last executing test programs:

40.284011723s ago: executing program 1 (id=2):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000100)=0x8000, 0x35)
sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a12", 0x55, 0x12, 0x0, 0x0)

40.024290739s ago: executing program 1 (id=6):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffc, 0x0, 0x1})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)

39.251483417s ago: executing program 1 (id=12):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@errors_remount}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

37.45563764s ago: executing program 1 (id=13):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000001500)={@my=0x1})
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000001240)={@my=0x0})
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
write$cgroup_subtree(r3, 0x0, 0xfe3a)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x4f}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0)

36.648567509s ago: executing program 3 (id=15):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280), 0x2, 0x29f, &(0x7f0000000b00)="$eJzs3c1rI2UcB/Df5GVr3HVZ9eJFEUREC2U9CIIXvbiwIIuICLqwIqsIylao7bXx5MWDd5WevBTxZvUoXooX/4CqPdSLl+LBoqBIZF7SJmlio0lmZOfzgSYzk+fJ8xvI95kJdDIB1NaliHg6IpoRsRwR7YhIBhs8mP9dKla3Ors3Inq9F35Jsnb5eq7f73xEdCPiyYhW/7WNnVcOftu78sgH6+2HP915uVPW/g06PNh/7uiTa+9/cfXxjUax7ULxPLgf85SM2dZKIu5ZxGD/E0mr6gqYzuffp7m/NyIeyvLfjkYR2Q/Xzn3Tjsc+Ht/v3FG5dQKL0Ou102NgtwfUTiM7B04aKxGRLzcaKyv5OfwPzSTeXl17d/mN1fVbN6ueqYA5SLr59979Z79a+vL8SP5/bub5n8oTC64UWIg0/y8+v/1junzUrLoaoBT3509p/pdf3Xw04i/5h5o5yb/jP9SN/EN9yT/cBiZlN92+NLmb/EN9DeX/zaqrAco07fG/W2JNwJy0+wvjEzz7+f/vxX8Q/vcSgbJdzB59/4f6Gsl/cT1ucbXqdCf9V16/+dbiCgTm7Xp/YTD/AEC99JYqvgAZqEzV8w8AAAAAAAAAAAAAAAAAAHDaVmf3Rv+vrDG//Sji8JmIaA2Pn9+2oJndjzjijuzxzl+TtNmxJO82k+sz9p/1fT+b89XX1/7hfg/jXPxpvuNP0LtrwgvfPbCYAd8bXu1Mard5K6KbNr7cap3+/CfF5+9ME9//7jM6tl+bboB5SUbWn3qp3PFzxz9MHH9uVzH+iat7EV+n88/lkfkv+z3URtyXtRo//1wY2pN/5TgO7/wxW/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU5+8AAAD//68tdo8=")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0)
utimes(&(0x7f0000000580)='./file1\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./bus\x00', 0x900442, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f72746e3d312c696f636861727365743d6d616363656e746575726f2c757466383d312c757466383d312c696f636861727365743d63833934392c6e66732c756e695f786c6174653d302c756e695f786c6174653d302c757466383d302c726f6469722c757466383d312c757466383d302c73686f72746e616d653d6d697865642c696f636861727365743d6d6163677265656b2c00"/166], 0x0, 0x37c, &(0x7f0000000880)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)

36.460104034s ago: executing program 3 (id=17):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ptmx\x00', 0x2, 0x0)
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000400)=0x6)

36.340260937s ago: executing program 3 (id=19):
mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)

36.240130629s ago: executing program 3 (id=21):
creat(&(0x7f0000000080)='./bus\x00', 0x84)
rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00')
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, 0x0)
write$FUSE_BMAP(r0, &(0x7f00000026c0)={0x18, 0x7b3620c31cc0b28a}, 0x18)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x19, 0x5, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]})
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00')
fsync(r1)

36.037195194s ago: executing program 1 (id=23):
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070001040000000000040002000600030000000903000038000104ce0000000e0000000b0020"], 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xff, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x81, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

35.461175487s ago: executing program 32 (id=23):
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070001040000000000040002000600030000000903000038000104ce0000000e0000000b0020"], 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xff, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x81, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

35.33337235s ago: executing program 3 (id=26):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x5}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x0, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x8, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0xc, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x4000009, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x400, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc5, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800)

32.473760429s ago: executing program 3 (id=30):
socket(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000028c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,gid=', @ANYRES8, @ANYBLOB=',namecase=1,umask=00000000000000000000360,namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1535, &(0x7f0000001380)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x40d, &(0x7f0000000080)={[{@nogrpid}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nobh}]}, 0x3, 0x442, &(0x7f0000000300)="$eJzs28tvG8UfAPDvrpP219cvBpVHH0CgICIeSZOW0gMXEEgggYQEh3IMiVuFug1qgkSrCAKqyhFV4o44IuAf4AQXBJyQuILEEVWqUC4tnIzW9qa2a6dJ6sQl/nykTWZ2x5n5enc2szN2AH1rOPuRROyOiN8iYqiWbS4wXPt1fWlh6u+lhakkKpU3/kqq5a4tLUzlRfPX7cozAxHpxSQOtKl37vyF05PlculcPT82f+bdsbnzF56eOTN5qnSqdHbi+PGjR8afPTbxTFfizOK6tv+D2YP7Xn7r8mtTJy6//dPXSR5/SxxdMrzSwccqlS5X11t7GtLJQA8bwpoUat00Bqv9fygKkS4fG4qXPu5p44ANValUKvd2PrxYAbawJHrdAqA38n/02fNvvm3S0OOOcPX5iHjlm2r81+tb7cjA8pPQYMvzbTcNR8SJxX8+z7bYmHkIAIAm32Xjn6fajf/SaJwX+n99DaUYEXdFxN0RcSwi9kbEPRHVsvdFxP1rrL91keTm8U96ZV2BrVI2/nuuvrbVPP5bngcvFuq5PdX4B5OTM+XS4fp7MhKD27P8+Ap1fP/ir592OtY4/su2rP58LFhvx5WB7c2vmZ6cn7ydmBtd/Shi/0C7+JPIl3GSiNgXEfvXWcfME18e7HTs1vGvoAvrTJUvIh6vnf/FaIk/l6y8Pjn2vyiXDo/lV8XNfv7l0uud6r+t+LsgO/87217/y/EXk8b12rm113Hp9086PtOs9/rflrzZtO/9yfn5c+MR25JXa41u3D/RUm7iRvks/pFDbeIvptV7XP5OHIiI7CJ+ICIejIiH6m1/OCIeiYhDK8T/4wuPvrP++DdWFv/0ms7/jcS2aN3TPlE4/cO3TZUW1xJ/dv6PVlMj9T2ruf+tpl3ru5oBAADgvyeNiN2RpKPL6TQdHa19hn9v7EzLs3PzT56cfe/sdO07AsUYTPOZrqGG+dDx+mN9LZ/ERFO+XDpSnzf+rLCjmh+dmi1P9zp46HO7OvT/zJ+F2mdfgC3M97Wgf+n/0L/0f+hf+j/0rzb9f0dz9qJbBGxR7Tr3hz1oB7D5Wvp/oVftADafwT30L/0f+pf+D31pbkfc+kvyElsi8cdX3fyDkd4pcUlsRKLXdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+DcAAP//jOPoTA==")
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYBLOB], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000009000000040000000300000000000000", @ANYRES64, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50)

31.665339998s ago: executing program 33 (id=30):
socket(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000028c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,gid=', @ANYRES8, @ANYBLOB=',namecase=1,umask=00000000000000000000360,namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1535, &(0x7f0000001380)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x40d, &(0x7f0000000080)={[{@nogrpid}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nobh}]}, 0x3, 0x442, &(0x7f0000000300)="$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")
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYBLOB], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000009000000040000000300000000000000", @ANYRES64, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50)

