last executing test programs:

15.492801864s ago: executing program 2 (id=1162):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}})

15.346181217s ago: executing program 2 (id=1163):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8008, &(0x7f0000001980)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRES32, @ANYBLOB="2fecfb2b47b99181063f4ea9a91ac6f65072f0152c20c39ac1fa3f98a9bf4519f1ddd806e46d4f97e3a0c06d3b224332dd177d91e19dbd12718934e5c33da190f134ef5de5cd25678f897b106a4bcc4956a5b987b8b305cec56493d8d526a15bc1359b9c7c18c1c9cf278f262b8d7fea7e8630bec974d1d44f316f6be8491fa5febafde1aece65252ae1609105a79749c16f8ef0593680b0ab39ae08bb", @ANYRESDEC, @ANYRES8, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRES8], 0xf, 0xb6, &(0x7f00000001c0)="$eJzs1zFKxEAYBeCXCDGtjQgW2qbxDp7F0kqsFEG8gRfxKh4hvYVFOhF1RJNlCdul2IXl+4qBN4+fmfZ//Xw5fe6S8piU7uTmrazd3t1fP+XvTJWZJuyHOslhkjbJ2dGY3y/Hrpr6fni46oeD843h5qOUsvDh7+WjAADAMnUu5vmnTBdf0xb4H45Xfbvl/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs2m8AAAD//6ykLvo=")
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48062, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
unlink(&(0x7f0000000100)='./file1\x00')

15.235637614s ago: executing program 2 (id=1165):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f657874656e745f63616368650000000001000000667361707072616956652c00000000486b5b5bab28b90f4dac07cf915f018f8853f025994ba5f7e78d47"], 0x1, 0x5506, &(0x7f0000000500)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

12.429426034s ago: executing program 2 (id=1183):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}})

12.294897905s ago: executing program 2 (id=1186):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x111000, 0x5)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}]}]}], {0x14, 0x10}}, 0xec}}, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000240)={@id={0x2, 0x0, @a}})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)
close(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x6, 0x1000, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0xffffffffffffffe9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x6, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x52}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r5, &(0x7f0000000180), 0x40010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
preadv2(r7, &(0x7f0000000280)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1, 0x0, 0x0, 0x0)
sendfile(r5, r3, &(0x7f0000000380)=0x2, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x800, 0x7, 0x8, 0x410, r2, 0x1, '\x00', r4, r5, 0x5, 0x3, 0x3, 0xe}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x2}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006249a000000090581030002000000090401"], 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x9c, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0xa7, 0x50, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "8264"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x1, 0x3, 0xde}, {0x6, 0x24, 0x1a, 0xfffb, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x95, 0x6, 0x7f, 0x7f}, @acm={0x4, 0x24, 0x2, 0xf}, @mdlm={0x15, 0x24, 0x12, 0xffff}, @obex={0x5, 0x24, 0x15, 0xff}, @dmm={0x7, 0x24, 0x14, 0x2, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1ff, 0xff, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1f, 0x0, 0x9}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x16, &(0x7f0000000100)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x7, 0x20, 0x1000}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x1, 0x4}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x203f}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c0a}}]})

11.510849465s ago: executing program 2 (id=1188):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a99b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407e60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2e7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f8f4ed0b27cedd1c5e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304957bc963b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="660f3881ae64409fc483b17e35e661c286000f08c4a28c03f30f0966420fc7b573000000430f1a7c01cb01cbf9341cd50d0000000f792fd536420f01c5", 0x3d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.37247414s ago: executing program 0 (id=1216):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa04710, &(0x7f0000000280)={[{@user_xattr}, {@i_version}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@nogrpid}, {@jqfmt_vfsv0}, {@delalloc}, {@nolazytime}]}, 0x0, 0x448, &(0x7f0000000740)="$eJzs28tvG8UfAPDvrpP29+sroZRHS4FAQUQ8kiYt0AMXEEgcQEKCQzkGJ61K3QY1QaJVBAGhckSVuCOOSPwFnOCCgBMSV7ijShXk0sIpaNe7qePGbh4OTuPPR9p2xjv2zNez453d2QTQs4ayf5KIPRHxW0QM1LPLCwzV/7uxMFf9e2GumsTi4pt/Jnm56wtz1bJo+b7dRWY4jUg/TYpKlpu5eOnsRK02daHIj86ee2905uKlZ86cmzg9dXrq/PiJE8ePjT3/3Pizqw8mSVru2pu19dCH04cPvvr2lderJ6+889M3Wek9xf7GODYibUgPZYH/tZhrLvd4JyrbQvY2pJO+25dha6hERNZd/fn4H4hK3Oy8gXjlk642DthU2blpZ+vd84vANpZEt1sAdEd5os+uf8vtP5p6bAnXXqxfAF1P5qo3FupbfU/f0rV8/yZeuw5FxMn5f77MtujgfQgAgFa+y+Y/T680/0vj3oZy+4q1ocGIuCsi9kfE3RFxICLuicjL3hcR999SQ9q2/ualoVvnP+nVdQe3Ctn874VibWv5/G+p3YOVIrc3j78/OXWmNnW0+E6Go39nlh9rU8f3L//6eat9jfO/bMvqL+eCRTuu9jXdoJucmJ3IJ6UdcO3jiEN9K8WfLK0EJBFxMCIOre2j95WJM09+fbhVodvH30aLdaa1WPwq4ol6/89HU/ylpP365Oj/ojZ1dLQ8Km718y+X32hV/4bi74Cs/3ctP/6biwwmjeu1M2uv4/Lvn7W8plnv8b8jeSvvlx3Fax9MzM5eGIvYkbyW55e9Pn7zvWW+LJ/FP3xk5fG/v3hPVs8DEZEdxA9GxEMR8XDR9kci4tGIONIm/h9feuzd9ce/ubL4J1f8/Vs6/pv6f+2Jytkfvm1V/+r6/3ieGi5eyX//bmO1DdzIdwcAAAB3ijR/Bj5JR5bSaToyUn+G/0DsSmvTM7NPnZp+//xk/Vn5wehPyztdAw33Q8eS+eIT6/nx4l5xuf9Ycd/4i8r/8/xIdbo22eXYodftbjH+M39Uut06YNN1YB0NuEM1j//2j2wA24nzP/Qu4x96l/EPvWul8f9RU95aAGxPzv/Qu4x/6F3GP/Qu4x960kb+rl+ilxORbolmSGxSotu/TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//Q+vspg==")
ioctl$FS_IOC_SETVERSION(r0, 0x40086607, 0x0)

