.033887][    T8] usb 3-1: Product: syz
[  343.042880][    T8] usb 3-1: Manufacturer: syz
[  343.047743][    T8] usb 3-1: SerialNumber: syz
[  343.094161][    T8] usb 3-1: config 0 descriptor??
[  343.163638][    T8] sierra 3-1:0.0: Sierra USB modem converter detected
[  343.393360][ T5081] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  343.495125][ T3758] team0 (unregistering): Port device team_slave_1 removed
[  343.670456][ T3758] team0 (unregistering): Port device team_slave_0 removed
[  344.316430][    T8] usb 3-1: Sierra USB modem converter now attached to ttyUSB0
[  344.478513][    T8] usb 3-1: Sierra USB modem converter now attached to ttyUSB1
[  344.503294][    T8] usb 3-1: USB disconnect, device number 10
[  344.518824][    T8] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  344.534647][    T8] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  344.547012][    T8] sierra 3-1:0.0: device disconnected
[  344.579500][ T5130] usb 4-1: unable to get BOS descriptor or descriptor too short
[  344.656636][ T5082] Bluetooth: hci1: command tx timeout
[  344.696029][ T5130] usb 4-1: unable to read config index 0 descriptor/start: -71
[  344.705015][ T5130] usb 4-1: can't read configurations, error -71
[  344.959538][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  345.374274][ T6327] loop1: detected capacity change from 0 to 1024
[  345.484978][ T2989] hfsplus: b-tree write err: -5, ino 4
[  345.520345][ T6305] chnl_net:caif_netlink_parms(): no params data found
[  346.722005][ T5082] Bluetooth: hci1: command tx timeout
[  346.805169][ T6343] loop1: detected capacity change from 0 to 4096
[  346.977986][ T6353] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  347.035463][ T6343] dccp_invalid_packet: P.Data Offset(142) too large
[  347.198527][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.206361][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.214205][ T6305] bridge_slave_0: entered allmulticast mode
[  347.223521][ T6305] bridge_slave_0: entered promiscuous mode
[  347.414556][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.422375][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.430195][ T6305] bridge_slave_1: entered allmulticast mode
[  347.443971][ T6305] bridge_slave_1: entered promiscuous mode
[  347.787599][ T6305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.879658][ T6305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.138428][ T6305] team0: Port device team_slave_0 added
[  348.189763][ T6305] team0: Port device team_slave_1 added
[  348.472863][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.480047][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.506503][ T6305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.606629][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.614164][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.641360][ T6305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.810041][ T5082] Bluetooth: hci1: command tx timeout
[  349.012881][ T6305] hsr_slave_0: entered promiscuous mode
[  349.046628][ T6305] hsr_slave_1: entered promiscuous mode
[  349.098839][ T6305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  349.107000][ T6305] Cannot create hsr debugfs directory
[  350.709112][ T6305] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  350.756309][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  350.788930][ T6305] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  350.815456][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  350.845749][ T6305] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  350.882203][ T5082] Bluetooth: hci1: command tx timeout
[  350.953981][ T6305] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  352.309161][ T6305] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.506526][ T6305] 8021q: adding VLAN 0 to HW filter on device team0
[  352.617224][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.625060][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.772513][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.780208][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.536547][ T6428] loop2: detected capacity change from 0 to 512
[  353.642686][ T6428] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino
[  353.762400][ T6428] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  353.812339][ T6428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.908959][ T6428] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #20: comm syz-executor.2: Siphash requires key
[  353.921002][ T6428] =====================================================
[  353.928450][ T6428] BUG: KMSAN: uninit-value in ext4_inlinedir_to_tree+0xde2/0x15a0
[  353.936979][ T6428]  ext4_inlinedir_to_tree+0xde2/0x15a0
[  353.942794][ T6428]  ext4_htree_fill_tree+0x1941/0x1cd0
[  353.948384][ T6428]  ext4_readdir+0x4bbf/0x5b00
[  353.953423][ T6428]  iterate_dir+0x688/0x870
2024/06/01 08:03:37 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  353.958065][ T6428]  ovl_dir_read+0x14d/0x840
[  353.963055][ T6428]  ovl_check_d_type_supported+0x6a/0x110
[  353.968921][ T6428]  ovl_get_workdir+0x9c8/0x2780
[  353.974474][ T6428]  ovl_fill_super+0x153c/0x62a0
[  353.979499][ T6428]  get_tree_nodev+0x180/0x340
[  353.984539][ T6428]  ovl_get_tree+0x34/0x40
[  353.989042][ T6428]  vfs_get_tree+0xa7/0x570
[  353.997994][ T6428]  do_new_mount+0x71f/0x15e0
[  354.004042][ T6428]  path_mount+0x742/0x1f20
[  354.008747][ T6428]  __se_sys_mount+0x725/0x810
[  354.014096][ T6428]  __x64_sys_mount+0xe4/0x150
[  354.018976][ T6428]  x64_sys_call+0x2bf4/0x3b50
[  354.026104][ T6428]  do_syscall_64+0xcf/0x1e0
[  354.030850][ T6428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.037290][ T6428] 
[  354.039708][ T6428] Local variable hinfo created at:
[  354.045163][ T6428]  ext4_htree_fill_tree+0x52/0x1cd0
[  354.050609][ T6428]  ext4_readdir+0x4bbf/0x5b00
[  354.055766][ T6428] 
[  354.058202][ T6428] CPU: 0 PID: 6428 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0
[  354.068508][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  354.078886][ T6428] =====================================================
[  354.086278][ T6428] Disabling lock debugging due to kernel taint
[  354.092675][ T6428] Kernel panic - not syncing: kmsan.panic set ...