8.244176724s ago: executing program 0 (id=110):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f0000000340)='team67\xab\x16\xfb\a\x00\x1f1S\x86sha\xe6e_0\x92l|(\xe9r,\v\x87&\\DZh\x00\x00\x00\x00\xe8H)\xe3\xe7h?\xd8C\x1b\x95\xb4i\xa26\x13/\xbc1\n`\b<b\x04\xcc-\x8ef\x1ag\xa2u\x15:R\xd9\xe6~\xdd', 0x80100, 0x0, 0x401, 0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1\x00', <r6=>0x0})
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10)
bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1fffff9, {0x0, 0x0, 0x0, r9, {0x7}, {0xc}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048054)

6.848248757s ago: executing program 0 (id=117):
close(0x3)

6.760380899s ago: executing program 4 (id=118):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000297ff8208582005109bc10102030109021200010100800009048f0000bf575a00"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb)

6.630488852s ago: executing program 0 (id=120):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0)

5.251065105s ago: executing program 0 (id=129):
mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
symlinkat(&(0x7f0000000480)='./dev\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00')

4.884020483s ago: executing program 0 (id=130):
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x10000, &(0x7f0000000240)={@align=0x20000000000000f3, {0x4, 0x9, 0xa8c, 0x5}}, 0x1, 0x0, 0x0})
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070001040000000000040002000600030000000903000038000104ce0000000e0000000b0020"], 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xff, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x81, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.299963897s ago: executing program 4 (id=133):
mkdir(0x0, 0x1ff)
mount(0x0, &(0x7f00000003c0)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x80003, 0x0)

4.123550002s ago: executing program 4 (id=135):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x5}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x0, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x8, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0xc, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x4000009, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x400, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc5, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800)

3.948563795s ago: executing program 0 (id=137):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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")

3.674713002s ago: executing program 4 (id=138):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xe, 0xb}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xb, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c061}, 0x44810)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.048490697s ago: executing program 5 (id=141):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0)
syz_emit_ethernet(0x94, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x5e, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x22eb, 0x1a, 0x0, [], "ba41912135147f7538648840d6b98557e3dae0790f17326ebaad"}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0)

3.008803738s ago: executing program 4 (id=142):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000297ff8208582005109bc10102030109021200010100800009048f0000bf575a00"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb)

2.117287979s ago: executing program 2 (id=144):
syz_emit_ethernet(0x0, 0x0, 0x0)

2.0940511s ago: executing program 5 (id=145):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070001040000000000040002000600030000000903000038000104ce0000000e0000000b0020"], 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xff, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x81, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.956204493s ago: executing program 2 (id=146):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x5}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x0, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x8, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0xc, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x4000009, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x400, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc5, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800)

1.790350207s ago: executing program 5 (id=147):
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

1.65762148s ago: executing program 2 (id=148):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x7, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0xd, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0xc, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000880)
socket(0x10, 0x3, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
preadv(r6, &(0x7f0000001c40)=[{&(0x7f0000000b00)=""/237, 0xed}], 0x1, 0x6c, 0xffffffc)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.277141879s ago: executing program 5 (id=149):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000081, 0x0, 0x1}]})

1.198956141s ago: executing program 2 (id=150):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xe, 0xb}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xb, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c061}, 0x44810)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)

940.594857ms ago: executing program 5 (id=151):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000280)={&(0x7f0000000340)=0x3, 0x2, 0x0, &(0x7f0000000cc0)})
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0)
close(0x3)

844.67104ms ago: executing program 2 (id=152):
mkdir(&(0x7f0000000100)='./config\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x80003, 0x0)

26.712988ms ago: executing program 5 (id=153):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1fffff9, {0x0, 0x0, 0x0, r1, {0x7}, {0xc}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048054)

21.019149ms ago: executing program 2 (id=154):
syz_emit_ethernet(0x0, 0x0, 0x0)