3.741446737s ago: executing program 0 (id=1221):
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000f00", 0x33a)

3.337322559s ago: executing program 0 (id=1224):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

2.485142989s ago: executing program 3 (id=1231):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa04710, &(0x7f0000000280)={[{@user_xattr}, {@i_version}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@nogrpid}, {@jqfmt_vfsv0}, {@delalloc}, {@nolazytime}]}, 0x0, 0x448, &(0x7f0000000740)="$eJzs28tvG8UfAPDvrpP29+sroZRHS4FAQUQ8kiYt0AMXEEgcQEKCQzkGJ61K3QY1QaJVBAGhckSVuCOOSPwFnOCCgBMSV7ijShXk0sIpaNe7qePGbh4OTuPPR9p2xjv2zNez453d2QTQs4ayf5KIPRHxW0QM1LPLCwzV/7uxMFf9e2GumsTi4pt/Jnm56wtz1bJo+b7dRWY4jUg/TYpKlpu5eOnsRK02daHIj86ee2905uKlZ86cmzg9dXrq/PiJE8ePjT3/3Pizqw8mSVru2pu19dCH04cPvvr2lderJ6+889M3Wek9xf7GODYibUgPZYH/tZhrLvd4JyrbQvY2pJO+25dha6hERNZd/fn4H4hK3Oy8gXjlk642DthU2blpZ+vd84vANpZEt1sAdEd5os+uf8vtP5p6bAnXXqxfAF1P5qo3FupbfU/f0rV8/yZeuw5FxMn5f77MtujgfQgAgFa+y+Y/T680/0vj3oZy+4q1ocGIuCsi9kfE3RFxICLuicjL3hcR999SQ9q2/ualoVvnP+nVdQe3Ctn874VibWv5/G+p3YOVIrc3j78/OXWmNnW0+E6Go39nlh9rU8f3L//6eat9jfO/bMvqL+eCRTuu9jXdoJucmJ3IJ6UdcO3jiEN9K8WfLK0EJBFxMCIOre2j95WJM09+fbhVodvH30aLdaa1WPwq4ol6/89HU/ylpP365Oj/ojZ1dLQ8Km718y+X32hV/4bi74Cs/3ctP/6biwwmjeu1M2uv4/Lvn7W8plnv8b8jeSvvlx3Fax9MzM5eGIvYkbyW55e9Pn7zvWW+LJ/FP3xk5fG/v3hPVs8DEZEdxA9GxEMR8XDR9kci4tGIONIm/h9feuzd9ce/ubL4J1f8/Vs6/pv6f+2Jytkfvm1V/+r6/3ieGi5eyX//bmO1DdzIdwcAAAB3ijR/Bj5JR5bSaToyUn+G/0DsSmvTM7NPnZp+//xk/Vn5wehPyztdAw33Q8eS+eIT6/nx4l5xuf9Ycd/4i8r/8/xIdbo22eXYodftbjH+M39Uut06YNN1YB0NuEM1j//2j2wA24nzP/Qu4x96l/EPvWul8f9RU95aAGxPzv/Qu4x/6F3GP/Qu4x960kb+rl+ilxORbolmSGxSotu/TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//Q+vspg==")
ioctl$FS_IOC_SETVERSION(r0, 0x40086607, 0x0)

2.410484931s ago: executing program 0 (id=1233):
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000f00", 0x33a)

2.260517774s ago: executing program 0 (id=1236):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x70)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x34, 0x0, 0x0, 0x8}, {0x28}, {0x6, 0x0, 0x0, 0xd23}]}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000140))
open(0x0, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00')
getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f815110000005e140602000000000e000a001000000002800000123f", 0x2e}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000d00)={<r6=>0xffffffffffffffff})
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000480)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x1, 0x0, 0x3}, {0x6}]}, 0x10)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
close(r8)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r9, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044)
write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffecc)
splice(r6, 0x0, r8, 0x0, 0x7151, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0)

1.965502689s ago: executing program 4 (id=1237):
unshare(0x2c020400)
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_EXPBUF(r0, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x5, <r3=>r1})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0)

1.868959834s ago: executing program 3 (id=1238):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x73}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

1.838687718s ago: executing program 4 (id=1239):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8008, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

1.676769593s ago: executing program 4 (id=1241):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000340)="460fa32d03ca41ff66b80c000f00d0c744240000800000c7442402475510a0c7442406000000000f01142466b8d2008ed8260f01b500800000b805000000b9a076afca0f01d966b8af000f00d0c744240008010000c744240277000000ff1c248fe978cb990000010066baa00066b8684b66ef", 0x73}], 0x3a, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x2})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.63316651s ago: executing program 3 (id=1243):
r0 = socket(0x1e, 0x1, 0x0)
poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0)

1.542335964s ago: executing program 3 (id=1244):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5c2, 0x4)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000019c0)=0x40, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0xe20, 0x0, @mcast2}, 0x1c)

1.3749104s ago: executing program 4 (id=1245):
socket(0x0, 0x0, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x64b40, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
fcntl$setlease(r0, 0x400, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = getpid()
fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3})
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
fcntl$setown(r0, 0x8, r4)
creat(&(0x7f00000056c0)='./file0\x00', 0x0)

1.338878785s ago: executing program 3 (id=1246):
syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x140, &(0x7f0000000200)="$eJzszEFLImEcx/Hv7Myuy66uLhlYkAUdGhJzHLFbB40kIRsovHQSbKJAMxKiYwXdOvQCPFRCJ/EQHTuUdbEUwl6H0CHoWIwjiBEdOj+fyzDf/8Nvbqap4gEZ22whv7VtFovm6tiSkUosX1xe/bO6A/jdd7ffX8dg3foq0N4HK9+6YG0jZ05lCznrvx0DFYj/tbuG/faP1bx2C3ebOg61Qbvpn7RItw0rEHf39t5OYcLa+9/bewF2S4Fq5X6xUU8GJ89HZA6TgdEBqb/7zSM9MVR2+mTS5t0Z8c79KVQPPoaqlVazkVowUkYzouvTES2sadGW8dBIRveOUeadO7DyYe8XPr+ShgMJShJUOvf2jeQCaievRt7t8ALPmx6QvrpkM76f5YzX8wNZRUIQBEEQBEEQBEEQvuk9AAD//2iQbNs=")
r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000003c0)={r0, r1, r2}, &(0x7f0000000480)=""/208, 0xd0, &(0x7f0000000600)={&(0x7f0000000400)={'xxhash64\x00'}})