[  354.099212][ T6428] CPU: 0 PID: 6428 Comm: syz-executor.2 Tainted: G    B              6.9.0-syzkaller-02707-g614da38e2f7a #0
[  354.110870][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  354.121123][ T6428] Call Trace:
[  354.124546][ T6428]  <TASK>
[  354.127582][ T6428]  dump_stack_lvl+0x216/0x2d0
[  354.132489][ T6428]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  354.138521][ T6428]  dump_stack+0x1e/0x30
[  354.142895][ T6428]  panic+0x4e2/0xcd0
[  354.147001][ T6428]  ? kmsan_get_metadata+0xf1/0x1d0
[  354.152325][ T6428]  kmsan_report+0x2d5/0x2e0
[  354.157023][ T6428]  ? __msan_warning+0x95/0x120
[  354.161951][ T6428]  ? ext4_inlinedir_to_tree+0xde2/0x15a0
[  354.167802][ T6428]  ? ext4_htree_fill_tree+0x1941/0x1cd0
[  354.173724][ T6428]  ? ext4_readdir+0x4bbf/0x5b00
[  354.178756][ T6428]  ? iterate_dir+0x688/0x870
[  354.183542][ T6428]  ? ovl_dir_read+0x14d/0x840
[  354.188429][ T6428]  ? ovl_check_d_type_supported+0x6a/0x110
[  354.194466][ T6428]  ? ovl_get_workdir+0x9c8/0x2780
[  354.199678][ T6428]  ? ovl_fill_super+0x153c/0x62a0
[  354.204969][ T6428]  ? get_tree_nodev+0x180/0x340
[  354.210071][ T6428]  ? ovl_get_tree+0x34/0x40
[  354.214759][ T6428]  ? vfs_get_tree+0xa7/0x570
[  354.219667][ T6428]  ? do_new_mount+0x71f/0x15e0
[  354.224644][ T6428]  ? path_mount+0x742/0x1f20
[  354.229474][ T6428]  ? __se_sys_mount+0x725/0x810
[  354.234544][ T6428]  ? __x64_sys_mount+0xe4/0x150
[  354.239616][ T6428]  ? x64_sys_call+0x2bf4/0x3b50
[  354.244685][ T6428]  ? do_syscall_64+0xcf/0x1e0
[  354.249673][ T6428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.256027][ T6428]  ? filter_irq_stacks+0x60/0x1a0
[  354.261305][ T6428]  ? stack_depot_save_flags+0x2c/0x6e0
[  354.266978][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.272376][ T6428]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[  354.279560][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.285145][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.290541][ T6428]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  354.296550][ T6428]  __msan_warning+0x95/0x120
[  354.301322][ T6428]  ext4_inlinedir_to_tree+0xde2/0x15a0
[  354.307009][ T6428]  ? sget+0x90e/0xe50
[  354.311196][ T6428]  ? ovl_get_tree+0x34/0x40
[  354.315885][ T6428]  ? vfs_get_tree+0xa7/0x570
[  354.320701][ T6428]  ? do_new_mount+0x71f/0x15e0
[  354.325821][ T6428]  ? path_mount+0x742/0x1f20
[  354.330655][ T6428]  ? __se_sys_mount+0x725/0x810
[  354.335720][ T6428]  ? __x64_sys_mount+0xe4/0x150
[  354.340875][ T6428]  ? x64_sys_call+0x2bf4/0x3b50
[  354.345945][ T6428]  ? do_syscall_64+0xcf/0x1e0
[  354.350838][ T6428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.357143][ T6428]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  354.363324][ T6428]  ? kfree+0x18f/0xa60
[  354.367552][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.373021][ T6428]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  354.379041][ T6428]  ? ext4_htree_fill_tree+0x18eb/0x1cd0
[  354.384845][ T6428]  ext4_htree_fill_tree+0x1941/0x1cd0
[  354.390435][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.395832][ T6428]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[  354.402429][ T6428]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  354.408758][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.414167][ T6428]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  354.420252][ T6428]  ext4_readdir+0x4bbf/0x5b00