0s ago: executing program 4 (id=155):
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, &(0x7f0000000400)='\x00')
mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts.
[   66.423730][ T5756] cgroup: Unknown subsys name 'net'
[   66.530532][ T5756] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   67.984522][ T5756] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.462229][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.470733][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.495154][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.507542][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.524558][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.528348][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   69.532171][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.547613][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.555435][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.561799][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.563656][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   69.570815][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.577575][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.585005][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   69.591661][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   69.604377][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.605565][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   69.612347][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.627245][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.634348][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   69.643080][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   69.644248][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   69.657640][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   69.666243][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.118678][ T5768] chnl_net:caif_netlink_parms(): no params data found
[   70.151289][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   70.178841][ T5767] chnl_net:caif_netlink_parms(): no params data found
[   70.202767][ T5770] chnl_net:caif_netlink_parms(): no params data found
[   70.329227][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.337132][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.344461][ T5768] bridge_slave_0: entered allmulticast mode
[   70.351169][ T5768] bridge_slave_0: entered promiscuous mode
[   70.374879][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.382049][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.389257][ T5768] bridge_slave_1: entered allmulticast mode
[   70.396844][ T5768] bridge_slave_1: entered promiscuous mode
[   70.461475][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.468711][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.475923][ T5767] bridge_slave_0: entered allmulticast mode
[   70.482602][ T5767] bridge_slave_0: entered promiscuous mode
[   70.497544][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.504970][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.512093][ T5769] bridge_slave_0: entered allmulticast mode
[   70.519140][ T5769] bridge_slave_0: entered promiscuous mode
[   70.527812][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.535355][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.542479][ T5769] bridge_slave_1: entered allmulticast mode
[   70.549614][ T5769] bridge_slave_1: entered promiscuous mode
[   70.558701][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.571205][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.580672][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.588966][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.596250][ T5767] bridge_slave_1: entered allmulticast mode
[   70.602937][ T5767] bridge_slave_1: entered promiscuous mode
[   70.629319][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.636588][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.643732][ T5770] bridge_slave_0: entered allmulticast mode
[   70.651584][ T5770] bridge_slave_0: entered promiscuous mode
[   70.699650][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.709128][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.718969][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.726416][ T5770] bridge_slave_1: entered allmulticast mode
[   70.733115][ T5770] bridge_slave_1: entered promiscuous mode
[   70.762869][ T5768] team0: Port device team_slave_0 added
[   70.770956][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.785113][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.807255][ T5768] team0: Port device team_slave_1 added
[   70.816876][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.836175][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.859263][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.881195][ T5769] team0: Port device team_slave_0 added
[   70.926802][ T5769] team0: Port device team_slave_1 added
[   70.936360][ T5767] team0: Port device team_slave_0 added
[   70.943305][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.950391][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.976670][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.012541][ T5770] team0: Port device team_slave_0 added
[   71.022510][ T5767] team0: Port device team_slave_1 added
[   71.028998][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.038608][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.067224][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.097398][ T5770] team0: Port device team_slave_1 added
[   71.130036][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.137363][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.163665][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.193378][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.200421][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.226459][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.248821][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.260317][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.286654][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.298414][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.305751][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.331667][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.343296][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.350647][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.376614][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.408516][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.416122][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.442261][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.466696][ T5768] hsr_slave_0: entered promiscuous mode
[   71.473339][ T5768] hsr_slave_1: entered promiscuous mode
[   71.499935][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[   71.506572][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[   71.548343][ T5769] hsr_slave_0: entered promiscuous mode
[   71.555371][ T5769] hsr_slave_1: entered promiscuous mode
[   71.561524][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.570196][ T5769] Cannot create hsr debugfs directory
[   71.589232][ T5767] hsr_slave_0: entered promiscuous mode
[   71.595383][ T5767] hsr_slave_1: entered promiscuous mode
[   71.601341][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.609249][ T5767] Cannot create hsr debugfs directory
[   71.667964][ T5770] hsr_slave_0: entered promiscuous mode
[   71.674794][ T5770] hsr_slave_1: entered promiscuous mode
[   71.681033][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.688977][ T5770] Cannot create hsr debugfs directory
[   71.735543][ T5781] Bluetooth: hci3: command tx timeout
[   71.735556][ T5084] Bluetooth: hci1: command tx timeout
[   71.735735][ T5084] Bluetooth: hci0: command tx timeout
[   71.741188][ T5781] Bluetooth: hci2: command tx timeout
[   72.066488][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.079293][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.089644][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.100018][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.146088][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.157586][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.182100][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.192463][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.288132][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   72.302452][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   72.312446][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   72.323361][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   72.417210][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.427266][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.439025][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.448880][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.518068][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.566735][ T5768] 8021q: adding VLAN 0 to HW filter on device team0
[   72.595859][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.610961][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.618311][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.643992][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.651110][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.695205][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.709517][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[   72.735098][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.742229][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.777597][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.784780][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.812530][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   72.852729][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.859907][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.879034][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.886252][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.922890][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.016676][ T5770] 8021q: adding VLAN 0 to HW filter on device team0
[   73.057436][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.064636][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.103909][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.111126][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.220604][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.332768][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.381579][ T5768] veth0_vlan: entered promiscuous mode
[   73.439053][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.451578][ T5768] veth1_vlan: entered promiscuous mode