1.217847673s ago: executing program 4 (id=1247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000950b0b72ed7688ac36aef723cbf1da399487dcbeddb7d95ae07e3502a61ea57614b8b5ea81aeaabcd9ddac97af6e6405918a952537a6a558d13c5e0b080f49c7bbd2c4a3543ef24ebde57f4833c9df9950adf631fbc414"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000300), 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000e10000000000000000000000001811000086241a5f1b77623a7c140b9f7d9bec48566024a0d9b0f59eec7664f6eba5e2737475d9c923a3924ed0cb9a006a0d9abcc1f3c26d7b838ed532a12ccf6c5d4ffe578b", @ANYRES64, @ANYBLOB="0000000000000000b7080075bbc0c29248d491ff00000000bfa257000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='mm_page_alloc\x00', r2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a}, 0x20)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1001000, 0x1000}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180300000000b2ff00000000000000008500000007000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
preadv(r4, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0xe}], 0x3e8, 0x0, 0x0)

994.814928ms ago: executing program 0 (id=1250):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, '\x00\x00'}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x0, 0x2, 0xc2, 0x0, 0x87}})
read$hidraw(r3, 0x0, 0x0)
syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B')
close_range(r1, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffff1f}]}]}], {0x14, 0x10}}, 0x90}}, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="82", 0x1}, {0x0}], 0x2}}], 0x1, 0x0)