[  354.425145][ T6428]  ? aa_file_perm+0x3e4/0x17a0
[  354.430116][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.435523][ T6428]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  354.441613][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.446999][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.452397][ T6428]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[  354.459001][ T6428]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  354.465064][ T6428]  ? __pfx_ext4_readdir+0x10/0x10
[  354.470290][ T6428]  iterate_dir+0x688/0x870
[  354.474934][ T6428]  ovl_dir_read+0x14d/0x840
[  354.479666][ T6428]  ? kmsan_internal_memmove_metadata+0x91/0x230
[  354.486172][ T6428]  ovl_check_d_type_supported+0x6a/0x110
[  354.492391][ T6428]  ? __pfx_ovl_check_d_type+0x10/0x10
[  354.498013][ T6428]  ovl_get_workdir+0x9c8/0x2780
[  354.503060][ T6428]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[  354.509666][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.515063][ T6428]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[  354.521544][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.526947][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.532359][ T6428]  ovl_fill_super+0x153c/0x62a0
[  354.537406][ T6428]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[  354.543891][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.549285][ T6428]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  354.555308][ T6428]  ? sget_fc+0xf44/0x1360
[  354.559833][ T6428]  ? __pfx_set_anon_super_fc+0x10/0x10
[  354.565628][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.571030][ T6428]  get_tree_nodev+0x180/0x340
[  354.575922][ T6428]  ? __pfx_ovl_fill_super+0x10/0x10
[  354.581303][ T6428]  ? __pfx_ovl_get_tree+0x10/0x10
[  354.586599][ T6428]  ovl_get_tree+0x34/0x40
[  354.591114][ T6428]  vfs_get_tree+0xa7/0x570
[  354.595926][ T6428]  ? mount_capable+0xe1/0x120
[  354.600809][ T6428]  do_new_mount+0x71f/0x15e0
[  354.605625][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.611046][ T6428]  path_mount+0x742/0x1f20
[  354.615676][ T6428]  ? user_path_at_empty+0x325/0x3a0
[  354.621100][ T6428]  __se_sys_mount+0x725/0x810
[  354.626006][ T6428]  ? kmsan_get_metadata+0x146/0x1d0
[  354.631410][ T6428]  __x64_sys_mount+0xe4/0x150
[  354.636320][ T6428]  x64_sys_call+0x2bf4/0x3b50
[  354.641212][ T6428]  do_syscall_64+0xcf/0x1e0
[  354.645927][ T6428]  ? clear_bhb_loop+0x25/0x80
[  354.650846][ T6428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.656989][ T6428] RIP: 0033:0x7fa44427cee9
[  354.661553][ T6428] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  354.681457][ T6428] RSP: 002b:00007fa4450b60c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  354.690066][ T6428] RAX: ffffffffffffffda RBX: 00007fa4443b3fa0 RCX: 00007fa44427cee9
[  354.698218][ T6428] RDX: 0000000020000340 RSI: 00000000200000c0 RDI: 0000000000000000
[  354.706440][ T6428] RBP: 00007fa4442c947f R08: 0000000020000280 R09: 0000000000000000
[  354.714577][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  354.722699][ T6428] R13: 000000000000000b R14: 00007fa4443b3fa0 R15: 00007ffd133c0fb8
[  354.730849][ T6428]  </TASK>
[  354.734396][ T6428] Kernel Offset: disabled
[  354.738799][ T6428] Rebooting in 86400 seconds..