[   73.488939][ T5767] veth0_vlan: entered promiscuous mode
[   73.506180][ T5767] veth1_vlan: entered promiscuous mode
[   73.593141][ T5769] veth0_vlan: entered promiscuous mode
[   73.613375][ T5768] veth0_macvtap: entered promiscuous mode
[   73.625457][ T5768] veth1_macvtap: entered promiscuous mode
[   73.633849][ T5767] veth0_macvtap: entered promiscuous mode
[   73.645059][ T5767] veth1_macvtap: entered promiscuous mode
[   73.657343][ T5769] veth1_vlan: entered promiscuous mode
[   73.688437][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.718137][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.732192][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.745713][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.757160][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.773500][ T5769] veth0_macvtap: entered promiscuous mode
[   73.795782][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.808543][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.814400][ T5781] Bluetooth: hci2: command tx timeout
[   73.818183][ T5084] Bluetooth: hci0: command tx timeout
[   73.822907][ T5781] Bluetooth: hci3: command tx timeout
[   73.828143][   T51] Bluetooth: hci1: command tx timeout
[   73.828932][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.848150][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.859448][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.870318][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.882559][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.893921][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.906277][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.915401][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.926575][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.948998][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.958058][ T5769] veth1_macvtap: entered promiscuous mode
[   74.008972][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.020450][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.030416][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.041827][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.052936][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.066239][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.077004][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.087330][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.097830][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.110622][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.156302][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.165632][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.176783][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.186057][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.264938][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.273599][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.350624][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.365986][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.385552][ T5770] veth0_vlan: entered promiscuous mode
[   74.405229][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.414285][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.465958][ T5770] veth1_vlan: entered promiscuous mode
[   74.484002][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.493048][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.502313][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.515066][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.599544][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.621250][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.626441][ T5770] veth0_macvtap: entered promiscuous mode
[   74.657919][ T5770] veth1_macvtap: entered promiscuous mode
[   74.777130][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.790789][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.805296][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.816468][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.826889][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.838215][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.872050][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.920925][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.942828][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.973626][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.989339][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.023255][ T5838] syz.1.6[5838]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   75.033109][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.054541][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.058240][ T5840] binder: 5839:5840 ioctl c0306201 200000000080 returned -14
[   75.081346][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.083593][ T5840] binder: 5839:5840 ioctl c0306201 2000000003c0 returned -14
[   75.091855][ T5838] loop1: detected capacity change from 0 to 1024
[   75.118151][ T5838] EXT4-fs: Ignoring removed nomblk_io_submit option
[   75.129892][ T5838] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   75.145476][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.155097][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.163917][ T5838] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   75.176597][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.186326][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.200018][ T5838] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[   75.237159][ T5838] System zones: 0-1, 3-36
[   75.261760][ T5845] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   75.316313][ T5838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.486166][   T28] audit: type=1800 audit(1784941456.806:2): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9" name="out_ports" dev="configfs" ino=7278 res=0 errno=0
[   75.533046][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.560019][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.587477][ T5838] capability: warning: `syz.1.6' uses deprecated v2 capabilities in a way that may be insecure
[   75.642628][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.663592][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.696204][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.849015][ T5857] loop1: detected capacity change from 0 to 512
[   75.856573][ T5854] loop3: detected capacity change from 0 to 4096
[   75.865472][ T5854] EXT4-fs: inline encryption not supported
[   75.887741][ T5857] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   75.897390][ T5781] Bluetooth: hci3: command tx timeout
[   75.904453][ T5781] Bluetooth: hci0: command tx timeout
[   75.904596][ T5084] Bluetooth: hci1: command tx timeout
[   75.909924][ T5781] Bluetooth: hci2: command tx timeout
[   75.916216][  T172] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   75.966636][ T5854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   76.007662][ T5857] EXT4-fs (loop1): 1 truncate cleaned up
[   76.041843][ T5857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.078134][ T5854] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002]
[   76.108550][ T5854] System zones: 0-5
[   76.167718][ T5854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.181438][  T172] usb 1-1: Using ep0 maxpacket: 8
[   76.205872][  T172] usb 1-1: config 1 has an invalid interface number: 143 but max is 0
[   76.234232][  T172] usb 1-1: config 1 has no interface number 0
[   76.273353][  T172] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[   76.290688][  T172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.297375][ T5857] overlayfs: upper fs needs to support d_type.
[   76.330716][  T172] usb 1-1: Product: syz
[   76.349521][  T172] usb 1-1: Manufacturer: syz
[   76.364145][  T172] usb 1-1: SerialNumber: syz
[   76.412436][ T5861] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   76.576773][  T172] viperboard 1-1:1.143: version 0.00 found at bus 001 address 002
[   76.787639][ T5866] Zero length message leads to an empty skb
[   77.338643][ T5852] dummy_hcd dummy_hcd.0: remove, state 1
[   77.339823][  T172] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[   77.353350][  T172] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[   77.372002][ T5852] usb usb1: USB disconnect, device number 1
[   77.503982][ T5852] usb 1-1: USB disconnect, device number 2
[   77.614959][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.658201][ T5767] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[   77.754639][ T5767] EXT4-fs (loop1): Remounting filesystem read-only
[   77.880176][ T5852] dummy_hcd dummy_hcd.0: stopped
[   77.885375][ T5852] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[   77.937011][ T5870] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005
[   77.952312][ T5873] syzkaller0: entered promiscuous mode
[   77.963487][ T5870] dummy_hcd dummy_hcd.0: Dummy host controller
[   77.967645][ T5873] syzkaller0: entered allmulticast mode
[   77.978748][ T5781] Bluetooth: hci2: command tx timeout
[   77.981574][ T5084] Bluetooth: hci3: command tx timeout
[   77.985242][ T5781] Bluetooth: hci1: command tx timeout
[   77.989635][ T5775] Bluetooth: hci0: command tx timeout
[   78.065496][ T5870] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1
[   78.105648][ T5870] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.06
[   78.118885][ T5870] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[   78.129971][ T5870] usb usb1: Product: Dummy host controller
[   78.137042][ T5870] usb usb1: Manufacturer: Linux syzkaller dummy_hcd
[   78.143801][ T5870] usb usb1: SerialNumber: dummy_hcd.0
[   78.158614][ T5870] hub 1-0:1.0: USB hub found
[   78.163822][ T5870] hub 1-0:1.0: 1 port detected
[   78.290453][ T5875] loop3: detected capacity change from 0 to 128
[   78.331320][ T5875] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   78.360234][ T5875] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   78.432934][ T5875] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:106: comm syz.3.15: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19
[   78.475172][ T5769] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   78.742559][ T5887] loop3: detected capacity change from 0 to 512
[   78.762211][ T5888] loop2: detected capacity change from 0 to 1024
[   78.775841][ T5887] =======================================================
[   78.775841][ T5887] WARNING: The mand mount option has been deprecated and
[   78.775841][ T5887]          and is ignored by this kernel. Remove the mand
[   78.775841][ T5887]          option from the mount to silence this warning.