946.107835ms ago: executing program 3 (id=1251):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xee01, 0xee01}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000014c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x3}}, './file0\x00'})
sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, 0xc, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x6e9704600650e1de}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000001480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001440)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_USERDATA={0x53, 0xc, "0388f4aed87c44e6fa8f4a8431e995e48218328627535d30c9c32e3831e12efd5734f6f610b0dfd60032942a4083d33ee7c5064b46874439c6170931ef10f3fb8c4f94a7de89d5721160ee7a4055ef"}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xcf}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3d6f}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1c}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELSETELEM={0x1074, 0xe, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1058, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}]}, {0x104c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1008, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "dc54d1b93372877a7f1d7b66b7f0e6c308a0750333d71ba683fc2ae64a56a5d94280d0646e7b7aac15d2c2463c12b4b871aaada56566b916c5bd59f27542bb5148b4238735247658d8c89d792763f3b2863a5fee243425e6ee6d8cc9a6a492c8ebcc1cb08123befd00f89bfdb35ac577c6bde3e3f60e0ebf8db83d5c4347a77fe8a81dde9c6221c1b0233bad27ad215f6e7e5eee7206c89ce28eb184bf74bf9bdcbd27e23161f2f200a9ee8cfb24e1e0c0a787765d37e32647e8c51431d5a4ae6f766666185eba2c4370752176b4cf0a72280b28694c231ff277091e2e4f07349b17b1c61c23fde6d8796431c1a0835c3d3338d91702cba867845c6599ac3a1d769602169b2fec0798871574ea05621b8a45db7fb43416ee8dc66842b16e49c917eefef24442b65bd6050317df5f5134b633bb5236b256872cd7db46748b4454db89ead9941eab43871a1e889f4de0289c6e1c44cbd6602e710a9d777db058a28b037e46e9b37fa917d702704cbed718f03e2a4d7a4451f62fe1279955e751bc87779dbae328a338ff118c7b43084ef2c56fed56a5b36b52b1c117373a7642c93ef753d1ffd2f543dd387df923ce4c5e0e996a4deda0d1570f2f9298676f92ea098a2018a24baa0fa844af9cac03850ea4757bfefafb95e233f128e24e40dda5128ee40f574f007181acd214c434d07e3922ab02a480f18268359e287d08eeb0fc5456386e6028cb61d8bb3143ac056a6bd173d154fb6aaf1009ee3efdf20b9502964345e6c482c7a24e038ad3476d1f595375a1e132c417bc03ef9f16ee8ae1d03a36727fb1e113c9518121e4a9250f2bf33451b34748a7eb749ac4e58ba4bd7c6e2850b75250e04cec705467637360430106b21e055a02a642bd4dc7f1981a99c1a299c9f4f066c9f12863ab0aa0c266351d02209d3e68f6590302bdfe5a96a7e9f7227b1b0c441b4f3a3f9b2d29c9039ee6780624b9e3b16901249db597372b2b4aeb70ab9dd250ab2d45f22de658a7ec6d1627b10a38c8e6a1f2e353826db7c15417611bbd45066f9e4f9070a04b24717c571620ebe3ff3330928883cfad3c6005dc639672f22c56c2994c5fe8af5784cbb46f52866fb427ecec06e75b74e0d1388c300e27ae1f852b64f2ccfc7ebd0ebead9209e3753eab6c32dadb7c09370b1991c5df199d902135b1409a4ac81409144e754a59489826b71bce1ec69ca52e0ad080a04fe02e01e885ca48a72e0257eddd84ce40dda6b52f21c3b12d8b4f41f34bf5d4603108a9599dac19264f4d5513d94b1f7c1d3ea4379ceef05e7c4b500eb120cbe1c68314e1a34f9e26f605c32ec2f9dc4a7d4eb8c7b7eff3cfb4cc82e4cf2c85ced0bab4da4ee275ce87765678c42fc2a2ccb37744832d43e96dcf44a6503ecaea0a495461e4fb314648dda418f9cbcd6e6e061ea6d8c6d239de4378427b2a0b64c81c7d2c5460d4e1dd46a6adf27d35ee8222beef2908de49f239779c6eff19612fb463c499f08cf600ea5cd03287c5f05a9f47687aa4d0710f0ca21d16fc937a652111c03166aa5ab52be20dbd11b76281d22f49b3b92e4a461d6a4182ae9d15bb205357fbc8d388316d19005ecbeb5060ea1c3fe577d6dda9c5469dd4a10796e32baa40036831d086dec4e3d57dbaec1d35f849708b37faf78984c7928b2c32456fc0c61c4514ff897080a2c2f96973cc3a1ed9c62ef45ba3642e14e6154abc976abf0d2e1b635313b6d33502d5878874127701a13f7b8f674818ef41b820286bbedbdbf08dce064fa3ec46c7ee7d33e0634c571fe356c8ed32d4c79315d7118abe405e4206f09b3d7d29f148a0e3ef15311ea1ca0af80c0d0990921e9d1a073e2d4f04e256ee36f0dfa68ec31f0a5129155556a7ed72f9aec13e73314e440af7c93d97f8ea451b968089f93436e776799852a349b43557961530bf715483a98fd894c89512a2dda1cbe81eb1d4350dc9e30d405ee323486903a6a5306cf39970e5158132b274549bb784f330dd857cd58f98dc1adee43a0891f756a8b597577c3e6aa9890ad5000e009ed23cdce475cb6b26db943a0cb0a5b87a5022634949a2ce23a3a30ed6235efa520b98b45627624d99e0d1e048eea254a91e2ad735b9911e6c15aeba66cadcbc5bf23a61353d670ff578cae1eb4a52a0b19d6793cf43b6f444f0a6bd0a4ccdb16197c0706055604285f84e35d6a468bf61f91dce6eb3a9ca0c6c833fd88082638155c2e040e7bbb672d23226405c063586f7cd8e09149b7e773a52d933bbd752da383ffebdb3111570165ecb24245f0ec30423409ab092f6c5a7041d96139e3dc3233ca74205cb4dc7bed1745b94161967561eca3664c22ca7a730ead92333c5d4d92df65d4d38b84d8f26022483603dd59aefc357ea9de64fc943c5399a66ea9fb5675f17182aab871d63b7551c1d79422181daf1a0961fc321a368c33d1ebfb8d81c0eb4a933be0d081a79ec7fe8a49826aca04b3a530d8d9c4903b1cfcd66377f9ce4c353ee8967dca0e6b45d546184ee7d67947aac27d612bddee075bad2427497d0069c7ed4cd0b1e9b19adb1fbc647ad0a2cf7bf1f50b413b189e95b3cf464cea556e3c521ccadacffce40c89a52c30ee209aba597926360002c90fff27c4de54ac2e978e8d5961ea8a121edab196e4e161047715273b21c4e6761a188ff0ca5062fb0e2b09790b1fc29a31c2fd0e2c057af81331b52a915c0ab4c74bda72b76281