[   78.775841][ T5887] =======================================================
[   78.778102][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.829534][ T5888] EXT4-fs: Ignoring removed nomblk_io_submit option
[   78.886588][ T5887] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.21: inode has both inline data and extents flags
[   78.904214][ T5888] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   78.935520][ T5887] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.21: couldn't read orphan inode 15 (err -117)
[   78.970482][ T5888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.996871][ T5887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.143062][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.188525][ T5895] syzkaller0: entered promiscuous mode
[   79.202207][ T5895] syzkaller0: entered allmulticast mode
[   79.264707][ T5887] loop3: detected capacity change from 512 to 0
[   79.267905][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.289446][ T5896] syz.3.21: attempt to access beyond end of device
[   79.289446][ T5896] loop3: rw=12288, sector=72, nr_sectors = 2 limit=0
[   79.353689][ T5896] EXT4-fs error (device loop3): __ext4_find_entry:1685: inode #2: comm syz.3.21: reading directory lblock 0
[   79.394516][ T5896] syz.3.21: attempt to access beyond end of device
[   79.394516][ T5896] loop3: rw=14337, sector=2, nr_sectors = 2 limit=0
[   79.444667][ T5896] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[   79.463634][ T5896] EXT4-fs (loop3): I/O error while writing superblock
[   79.475942][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.596192][ T5769] syz-executor: attempt to access beyond end of device
[   79.596192][ T5769] loop3: rw=12288, sector=72, nr_sectors = 2 limit=0
[   79.605901][ T5899] loop0: detected capacity change from 0 to 512
[   79.625243][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.635746][ T5769] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[   79.663220][ T5899] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   79.700595][ T5769] syz-executor: attempt to access beyond end of device
[   79.700595][ T5769] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0
[   79.703862][ T5899] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.25: invalid indirect mapped block 4294967295 (level 1)
[   79.715432][ T5769] syz-executor: attempt to access beyond end of device
[   79.715432][ T5769] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0
[   79.744726][ T5769] syz-executor: attempt to access beyond end of device
[   79.744726][ T5769] loop3: rw=524288, sector=16, nr_sectors = 2 limit=0
[   79.758623][ T5769] syz-executor: attempt to access beyond end of device
[   79.758623][ T5769] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0
[   79.773038][ T5769] syz-executor: attempt to access beyond end of device
[   79.773038][ T5769] loop3: rw=524288, sector=20, nr_sectors = 2 limit=0
[   79.786653][ T5769] syz-executor: attempt to access beyond end of device
[   79.786653][ T5769] loop3: rw=524288, sector=22, nr_sectors = 2 limit=0
[   79.800857][ T5769] syz-executor: attempt to access beyond end of device
[   79.800857][ T5769] loop3: rw=524288, sector=24, nr_sectors = 2 limit=0
[   79.816119][ T5769] EXT4-fs error (device loop3): ext4_get_inode_loc:4634: inode #2: block 5: comm syz-executor: unable to read itable block
[   79.829172][ T5769] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[   79.837586][ T5769] EXT4-fs (loop3): I/O error while writing superblock
[   79.844863][ T5769] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: IO failure
[   79.854008][ T5769] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[   79.865403][ T5769] EXT4-fs (loop3): I/O error while writing superblock
[   79.872200][ T5769] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz-executor: mark_inode_dirty error
[   79.904335][ T5899] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.25: invalid indirect mapped block 4294967295 (level 1)
[   79.936095][ T5899] EXT4-fs (loop0): 2 truncates cleaned up
[   79.948795][ T5769] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[   79.955925][ T5899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.986182][ T5769] EXT4-fs (loop3): I/O error while writing superblock
[   80.051313][ T5899] EXT4-fs (loop0): shut down requested (2)
[   80.194820][  T142] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4619: inode #2: block 5: comm kworker/u4:5: unable to read itable block
[   80.239679][  T142] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[   80.258039][  T142] EXT4-fs (loop3): I/O error while writing superblock
[   80.266804][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.284534][  T142] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4619: inode #18: block 9: comm kworker/u4:5: unable to read itable block
[   80.311312][  T142] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[   80.358780][  T142] EXT4-fs (loop3): I/O error while writing superblock
[   80.410233][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.433560][ T5769] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[   80.465099][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.474295][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.483231][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.492244][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.500402][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   80.508021][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.537602][ T5769] EXT4-fs (loop3): I/O error while writing superblock
[   80.652746][ T5912] syz.0.28 uses obsolete (PF_INET,SOCK_PACKET)
[   81.530821][   T28] audit: type=1804 audit(1784941462.746:3): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.20" name="/newroot/3/file1/file1" dev="loop2" ino=15 res=1 errno=0
[   82.034285][   T28] audit: type=1804 audit(1784941462.776:4): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.20" name="/newroot/3/file1/file1" dev="loop2" ino=15 res=1 errno=0
[   82.457670][ T5906] chnl_net:caif_netlink_parms(): no params data found
[   82.535069][ T5084] Bluetooth: hci1: command tx timeout
[   82.554101][    C0] sched: RT throttling activated
[   83.028844][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.376201][ T5938] loop2: detected capacity change from 0 to 512
[   83.445979][ T5938] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.33: inode has both inline data and extents flags
[   83.495241][ T5938] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.33: couldn't read orphan inode 15 (err -117)
[   83.597958][ T5938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.616966][ T5944] loop0: detected capacity change from 0 to 512
[   83.625566][ T5944] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   83.828986][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.861954][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.879429][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.906780][ T5906] bridge_slave_0: entered allmulticast mode
[   83.934914][ T5906] bridge_slave_0: entered promiscuous mode
[   84.069033][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.102097][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.124003][ T5906] bridge_slave_1: entered allmulticast mode
[   84.138015][ T5906] bridge_slave_1: entered promiscuous mode
[   84.285886][ T5906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.312771][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.323962][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.334353][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.345121][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.352829][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   84.361653][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.436686][ T5906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.604397][ T5906] team0: Port device team_slave_0 added
[   84.614467][ T5084] Bluetooth: hci1: command tx timeout
[   84.623512][ T5906] team0: Port device team_slave_1 added
[   84.643152][ T5958] process 'syz.2.36' launched '/dev/fd/4' with NULL argv: empty string added
[   84.829702][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.843857][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.874517][ T5906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.935307][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.952416][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.997572][ T5906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.052686][   T11] hsr_slave_0: left promiscuous mode
[   85.059271][   T11] hsr_slave_1: left promiscuous mode
[   85.069554][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.080315][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.094548][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.109707][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.122395][   T11] bridge_slave_1: left allmulticast mode
[   85.134234][   T11] bridge_slave_1: left promiscuous mode
[   85.141140][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.166845][   T11] bridge_slave_0: left allmulticast mode
[   85.172535][   T11] bridge_slave_0: left promiscuous mode
[   85.195712][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.246216][   T11] veth1_macvtap: left promiscuous mode
[   85.252177][   T11] veth0_macvtap: left promiscuous mode
[   85.258334][   T11] veth1_vlan: left promiscuous mode
[   85.284533][   T11] veth0_vlan: left promiscuous mode
[   86.018941][   T11] team0 (unregistering): Port device team_slave_1 removed
[   86.062854][   T11] team0 (unregistering): Port device team_slave_0 removed
[   86.122560][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.167356][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.454257][ T5084] Bluetooth: hci3: command tx timeout
[   86.490795][   T11] bond0 (unregistering): Released all slaves
[   86.694682][ T5084] Bluetooth: hci1: command tx timeout
[   86.719577][ T5906] hsr_slave_0: entered promiscuous mode
[   86.731821][ T5906] hsr_slave_1: entered promiscuous mode
[   86.738213][ T5906] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.747473][ T5906] Cannot create hsr debugfs directory
[   86.867147][    T9] cfg80211: failed to load regulatory.db
[   87.091608][ T5947] chnl_net:caif_netlink_parms(): no params data found
[   87.790630][ T6004] binder: 6002:6004 ioctl c0306201 200000000080 returned -14
[   87.805807][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.822137][ T6004] binder: 6002:6004 ioctl c0306201 2000000003c0 returned -14
[   87.850962][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.884287][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.891542][ T5947] bridge_slave_0: entered allmulticast mode
[   87.931420][ T5947] bridge_slave_0: entered promiscuous mode
[   87.963610][ T6006] loop0: detected capacity change from 0 to 2048
[   87.971323][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.980767][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.988397][ T5947] bridge_slave_1: entered allmulticast mode
[   88.002948][ T5947] bridge_slave_1: entered promiscuous mode
[   88.039943][ T6006]  loop0: p1 < > p4
[   88.084152][ T6006] loop0: p4 size 8388608 extends beyond EOD, truncated
[   88.122798][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.311826][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.398219][ T5906] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   88.427644][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.451207][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.522391][ T5906] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   88.534698][ T5084] Bluetooth: hci3: command tx timeout
[   88.537328][ T5906] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   88.602795][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.699354][ T5906] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.714404][   T28] audit: type=1800 audit(1784941470.036:5): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.45" name="out_ports" dev="configfs" ino=7668 res=0 errno=0
[   88.778602][ T5084] Bluetooth: hci1: command tx timeout
[   88.783882][ T5947] team0: Port device team_slave_0 added
[   88.813874][ T5947] team0: Port device team_slave_1 added
[   88.949472][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.974687][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.011671][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.058464][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.076261][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.111907][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.247961][ T5947] hsr_slave_0: entered promiscuous mode
[   89.263564][ T5947] hsr_slave_1: entered promiscuous mode
[   89.279948][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.294389][ T5947] Cannot create hsr debugfs directory
[   89.402838][ T5906] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.527192][ T5906] 8021q: adding VLAN 0 to HW filter on device team0
[   89.676372][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.683537][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.726900][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.734132][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.614357][ T5084] Bluetooth: hci3: command tx timeout
[   91.406008][ T6046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'.
[   91.430882][ T6046] binder: 6043:6046 ioctl c0306201 0 returned -14
[   92.340874][ T5947] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   92.384279][ T5947] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   92.412136][ T5947] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   92.428862][ T5947] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   92.585627][ T6063] binder: 6059:6063 ioctl c0306201 200000000080 returned -14
[   92.611732][ T6063] binder: 6059:6063 ioctl c0306201 2000000003c0 returned -14
[   92.711482][ T5084] Bluetooth: hci3: command tx timeout
[   92.957261][ T5906] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.016463][   T11] hsr_slave_0: left promiscuous mode
[   93.049819][   T11] hsr_slave_1: left promiscuous mode
[   93.124959][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.132424][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.168701][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.181604][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.192842][   T11] bridge_slave_1: left allmulticast mode
[   93.202818][   T11] bridge_slave_1: left promiscuous mode
[   93.203312][ T6076] loop2: detected capacity change from 0 to 1024
[   93.208766][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.226132][   T11] bridge_slave_0: left allmulticast mode
[   93.231806][   T11] bridge_slave_0: left promiscuous mode
[   93.235757][ T6076] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[   93.240018][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.305879][ T6076] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.55: lblock 2 mapped to illegal pblock 2 (length 1)
[   93.327242][ T6076] Quota error (device loop2): qtree_write_dquot: dquota write failed
[   93.350015][ T6076] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.55: lblock 0 mapped to illegal pblock 48 (length 1)
[   93.435746][   T11] veth1_macvtap: left promiscuous mode
[   93.441331][   T11] veth0_macvtap: left promiscuous mode
[   93.448162][ T6076] Quota error (device loop2): v2_write_file_info: Can't write info structure
[   93.465203][ T6076] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.55: Failed to acquire dquot type 0
[   93.471680][   T11] veth1_vlan: left promiscuous mode
[   93.489719][   T11] veth0_vlan: left promiscuous mode
[   93.504969][ T6076] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem
[   93.522564][ T6076] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.55: mark_inode_dirty error
[   93.556040][ T6076] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   93.574429][ T6076] EXT4-fs (loop2): 1 orphan inode deleted
[   93.582224][ T6076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.595743][ T1128] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[   93.666756][ T1128] Quota error (device loop2): remove_tree: Can't read quota data block 1
[   93.680874][ T1128] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 0
[   93.714915][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.746951][ T5770] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0
[   93.777430][ T5770] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem
[   93.797660][ T5770] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[   94.553753][   T11] team0 (unregistering): Port device team_slave_1 removed
[   94.636876][   T11] team0 (unregistering): Port device team_slave_0 removed
[   94.700475][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.764715][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.091805][ T6082] loop0: detected capacity change from 0 to 131072
[   95.180894][   T11] bond0 (unregistering): Released all slaves
[   95.280727][ T6082] F2FS-fs (loop0): Test dummy encryption mode enabled
[   95.292185][ T6082] F2FS-fs (loop0): invalid crc value
[   95.328965][ T6082] F2FS-fs (loop0): Found nat_bits in checkpoint
[   95.464223][ T6082] F2FS-fs (loop0): access invalid blkaddr:0
[   95.478943][ T6082] CPU: 1 PID: 6082 Comm: syz.0.57 Not tainted syzkaller #0
[   95.486204][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   95.496296][ T6082] Call Trace:
[   95.499598][ T6082]  <TASK>
[   95.502553][ T6082]  dump_stack_lvl+0x18c/0x250
[   95.507273][ T6082]  ? show_regs_print_info+0x20/0x20
[   95.508288][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.512489][ T6082]  ? __up_read+0x2b8/0x6b0
[   95.523505][ T6082]  f2fs_is_valid_blkaddr+0xe6c/0x15c0
[   95.528901][ T6082]  ? from_kgid_munged+0x6f0/0x6f0
[   95.533960][ T6082]  sanity_check_extent_cache+0xfc/0x1f0
[   95.539551][ T6082]  f2fs_iget+0x331d/0x4750
[   95.544028][ T6082]  f2fs_fill_super+0x4853/0x6b60
[   95.549047][ T6082]  ? kill_f2fs_super+0x3f0/0x3f0
[   95.554021][ T6082]  ? down_write+0x16e/0x200
[   95.557885][ T5947] 8021q: adding VLAN 0 to HW filter on device team0
[   95.558535][ T6082]  ? down_read_killable+0x340/0x340
[   95.570332][ T6082]  ? setup_bdev_super+0x56b/0x660
[   95.575388][ T6082]  mount_bdev+0x21c/0x2c0
[   95.579745][ T6082]  ? kfree+0x31/0x1a0
[   95.583759][ T6082]  ? kill_f2fs_super+0x3f0/0x3f0
[   95.588731][ T6082]  ? get_tree_bdev+0x520/0x520
[   95.593514][ T6082]  ? vfs_parse_fs_param+0x420/0x420
[   95.598721][ T6082]  legacy_get_tree+0xea/0x180
[   95.603398][ T6082]  ? trace_raw_output_f2fs__rw_end+0x110/0x110
[   95.609555][ T6082]  vfs_get_tree+0x8c/0x280
[   95.613977][ T6082]  do_new_mount+0x24a/0xa40
[   95.618484][ T6082]  __se_sys_mount+0x2e7/0x3d0
[   95.623161][ T6082]  ? __x64_sys_mount+0xc0/0xc0
[   95.627923][ T6082]  ? lockdep_hardirqs_on+0x98/0x150
[   95.633127][ T6082]  ? __x64_sys_mount+0x20/0xc0
[   95.637898][ T6082]  do_syscall_64+0x55/0xb0
[   95.642314][ T6082]  ? clear_bhb_loop+0x40/0x90
[   95.646993][ T6082]  ? clear_bhb_loop+0x40/0x90
[   95.651665][ T6082]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   95.657563][ T6082] RIP: 0033:0x7f6c8139f10a
[   95.661978][ T6082] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.681579][ T6082] RSP: 002b:00007f6c821d6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   95.689997][ T6082] RAX: ffffffffffffffda RBX: 00007f6c821d6ee0 RCX: 00007f6c8139f10a
[   95.697971][ T6082] RDX: 0000200000000100 RSI: 0000200000010600 RDI: 00007f6c821d6ea0
[   95.705937][ T6082] RBP: 0000200000000100 R08: 00007f6c821d6ee0 R09: 0000000000000010
[   95.713910][ T6082] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000010600
[   95.721877][ T6082] R13: 00007f6c821d6ea0 R14: 00000000000105d6 R15: 0000200000000280
[   95.729859][ T6082]  </TASK>
[   95.756317][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.763483][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.785474][ T6082] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix
[   95.786463][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.805015][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.836711][ T6082] F2FS-fs (loop0): Failed to read root inode
[   96.363277][ T5906] veth0_vlan: entered promiscuous mode
[   96.411850][ T5906] veth1_vlan: entered promiscuous mode
[   96.458525][ T6119] xt_hashlimit: size too large, truncated to 1048576
[   96.493573][ T5906] veth0_macvtap: entered promiscuous mode
[   96.525980][ T5906] veth1_macvtap: entered promiscuous mode
[   96.581414][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.610629][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.643320][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.681752][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.702161][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.763427][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.795635][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.818442][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.844168][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.883727][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.917240][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.952151][ T5906] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.986363][ T5906] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.021967][ T5906] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.054363][ T5906] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.253956][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.286268][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.366932][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.392492][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.667746][ T6140] loop4: detected capacity change from 0 to 512