c607a17834f94a3e487e572390527720154177650467a6b1eba04ea360ad1d63ad083f089997e791dcfb097aa100aeb09a6f1bf741d300595f6e70698f3f6b7e7bb83a45f2205c7b12c41c465e9450fa7248e494040bb8ece87376c97c903321c20c9ece9a87b2d3db961c5bce034343c40915933f1e776e6c35ef234c1ca62dc5fe6d3036a4cca8e862e352365d8e01aa86aa177711af5be77a804075ffc03328f44580022955ca02b3d045b1f3c045ee80132367b6712c9abfd248d8d25432070bb9b0f5c444c4b7e30b190e4e1b58e78debdd87c5428f46fd34e43dadeae6b718af74ac1e8f2f3cf2003821dda14b9d97bee1d1bcf8a7cab079e8492c2013e6a38a6ed85cf551db182fab574ba7f3cb7def152d528c85fbbdabfab7804e4251269888dae119e907dc8c7ef594b6c87ccc749978db6158cbb0d73bae6b74df1d4f4b97e46918c9aac104f5db6be2c1ba9e82b4b900ddfeae4f2159d92dfa35ce0dcdcd86643df122fc50c07868c5b1cba0619b62d6db4c7a4a3007a24404c4c66ec187796a83c93043ca013b59cbc02737eaaf5a6d20f08ac45e60e3f738c894e6778a992eb0674a61c412ab4ff473d869cd2f54925462c6d927584f803ff574d71690ed7611c701d0c81130bf4b9becd9891adcd3a25c10551732628b4e7510c4dacc8f7176dd5a66b9996f0e50ba62b91dbac5e7371db4e0b156750c231f77ffb479bc91a9eca454659629275ccace301ca094d86fce61da4fe489bbf7c69b59fb388707dcaea4d67f42df98f152c9764dd3ba9fd78ff3106c8d494607b1c697d5fd9488ae0b9a9ebdd567b3e66cf25f0476293073cd80e69b77bd3deda8c96c16b7ae034f166d0572b1bc504e0f774572c2252d261991619fb17d85dc62ca0aa8fb235a78b83773c4e10851049f23e266136a79c3e337b0bd4940a6c84778617deccfa6e843c4971aacf534e1bb01897a7b86521b98eac13b30a2ee61b670773867a707762ff8d324f56b92c3f40e8a7a55af64d48dfce104043dd6dd119a4a09bfbf997c9abf03b74d9fe08cf90bcadc51de3ecd5e57eaa73f892f3189aeb8491fd41bb139d19536734a355211af9b131c203dbe44ac76ad4e687d5963c687f10264d99d17a17cf35e229504ef447727830dc98723abd9caace0ca7fb86b68faf9e239cf047203488e5afa8195497579a7aa8d3068cc0476f70197c7cd107cbddcc32e924ee5b091f2c35521b926b871440a3a893ad418f02a31faa2af261fce4db33f162df62de08556245e493f3e9411d694b344691ebf634c8d2021ee7f7a4a7c73336ea43cb688b5236882e60b1626fd9d959692e5e0e3daef7abfc8df4700efb4433e853b91b3a968a03d56d2029b4e8243f07a38ead74960579a62c011e3c0332e14d1c6f24f6df9a7044984e9542ce099f76f1d649b44d8b921df834575708e9617c01bfd527f8d9319f37bd79db2287e780308fd85f38a3ac6f8b62c008241f4c0157497ddfda419363d4f92cde61725bd6cc8bf55d9711a25a42f33b6f484a6e19a657329bb4174e2617913b0e1295783f53359cd9a8e1a0994fdff26395479d4cd31aa902e6e52960d3d1d42b522fd042925951bbecb1bcd0311e1084be6e92e11435bdfb3235d6c2573f388ed8abf093e52ab29cb5dd614d1152c38aa74a04dd326f4272722fa1270f2e5a38af040c4554fb463b692dc31eefcb2c42a3cb4029c05979d4428fee2053b916c3e05dde49014fd0f4985db6a47ffdd35f5b73a8b743f19e3285e0f8b7cc8d37c5d841665c58f1042e636312f75b761b90b05245e9e79ba69d03693caab5a0edbc78c1780d90b5c9040d13413812be38e952858775b380e5918b77e3951631bcb6566dff1a12988c5b4dac5a38046ff526752a1d4b114164f46666a15e0807101e5b1e30edc31950c58fccb239aaa98f7cc925329293ba6a402ec9fb994a81a2f63f799164b7a80031d87d2291dfe4f822c523aae711c73c7a0b3aa60343a94fec1d30a9507dbf04caa32dbb8d5106de5b2ac9f310c86e106145cf32f9a5abcd6c5eadd6c525a2e05befef01a9f3ecfb8d21d4f2674e73287b8d84bf2ea6040cd0eb377881b9c2fd997e6c81501d37944ab4423c412709a532397cf0aa8dc11a3caa8fba39a33a26670587ffdfae7035fff90f2ba927c07c5664eb9172a9bee6f46909bb7348f6d95594ae65c99f25aee901aca9cbc6abf0608e11e8ae593c72200e918c2b0360f57b96041e1097346dc0e937bb1b8a368e6cf6bef0f2879ab1c42f15a10e225bf5b280f8849a92605f1907bc9a32ac9941489fc06ceaf62484b104b1a663216b1aa2e4db3987fc0b8ac6158b7be8ad3588db726ce0f68b0bc2599420fa76720725d48cae94e8f77e1997378c494fa8af5bb8e2f154d31f8d14f0f1a30847466547b842e66882d9980f62b3fbfaaadfcfa4c640184fd47bc7184dbcf11684c1a02e142c4a55f14db688ca3e7e188db777be30ce552fd88f55c56df6a5d6226cdaa65a109bca01fd514cc187af6ceca8e5ac9997a7af0e0e08a8e50306547fa56dfce583280a813dd50189c0aa337ccdc2ca1be482ceb883b5e98f46dff5ab1b969f88bd45b568ac2c9bce94b648d01da2937a5c8ebcea9ecffa45014f94130d8e64f1cf08b54c69a22a621775fe88aac9f8f81bbca2393a801dd8da80c92be7769e4e5ce0f97ea82e0ed6368b2659e306fca51ac8714fb8b9c1e13415a68d803a91d587cda4e56681323884b26c0cb7d7fc8b3b2e0c9df0089c74b567790d69f874ea85942bff7dae0ade1524359c02b0a675823d7fb3037b8e4fdc4560b252e0007c4462aa2fb973e9dd7166d9284cfd1b3a4ed34d989a9ca3a6fbe7cf964dbb41625d8ae280df6db1f036e9b69f907c3cec2942956fadcabdaa6f5e75928e88409c899850a2fb0996cab9f56da3f3cee98a6a4256b08649a6ecc1392cec3eca5b498766d3ebf018009dd183211db4c0c9d905aeef432ac669465d4eefeb0a430999025b6e6a5bd3cef4542df9bcd489"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc, 0x1, "832579aa18ef3031"}]}, @NFTA_SET_ELEM_EXPR={0x4}]}]}]}, @NFT_MSG_DELOBJ={0xa4, 0x14, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x5f, 0x8, "212301600e8fbc8757071c538a51bbc57bbe8e42a3db572e0de7dabb73e92459353b7bcd7efe6cdc4b3071d1a7e8e3bc4516b334da3344377745a8742353b25e020ef45ea2943f31fc04d7347ed292c46e07bd2d71a66908556133"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x14}}, 0x125c}, 0x1, 0x0, 0x0, 0x4004044}, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x601, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x14713e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x2000, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0xa, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r5], 0xc63b9e35)