[   97.687404][ T6140] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   97.795422][ T6140] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.24: invalid indirect mapped block 4294967295 (level 1)
[   97.816048][ T5947] veth0_vlan: entered promiscuous mode
[   97.856483][ T6140] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.24: invalid indirect mapped block 4294967295 (level 1)
[   97.887850][ T6140] EXT4-fs (loop4): 2 truncates cleaned up
[   97.890237][ T5947] veth1_vlan: entered promiscuous mode
[   97.918994][ T6140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.983902][ T6140] EXT4-fs (loop4): shut down requested (2)
[   98.013395][ T5947] veth0_macvtap: entered promiscuous mode
[   98.059391][ T5947] veth1_macvtap: entered promiscuous mode
[   98.075482][ T5906] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.116194][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.175153][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.204482][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.236856][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.250645][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.262656][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.290370][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.343769][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.391427][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.414259][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.443721][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.481350][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.512431][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.541806][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.592610][ T6155] configfs-gadget.g1 gadget.0: HOST MAC e6:48:63:4c:38:46
[   98.634177][ T6155] configfs-gadget.g1 gadget.0: MAC 0e:fc:6a:02:fa:da
[   98.637457][ T5947] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.658970][ T5947] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.687612][ T5947] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.710528][ T5947] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.878478][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.913363][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.924390][  T172] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   99.021734][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.048993][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.189368][  T172] usb 1-1: Dual-Role OTG device on HNP port
[   99.315627][  T172] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06
[   99.909065][  T172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.936863][  T172] gspca_main: spca501-2.14.0 probing 0000:0000
[   99.947925][  T172] gspca_spca501: reg write: error -32
[   99.953353][  T172] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[   99.965258][  T172] spca501: probe of 1-1:1.0 failed with error -22
[   99.991940][  T172] cdc_eem 1-1:1.1 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, 32:0e:69:2e:fa:6e
[  100.038060][ T6176] syzkaller0: entered promiscuous mode
[  100.043589][ T6176] syzkaller0: entered allmulticast mode
[  100.365933][ T6188] syzkaller0: entered promiscuous mode
[  100.378701][ T6188] syzkaller0: entered allmulticast mode
[  100.398355][ T6188] tipc: Started in network mode
[  100.403450][ T6188] tipc: Node identity fe60fec6395e, cluster identity 4711
[  100.419353][ T6188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.443483][ T6188] tipc: Resetting bearer <eth:syzkaller0>
[  100.470875][ T6186] tipc: Resetting bearer <eth:syzkaller0>
[  100.500171][ T6186] tipc: Disabling bearer <eth:syzkaller0>
[  100.676675][ T6196] Illegal XDP return value 4294967294 on prog  (id 2) dev syz_tun, expect packet loss!
[  100.970306][ T6202] loop0: detected capacity change from 0 to 512
[  100.991192][ T6202] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  101.026828][ T6202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  101.050294][ T6202] System zones: 1-12
[  101.063289][ T6202] EXT4-fs (loop0): orphan cleanup on readonly fs
[  101.106540][ T6202] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.74: bg 0: block 361: padding at end of block bitmap is not set
[  101.196047][ T6202] EXT4-fs (loop0): Remounting filesystem read-only
[  101.234572][ T6202] EXT4-fs (loop0): 1 truncate cleaned up
[  101.241504][ T6202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  101.339593][ T6202] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.74: error -117 reading directory block
[  101.533298][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  101.704538][   T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  101.783660][ T6225] syzkaller0: entered promiscuous mode
[  101.798561][ T6225] syzkaller0: entered allmulticast mode
[  101.826361][ T6225] tipc: Started in network mode
[  101.831277][ T6225] tipc: Node identity eac3d70dc192, cluster identity 4711
[  101.847070][ T6227] loop5: detected capacity change from 0 to 1024
[  101.853772][ T6225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.887385][   T23] usb 5-1: Using ep0 maxpacket: 8
[  101.900099][   T23] usb 5-1: config 1 has an invalid interface number: 143 but max is 0
[  101.911629][ T6225] tipc: Resetting bearer <eth:syzkaller0>
[  101.917508][   T23] usb 5-1: config 1 has no interface number 0
[  101.942870][   T23] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  101.944240][ T6227] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  101.959504][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.969283][   T23] usb 5-1: Product: syz
[  101.975071][ T6224] tipc: Resetting bearer <eth:syzkaller0>
[  101.981680][   T23] usb 5-1: Manufacturer: syz
[  101.987382][   T23] usb 5-1: SerialNumber: syz
[  102.017497][ T6227] System zones: 0-1, 3-8
[  102.018192][ T6224] tipc: Disabling bearer <eth:syzkaller0>
[  102.027369][ T6227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  102.045120][ T6227] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.099453][   T28] audit: type=1800 audit(1784941483.426:6): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.82" name="file1" dev="loop5" ino=15 res=0 errno=0
[  102.140283][   T23] viperboard 5-1:1.143: version 0.00 found at bus 005 address 002
[  102.211441][   T23] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  102.229971][ T6214] dummy_hcd dummy_hcd.0: remove, state 1
[  102.240704][ T6214] usb usb1: USB disconnect, device number 1
[  102.247397][   T23] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  102.256145][ T6214] usb 1-1: USB disconnect, device number 2
[  102.292138][ T5947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  102.333994][ T6214] cdc_eem 1-1:1.1 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device
[  102.340383][ T6233] syzkaller0: entered promiscuous mode
[  102.350757][ T6233] syzkaller0: entered allmulticast mode
[  102.380314][ T6244] bridge0: port 3(syz_tun) entered blocking state
[  102.406269][ T6244] bridge0: port 3(syz_tun) entered disabled state
[  102.430677][ T6244] syz_tun: entered allmulticast mode
[  102.466019][ T6244] syz_tun: entered promiscuous mode
[  102.472304][ T6244] bridge0: port 3(syz_tun) entered blocking state
[  102.479157][ T6244] bridge0: port 3(syz_tun) entered forwarding state
[  102.559390][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'.
[  102.737543][ T6214] dummy_hcd dummy_hcd.0: stopped
[  102.742557][ T6214] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  102.779663][ T6242] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005
[  102.824224][ T6242] dummy_hcd dummy_hcd.0: Dummy host controller
[  102.885170][ T6242] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1
[  102.922964][ T6242] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.06
[  102.940020][ T6242] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  102.949875][ T6242] usb usb1: Product: Dummy host controller
[  102.960372][ T6242] usb usb1: Manufacturer: Linux syzkaller dummy_hcd
[  102.968322][ T6242] usb usb1: SerialNumber: dummy_hcd.0
[  102.988482][ T6242] hub 1-0:1.0: USB hub found
[  103.001114][ T6242] hub 1-0:1.0: 1 port detected
[  103.108063][ T5809] usb 5-1: USB disconnect, device number 2
[  103.314309][ T5808] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  103.516726][ T5808] usb 1-1: Dual-Role OTG device on HNP port
[  103.531336][ T5808] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06
[  103.550533][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.592270][ T5808] gspca_main: spca501-2.14.0 probing 0000:0000
[  103.618463][ T5808] gspca_spca501: reg write: error -32
[  103.633469][ T5808] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  103.643311][ T5808] spca501: probe of 1-1:1.0 failed with error -22
[  104.891192][ T6292] loop4: detected capacity change from 0 to 512
[  104.959302][ T6277] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  104.978271][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.014453][ T5808] cdc_eem 1-1:1.1 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, e2:ca:cd:0c:59:d7
[  105.067285][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.116312][ T6294] dummy_hcd dummy_hcd.0: remove, state 1
[  105.154546][ T6294] usb usb1: USB disconnect, device number 1
[  105.175507][ T6294] usb 1-1: USB disconnect, device number 2
[  105.218877][ T6294] cdc_eem 1-1:1.1 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device
[  105.968467][ T6294] dummy_hcd dummy_hcd.0: stopped
[  106.044309][ T6294] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  106.229671][ T6310] syzkaller0: entered promiscuous mode
[  106.251384][ T6310] syzkaller0: entered allmulticast mode
[  106.401437][ T6319] syzkaller0: entered promiscuous mode
[  106.407113][ T6319] syzkaller0: entered allmulticast mode
[  106.804292][   T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  107.114188][   T23] usb 6-1: Using ep0 maxpacket: 8
[  107.304821][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'.
[  107.330944][   T23] usb 6-1: config 1 has an invalid interface number: 143 but max is 0
[  107.463619][   T23] usb 6-1: config 1 has no interface number 0
[  107.783391][   T23] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  107.804159][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.812200][   T23] usb 6-1: Product: syz
[  107.824613][   T23] usb 6-1: Manufacturer: syz
[  107.829266][   T23] usb 6-1: SerialNumber: syz
[  107.965049][ T6351] syzkaller0: entered promiscuous mode
[  107.966290][   T23] viperboard 6-1:1.143: version 0.00 found at bus 006 address 002
[  107.971305][ T6351] syzkaller0: entered allmulticast mode
[  108.092117][   T23] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  108.092968][ T6322] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005
[  108.101976][   T23] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  108.151684][ T6322] dummy_hcd dummy_hcd.0: Dummy host controller
[  108.185546][ T6322] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1
[  108.231827][ T6322] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.06
[  108.272088][ T6322] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  108.299317][ T6322] usb usb1: Product: Dummy host controller
[  108.324228][ T6322] usb usb1: Manufacturer: Linux syzkaller dummy_hcd
[  108.345289][ T6322] usb usb1: SerialNumber: dummy_hcd.0
[  108.388898][ T6322] hub 1-0:1.0: USB hub found
[  108.404464][ T6322] hub 1-0:1.0: 1 port detected
[  108.494232][ T6042] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  108.517171][   T23] usb 6-1: USB disconnect, device number 2
[  108.694477][ T5810] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  108.705651][ T6042] usb 5-1: Using ep0 maxpacket: 8
[  108.723494][ T6042] usb 5-1: config 1 has an invalid interface number: 143 but max is 0
[  108.763496][ T6042] usb 5-1: config 1 has no interface number 0
[  108.782169][ T6042] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  108.807884][ T6042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.829352][ T6042] usb 5-1: Product: syz
[  108.833567][ T6042] usb 5-1: Manufacturer: syz
[  108.865295][ T6042] usb 5-1: SerialNumber: syz
[  108.892091][ T5810] usb 1-1: Dual-Role OTG device on HNP port
[  108.908858][ T5810] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06
[  108.923322][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.943717][ T5810] gspca_main: spca501-2.14.0 probing 0000:0000
[  108.957746][ T5810] gspca_spca501: reg write: error -32
[  108.963966][ T5810] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  108.972494][ T5810] spca501: probe of 1-1:1.0 failed with error -22
[  108.995406][ T6042] viperboard 5-1:1.143: version 0.00 found at bus 005 address 003
[  109.026796][ T5810] cdc_eem 1-1:1.1 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, ea:f7:3c:c2:1b:69
[  109.026871][ T6042] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  109.086351][ T6042] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  109.108469][ T6357] dummy_hcd dummy_hcd.0: remove, state 1
[  109.124345][ T6357] usb usb1: USB disconnect, device number 1
[  109.130295][ T6357] usb 1-1: USB disconnect, device number 2
[  109.163347][ T6357] cdc_eem 1-1:1.1 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device
[  109.369431][ T6357] dummy_hcd dummy_hcd.0: stopped
[  109.386298][ T6357] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  109.507041][ T6042] usb 5-1: USB disconnect, device number 3
[  109.574536][ T6391] syzkaller0: entered promiscuous mode
[  109.610591][ T6391] syzkaller0: entered allmulticast mode
[  109.675278][ T6391] netlink: 1028 bytes leftover after parsing attributes in process `syz.5.127'.
[  111.150219][ T6424] kvm: pic: non byte write
[  111.372249][ T6438] loop0: detected capacity change from 0 to 512
[  111.411736][ T6438] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  111.471736][ T6443] syzkaller0: entered promiscuous mode
[  111.502696][ T6443] syzkaller0: entered allmulticast mode
[  111.552964][ T6443] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.139'.
[  111.630276][ T6441] syzkaller0: entered promiscuous mode
[  111.651166][ T6441] syzkaller0: entered allmulticast mode
[  112.964937][  T172] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  113.167419][  T172] usb 5-1: Using ep0 maxpacket: 8
[  113.219668][  T172] usb 5-1: config 1 has an invalid interface number: 143 but max is 0
[  113.238950][  T172] usb 5-1: config 1 has no interface number 0
[  113.255597][  T172] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  113.271312][  T172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.295941][  T172] usb 5-1: Product: syz
[  113.310588][  T172] usb 5-1: Manufacturer: syz
[  113.328982][  T172] usb 5-1: SerialNumber: syz
[  113.399804][ T6484] syzkaller0: entered promiscuous mode
[  113.405673][ T6484] syzkaller0: entered allmulticast mode
[  113.430614][ T6484] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.148'.
[  113.480730][  T172] viperboard 5-1:1.143: version 0.00 found at bus 005 address 004
[  113.535375][  T172] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  113.579389][  T172] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  113.608252][  T172] usb 5-1: USB disconnect, device number 4
[  113.853917][ T6494] syzkaller0: entered promiscuous mode
[  113.872973][ T6494] syzkaller0: entered allmulticast mode
[  114.938195][ T5434] general protection fault, probably for non-canonical address 0xdffffc000000000a: 0000 [#1] PREEMPT SMP KASAN
[  114.949997][ T5434] KASAN: null-ptr-deref in range [0x0000000000000050-0x0000000000000057]
[  114.958434][ T5434] CPU: 0 PID: 5434 Comm: dhcpcd Not tainted syzkaller #0
[  114.966078][ T5434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  114.976155][ T5434] RIP: 0010:dummy_queue+0x1a7/0x8c0
[  114.981385][ T5434] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 82 cd 25 fb 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 ea 05 00 00 45 8b 24 24 44 89 e6 83 e6 02
[  115.001020][ T5434] RSP: 0018:ffffc900037b7688 EFLAGS: 00010206
[  115.007105][ T5434] RAX: 000000000000000a RBX: ffff888030b1fa10 RCX: dffffc0000000000
[  115.015083][ T5434] RDX: ffff88802a5a1e00 RSI: 0000000000000003 RDI: 0000000000000005
[  115.023051][ T5434] RBP: ffff888030b1fa00 R08: ffff88805d1586e3 R09: 1ffff1100ba2b0dc
[  115.031012][ T5434] R10: dffffc0000000000 R11: ffffed100ba2b0dd R12: 0000000000000050
[  115.038976][ T5434] R13: 1ffff11006163f40 R14: ffff888141f542c0 R15: ffff888141f54c00
[  115.046940][ T5434] FS:  00007f291bebf740(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  115.055858][ T5434] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  115.062433][ T5434] CR2: 00007f70fc6660e0 CR3: 000000002ffdf000 CR4: 00000000003506f0
[  115.070401][ T5434] Call Trace:
[  115.073673][ T5434]  <TASK>
[  115.076599][ T5434]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  115.082488][ T5434]  ? kmalloc_reserve+0x240/0x240
[  115.087423][ T5434]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  115.093309][ T5434]  usb_ep_queue+0xea/0x350
[  115.097724][ T5434]  rx_submit+0x34c/0x780
[  115.101960][ T5434]  rx_fill+0x15b/0x2e0
[  115.106019][ T5434]  eth_open+0xac/0x2b0
[  115.110084][ T5434]  __dev_open+0x2cb/0x430
[  115.114404][ T5434]  ? dev_open+0x190/0x190
[  115.118729][ T5434]  __dev_change_flags+0x1e8/0x6a0
[  115.123746][ T5434]  ? dev_get_flags+0x1c0/0x1c0
[  115.128502][ T5434]  ? apparmor_capable+0x137/0x1a0
[  115.133523][ T5434]  dev_change_flags+0x7c/0x1a0
[  115.138285][ T5434]  devinet_ioctl+0x949/0x1d70
[  115.142960][ T5434]  ? inet_ifa_byprefix+0x2a0/0x2a0
[  115.148063][ T5434]  ? _copy_from_user+0xa5/0xe0
[  115.152815][ T5434]  ? get_user_ifreq+0x12b/0x180
[  115.157654][ T5434]  inet_ioctl+0x42b/0x560
[  115.161974][ T5434]  ? tomoyo_path_number_perm+0x217/0x5e0
[  115.167601][ T5434]  ? inet_shutdown+0x370/0x370
[  115.172358][ T5434]  ? slab_free_freelist_hook+0x130/0x1a0
[  115.177990][ T5434]  ? tomoyo_path_number_perm+0x4b7/0x5e0
[  115.183618][ T5434]  ? __kmem_cache_free+0xba/0x1f0
[  115.188639][ T5434]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  115.194096][ T5434]  sock_do_ioctl+0xfc/0x310
[  115.198597][ T5434]  ? sock_show_fdinfo+0xb0/0xb0
[  115.203439][ T5434]  sock_ioctl+0x5be/0x7e0
[  115.207758][ T5434]  ? sock_poll+0x3e0/0x3e0
[  115.212160][ T5434]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  115.218134][ T5434]  ? fd_install+0x60/0x4e0
[  115.222548][ T5434]  ? bpf_lsm_file_ioctl+0x9/0x10
[  115.227474][ T5434]  ? security_file_ioctl+0x80/0xa0
[  115.232576][ T5434]  ? sock_poll+0x3e0/0x3e0
[  115.236981][ T5434]  __se_sys_ioctl+0xfd/0x170
[  115.241564][ T5434]  do_syscall_64+0x55/0xb0
[  115.245971][ T5434]  ? clear_bhb_loop+0x40/0x90
[  115.250638][ T5434]  ? clear_bhb_loop+0x40/0x90
[  115.255303][ T5434]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  115.261194][ T5434] RIP: 0033:0x7f291bfbf378
[  115.265608][ T5434] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d
[  115.285205][ T5434] RSP: 002b:00007ffc53fe2888 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  115.293609][ T5434] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 00007f291bfbf378
[  115.301568][ T5434] RDX: 00007ffc53ff2a80 RSI: 0000000000008914 RDI: 0000000000000012
[  115.309527][ T5434] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  115.317486][ T5434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc54002c20
[  115.325449][ T5434] R13: 00007f291bebf6c8 R14: 0000000000000028 R15: 0000000000008914
[  115.333419][ T5434]  </TASK>
[  115.336440][ T5434] Modules linked in:
[  115.384175][ T5434] ---[ end trace 0000000000000000 ]---
[  115.389672][ T5434] RIP: 0010:dummy_queue+0x1a7/0x8c0
[  115.415286][ T5434] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 82 cd 25 fb 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 ea 05 00 00 45 8b 24 24 44 89 e6 83 e6 02
[  115.439085][ T5434] RSP: 0018:ffffc900037b7688 EFLAGS: 00010206
[  115.445640][ T5434] RAX: 000000000000000a RBX: ffff888030b1fa10 RCX: dffffc0000000000
[  115.453686][ T5434] RDX: ffff88802a5a1e00 RSI: 0000000000000003 RDI: 0000000000000005
[  115.462110][ T5434] RBP: ffff888030b1fa00 R08: ffff88805d1586e3 R09: 1ffff1100ba2b0dc
[  115.472471][ T5434] R10: dffffc0000000000 R11: ffffed100ba2b0dd R12: 0000000000000050
[  115.499420][ T5434] R13: 1ffff11006163f40 R14: ffff888141f542c0 R15: ffff888141f54c00
[  115.507645][ T5434] FS:  00007f291bebf740(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  115.519131][ T5434] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  115.525836][ T5434] CR2: 000055557ee86a78 CR3: 000000002ffdf000 CR4: 00000000003506e0
[  115.533991][ T5434] Kernel panic - not syncing: Fatal exception
[  115.540276][ T5434] Kernel Offset: disabled
[  115.544590][ T5434] Rebooting in 86400 seconds..