406.919578ms ago: executing program 1 (id=1254):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="371692e7f7ef"})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="371692e7f7ef"})

310.905653ms ago: executing program 1 (id=1255):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5c2, 0x4)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000019c0)=0x40, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0xe20, 0x0, @mcast2}, 0x1c)

264.15354ms ago: executing program 1 (id=1256):
socket(0x0, 0x0, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x64b40, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
fcntl$setlease(r0, 0x400, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = getpid()
fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3})
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
fcntl$setown(r0, 0x8, r4)
creat(&(0x7f00000056c0)='./file0\x00', 0x0)

159.540216ms ago: executing program 1 (id=1257):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

59.297651ms ago: executing program 1 (id=1258):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02125f021700000027bd7000ffdbdf25010014248108e3e1677a5d009600000000000000000000002f030000000000000000000000300000040004000000000800000000000000194800000000000005001a00ff020000000000000000000000000001fc02000000000000000000000000000009"], 0xb8}}, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x9df})

630.1µs ago: executing program 1 (id=1259):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21)
socketpair(0x8, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x34}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'pimreg\x00'})
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)
r5 = socket(0x1f, 0x5, 0x1f)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000075b2c8f7000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r7, 0x890b, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={0x0}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)

0s ago: executing program 4 (id=1260):
syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x140, &(0x7f0000000200)="$eJzszEFLImEcx/Hv7Myuy66uLhlYkAUdGhJzHLFbB40kIRsovHQSbKJAMxKiYwXdOvQCPFRCJ/EQHTuUdbEUwl6H0CHoWIwjiBEdOj+fyzDf/8Nvbqap4gEZ22whv7VtFovm6tiSkUosX1xe/bO6A/jdd7ffX8dg3foq0N4HK9+6YG0jZ05lCznrvx0DFYj/tbuG/faP1bx2C3ebOg61Qbvpn7RItw0rEHf39t5OYcLa+9/bewF2S4Fq5X6xUU8GJ89HZA6TgdEBqb/7zSM9MVR2+mTS5t0Z8c79KVQPPoaqlVazkVowUkYzouvTES2sadGW8dBIRveOUeadO7DyYe8XPr+ShgMJShJUOvf2jeQCaievRt7t8ALPmx6QvrpkM76f5YzX8wNZRUIQBEEQBEEQBEEQvuk9AAD//2iQbNs=")
r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000003c0)={r0, r1, r2}, &(0x7f0000000480)=""/208, 0xd0, &(0x7f0000000600)={&(0x7f0000000400)={'xxhash64\x00'}})

kernel console output (not intermixed with test programs):

69][ T5587] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  160.307032][ T5587] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  160.330362][ T5587] vhci_hcd vhci_hcd.0: Device attached
[  160.431624][ T4879] vhci_hcd: vhci_device speed not set
[  160.548440][ T4884] vhci_hcd: vhci_device speed not set
[  160.572443][ T4880] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  160.591246][ T5603] loop3: detected capacity change from 0 to 16
[  160.620411][ T5601] loop4: detected capacity change from 0 to 4096
[  160.629282][ T5603] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 10, please upgrade kernel version
[  160.647499][ T4884] usb 11-1: new full-speed USB device number 2 using vhci_hcd
[  160.701422][ T5601] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  160.828083][ T5601] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  160.838222][ T5601] ntfs3: loop4: Failed to load $Extend.
[  160.982715][ T5611] netlink: 'syz.0.538': attribute type 11 has an invalid length.
[  161.049559][ T4880] usb 2-1: Using ep0 maxpacket: 16
[  161.117470][   T26] audit: type=1326 audit(161.013:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5606 comm="syz.3.543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7c2421b99 code=0x0
[  161.187092][ T4880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.321969][ T4880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  161.371958][ T4880] usb 2-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  161.445775][ T4880] usb 2-1: config 1 interface 0 has no altsetting 0
[  161.465806][ T4880] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  161.488573][ T4880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.576425][ T4880] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  161.649057][ T5623] loop0: detected capacity change from 0 to 8
[  161.857074][ T5623] SQUASHFS error: zlib decompression failed, data probably corrupt
[  161.881205][ T4886] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  161.908860][ T5623] SQUASHFS error: Failed to read block 0x9b: -5
[  161.924520][ T5623] SQUASHFS error: Unable to read metadata cache entry [99]
[  161.968303][ T5623] SQUASHFS error: Unable to read inode 0x127
[  162.294196][ T4886] usb 4-1: config 0 has no interfaces?
[  162.300990][ T4886] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  162.493296][ T4886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.606890][ T4886] usb 4-1: config 0 descriptor??
[  162.843612][ T5624] loop4: detected capacity change from 0 to 32768
[  162.929275][ T5624] XFS: attr2 mount option is deprecated.
[  162.966362][ T5613] IPVS: set_ctl: invalid protocol: 44 10.1.1.4:0
[  162.985269][ T4886] usb 2-1: USB disconnect, device number 3
[  163.002869][ T5589] vhci_hcd: connection reset by peer
[  163.032696][ T4037] vhci_hcd: stop threads
[  163.036988][ T4037] vhci_hcd: release socket
[  163.044913][ T4037] vhci_hcd: disconnect device
[  163.063792][ T5624] XFS (loop4): Mounting V5 Filesystem
[  163.205839][ T5624] XFS (loop4): Ending clean mount
[  163.230631][ T5624] XFS (loop4): Quotacheck needed: Please wait.
[  163.287611][ T4037] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 
[  163.326598][ T4037] XFS (loop4): Unmount and run xfs_repair
[  163.339227][ T4037] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  163.365041][ T5633] loop0: detected capacity change from 0 to 32768
[  163.375586][ T4037] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  163.387607][ T4037] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  163.400620][ T4037] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  163.416177][ T4037] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  163.427322][ T4037] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  163.442530][ T4037] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  163.455633][ T4037] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  163.469637][ T4037] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  163.484841][ T4037] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74
[  163.499126][ T5624] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  163.626513][ T4249] XFS (loop4): Unmounting Filesystem
[  163.721536][ T5649] ip6t_srh: unknown srh invflags 7863
[  163.857271][ T5652] netlink: 'syz.2.555': attribute type 11 has an invalid length.
[  164.032362][ T5656] loop1: detected capacity change from 0 to 4096
[  164.083530][ T3540] usb 4-1: USB disconnect, device number 3
[  164.189030][ T5656] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  164.327605][ T5656] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  164.334986][ T5656] ntfs3: loop1: Failed to load $Extend.
[  165.239370][ T5676] ip6t_srh: unknown srh invflags 7863
[  165.796638][ T4884] vhci_hcd: vhci_device speed not set
[  165.962915][ T5694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.571'.
[  166.751200][ T5702] loop0: detected capacity change from 0 to 4096
[  166.824651][ T5702] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  166.833428][ T5672] loop4: detected capacity change from 0 to 32768
[  166.884326][ T5672] XFS: attr2 mount option is deprecated.
[  166.899931][ T5702] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  167.006620][ T5702] ntfs3: loop0: Failed to load $Extend.
[  167.336183][ T5672] XFS (loop4): Mounting V5 Filesystem
[  167.655089][ T5672] XFS (loop4): log mount failed
[  167.726789][ T5727] ip6t_srh: unknown srh invflags 7863
[  169.765810][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.595'.
[  169.900014][ T5765] loop4: detected capacity change from 0 to 4096
[  170.010703][ T5765] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  170.090958][ T5765] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  170.118356][ T5765] ntfs3: loop4: Failed to load $Extend.
[  170.514018][ T5776] loop4: detected capacity change from 0 to 512
[  170.673626][ T5776] EXT4-fs (loop4): orphan cleanup on readonly fs
[  170.758321][ T5776] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.600: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  170.827652][ T5783] loop3: detected capacity change from 0 to 512
[  170.866997][ T5776] EXT4-fs error (device loop4): ext4_quota_enable:6390: comm syz.4.600: Bad quota inode: 4, type: 1
[  171.048454][ T5783] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.603: corrupted in-inode xattr
[  171.076990][ T5776] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  171.111403][ T5783] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.603: couldn't read orphan inode 15 (err -117)
[  171.212143][ T5776] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  171.477478][ T5783] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  171.953232][ T5776] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  171.997852][ T5783] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  172.050856][ T5783] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  172.075857][ T5783] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  172.125701][ T5795] loop0: detected capacity change from 0 to 64
[  172.152080][ T5798] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  172.364851][ T5798] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.600: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  172.438362][ T5798] EXT4-fs error (device loop4): ext4_quota_enable:6390: comm syz.4.600: Bad quota inode: 4, type: 1
[  172.462595][ T5802] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  172.469267][ T5802] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  172.496444][ T5798] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  172.515445][ T5802] vhci_hcd vhci_hcd.0: Device attached
[  172.707274][ T4878] vhci_hcd: vhci_device speed not set
[  172.787737][ T4878] usb 15-1: new full-speed USB device number 2 using vhci_hcd
[  172.807927][ T4884] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  172.838030][ T4880] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  173.169987][ T4884] usb 4-1: Using ep0 maxpacket: 16
[  173.310912][ T4880] usb 1-1: config 0 has no interfaces?
[  173.318058][ T4884] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.332162][ T4880] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  173.381388][ T5828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.614'.
[  173.415369][ T4884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  173.425124][ T4880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.464025][ T4884] usb 4-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  173.488489][ T4880] usb 1-1: config 0 descriptor??
[  173.541204][ T4884] usb 4-1: config 1 interface 0 has no altsetting 0
[  173.566926][ T4884] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  173.587320][ T4884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.674672][ T4884] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  174.887836][ T3855] usb 4-1: USB disconnect, device number 4
[  174.898498][ T5806] vhci_hcd: connection reset by peer
[  174.927352][ T4036] vhci_hcd: stop threads
[  174.949022][ T4036] vhci_hcd: release socket
[  174.991030][ T4036] vhci_hcd: disconnect device
[  175.082922][ T5850] device syzkaller0 entered promiscuous mode
[  175.245950][ T5854] netlink: 120 bytes leftover after parsing attributes in process `syz.1.622'.
[  175.584209][ T3246] usb 1-1: USB disconnect, device number 6
[  175.845144][ T4885] Bluetooth: hci4: command 0x0406 tx timeout
[  175.847192][ T5871] loop3: detected capacity change from 0 to 128
[  175.889361][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'.
[  176.008479][ T5878] loop0: detected capacity change from 0 to 512
[  176.179203][ T5878] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.631: corrupted in-inode xattr
[  176.197048][ T5878] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.631: couldn't read orphan inode 15 (err -117)
[  176.293377][ T5878] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  176.381658][ T5887] netlink: 120 bytes leftover after parsing attributes in process `syz.3.635'.
[  176.404003][ T5878] EXT4-fs warning (device loop0): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  176.433650][ T5878] EXT4-fs warning (device loop0): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  176.462621][ T5878] EXT4-fs warning (device loop0): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  176.813545][ T5894] loop3: detected capacity change from 0 to 4096
[  176.856761][ T5894] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  176.901228][ T5899] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  176.907797][ T5899] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  176.995795][ T5894] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  177.009346][ T5899] vhci_hcd vhci_hcd.0: Device attached
[  177.182193][ T4886] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  177.201673][ T4885] vhci_hcd: vhci_device speed not set
[  177.229247][ T5894] ntfs3: loop3: ino=0, "file0" The size of extended attributes must not exceed 64KiB
[  177.272020][ T4885] usb 9-1: new full-speed USB device number 2 using vhci_hcd
[  177.464896][ T4886] usb 1-1: Using ep0 maxpacket: 16
[  177.559602][ T5913] loop3: detected capacity change from 0 to 128
[  177.689478][ T4886] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  177.720545][ T4886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  177.739851][ T4886] usb 1-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  177.753893][ T4886] usb 1-1: config 1 interface 0 has no altsetting 0
[  177.762137][ T4886] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  177.772041][ T4886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.788146][ T5914] input: syz1 as /devices/virtual/input/input12
[  177.878331][ T4886] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  177.944044][ T5920] loop1: detected capacity change from 0 to 1024
[  178.096610][ T4878] vhci_hcd: vhci_device speed not set
[  178.125090][ T5920] hfsplus: bad catalog entry type
[  178.185485][ T1191] hfsplus: b-tree write err: -5, ino 4
[  178.287410][ T4884] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  178.555484][ T5900] vhci_hcd: connection reset by peer
[  178.560765][ T3543] usb 1-1: USB disconnect, device number 7
[  178.567901][ T4036] vhci_hcd: stop threads
[  178.572514][ T4884] usb 4-1: Using ep0 maxpacket: 8
[  178.578071][ T4036] vhci_hcd: release socket
[  178.591889][ T4036] vhci_hcd: disconnect device
[  178.719724][ T4884] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01
[  178.739709][ T3246] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  178.747842][ T4884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.767325][ T4884] usb 4-1: config 0 descriptor??
[  178.796926][ T5945] loop1: detected capacity change from 0 to 128
[  178.846564][ T4884] usb 4-1: unknown interface protocol 0x3f, assuming v1
[  178.876659][ T4884] usb 4-1: cannot find UAC_HEADER
[  178.983726][ T3246] usb 5-1: Using ep0 maxpacket: 8
[  179.079562][ T4884] snd-usb-audio: probe of 4-1:0.0 failed with error -22
[  179.111724][ T4884] usb 4-1: USB disconnect, device number 5
[  179.122694][ T3246] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  179.152804][ T3246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.175679][ T5950] loop1: detected capacity change from 0 to 1024
[  179.199592][ T3246] usb 5-1: config 0 descriptor??
[  179.259632][ T5950] hfsplus: bad catalog entry type
[  179.317550][ T1191] hfsplus: b-tree write err: -5, ino 4
[  179.377408][ T5952] loop1: detected capacity change from 0 to 64
[  179.409293][ T5954] fuse: Bad value for 'fd'
[  179.884892][ T5968] input: syz0 as /devices/virtual/input/input13
[  179.907732][ T5933] netlink: 'syz.4.651': attribute type 10 has an invalid length.
[  179.980559][ T5933] team0: Device veth1_macvtap failed to register rx_handler
[  180.074730][   T26] audit: type=1804 audit(179.852:113): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.667" name="/root/syzkaller.m0O86M/34/file0" dev="sda1" ino=1949 res=1 errno=0
[  180.080895][ T5973] loop0: detected capacity change from 0 to 128
[  180.113778][ T5971] overlayfs: './file0' not a directory
[  180.147117][ T5975] device vlan2 entered promiscuous mode
[  180.647230][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  180.717438][ T5992] netlink: 'syz.2.674': attribute type 21 has an invalid length.
[  180.728725][ T5992] netlink: 'syz.2.674': attribute type 1 has an invalid length.
[  180.943082][ T3855] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  181.089239][ T6014] netlink: 'syz.2.685': attribute type 21 has an invalid length.
[  181.097183][ T6014] netlink: 'syz.2.685': attribute type 1 has an invalid length.
[  181.305103][ T3543] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  181.357080][   T26] audit: type=1804 audit(181.136:114): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.687" name="/root/syzkaller.QxiB8G/104/file0" dev="sda1" ino=1999 res=1 errno=0
[  181.392851][ T6019] overlayfs: './file0' not a directory
[  182.196803][ T3855] usb 2-1: New USB device found, idVendor=16d8, idProduct=7001, bcdDevice=4f.c7
[  182.205899][ T3855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.228940][ T3855] usb 2-1: config 0 descriptor??
[  182.256991][ T3543] usb 4-1: Using ep0 maxpacket: 8
[  182.309529][ T6031] loop0: detected capacity change from 0 to 1024
[  182.382891][ T3543] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.402956][ T3543] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 37, using maximum allowed: 30
[  182.413379][ T6031] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  182.416787][ T3543] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  182.438264][ T4885] vhci_hcd: vhci_device speed not set
[  182.456253][ T3543] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  182.476149][ T6031] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback.
[  182.479395][ T3543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.546978][ T3543] usb 4-1: config 0 descriptor??
[  182.588418][ T1065] usb 2-1: USB disconnect, device number 4
[  182.649044][ T3246] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  182.685028][ T3246] asix: probe of 5-1:0.0 failed with error -71
[  182.715808][ T3246] usb 5-1: USB disconnect, device number 5
[  182.810905][ T6006] loop0: detected capacity change from 0 to 7
[  182.839227][ T6006] Dev loop0: unable to read RDB block 7
[  182.846121][ T6006]  loop0: unable to read partition table
[  182.852636][ T6006] loop0: partition table beyond EOD, truncated
[  182.865752][ T6006] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  182.865752][ T6006] 
) failed (rc=-5)
[  182.970736][ T3543] usb 4-1: string descriptor 0 read error: -71
[  182.999136][ T3543] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  183.008879][ T3543] usb 4-1: USB disconnect, device number 6
[  183.056467][ T6064] netlink: 'syz.0.697': attribute type 21 has an invalid length.
[  183.065204][ T6064] netlink: 'syz.0.697': attribute type 1 has an invalid length.
[  183.149845][ T6066] netlink: 120 bytes leftover after parsing attributes in process `syz.0.698'.
[  183.226938][ T5933] syz.4.651 (5933) used greatest stack depth: 19320 bytes left
[  183.402217][ T6079] loop4: detected capacity change from 0 to 1024
[  183.563402][ T6079] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  183.583554][ T4878] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  183.618652][ T6079] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback.
[  183.755872][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  183.811790][ T6097] loop1: detected capacity change from 0 to 64
[  183.813578][ T6099] netlink: 120 bytes leftover after parsing attributes in process `syz.3.711'.
[  183.865224][ T4878] usb 1-1: Using ep0 maxpacket: 16
[  184.009084][ T4878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  184.061724][ T4878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  184.081047][ T4878] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  184.100959][ T4878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.172399][ T4878] usb 1-1: config 0 descriptor??
[  184.268482][ T6112] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  184.278164][ T4879] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  184.648547][ T1065] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  184.692805][ T6072] udc-core: couldn't find an available UDC or it's busy
[  184.706461][ T4879] usb 2-1: config 0 has no interfaces?
[  184.712074][ T4879] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  184.728022][ T6072] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  184.737242][ T4879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.746671][ T6072] udc-core: couldn't find an available UDC or it's busy
[  184.770830][ T6072] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  184.779603][ T4879] usb 2-1: config 0 descriptor??
[  184.822241][ T4878] hid (null): bogus close delimiter
[  184.833706][ T4878] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0
[  184.869329][ T4878] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0
[  184.876785][ T4878] hid-generic 0003:0158:0100.0005: bogus close delimiter
[  184.889877][ T1065] usb 4-1: Using ep0 maxpacket: 8
[  184.901603][ T6130] loop4: detected capacity change from 0 to 1024
[  184.910306][ T4878] hid-generic 0003:0158:0100.0005: item 0 0 2 10 parsing failed
[  184.930049][ T4878] hid-generic: probe of 0003:0158:0100.0005 failed with error -22
[  184.965342][ T6130] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  184.998421][ T6130] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback.
[  185.010215][ T1065] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.044059][ T1065] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 37, using maximum allowed: 30
[  185.050838][ T4878] usb 1-1: USB disconnect, device number 8
[  185.066313][ T1065] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  185.090221][ T1065] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  185.099765][ T1065] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.122219][ T1065] usb 4-1: config 0 descriptor??
[  185.332748][ T6135] fuse: Bad value for 'fd'
[  185.371463][ T6116] loop0: detected capacity change from 0 to 7
[  185.426641][ T6116] Dev loop0: unable to read RDB block 7
[  185.454847][ T6116]  loop0: unable to read partition table
[  185.487436][ T6116] loop0: partition table beyond EOD, truncated
[  185.510296][ T6116] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  185.510296][ T6116] 
) failed (rc=-5)
[  185.602850][ T1065] usb 4-1: string descriptor 0 read error: -71
[  185.624702][ T1065] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  185.695550][ T1065] usb 4-1: USB disconnect, device number 7
[  185.813308][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  186.054872][ T3543] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  186.105381][ T3246] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  186.135520][ T4878] Bluetooth: hci0: command 0x0406 tx timeout
[  186.306208][ T3543] usb 1-1: Using ep0 maxpacket: 8
[  186.388115][ T6163] loop3: detected capacity change from 0 to 512
[  186.437170][ T3543] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  186.462811][ T3543] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  186.476915][ T3246] usb 5-1: New USB device found, idVendor=16d8, idProduct=7001, bcdDevice=4f.c7
[  186.487407][ T3246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.498083][ T3246] usb 5-1: config 0 descriptor??
[  186.516109][ T6163] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.737: bg 0: block 393: padding at end of block bitmap is not set
[  186.536728][ T6163] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6186: Corrupt filesystem
[  186.557438][ T6163] EXT4-fs (loop3): 2 truncates cleaned up
[  186.563648][ T6163] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  186.580874][ T6167] openvswitch: netlink: Flow key attr not present in new flow.
[  186.647961][ T3543] usb 1-1: New USB device found, idVendor=8d89, idProduct=8139, bcdDevice=ef.13
[  186.660224][ T3543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.668680][ T3543] usb 1-1: Product: syz
[  186.677770][ T3543] usb 1-1: Manufacturer: syz
[  186.683622][ T3543] usb 1-1: SerialNumber: syz
[  186.693311][ T3543] usb 1-1: config 0 descriptor??
[  186.898672][ T4883] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  186.964019][ T3543] usb 5-1: USB disconnect, device number 6
[  187.027387][ T3246] usb 2-1: USB disconnect, device number 5
[  187.295501][ T4883] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  187.331473][ T4883] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.373301][ T6185] loop1: detected capacity change from 0 to 1024
[  187.379790][ T4883] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  188.215673][ T4883] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.228801][ T4883] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.352848][ T6185] hfsplus: bad catalog entry type
[  188.366568][ T4883] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  188.382554][ T4883] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  188.392693][ T4883] usb 4-1: Product: syz
[  188.411232][ T3543] usb 1-1: USB disconnect, device number 9
[  188.411601][ T4883] usb 4-1: Manufacturer: syz
[  188.504462][ T3849] hfsplus: b-tree write err: -5, ino 4
[  188.511440][ T4883] cdc_wdm 4-1:1.0: skipping garbage
[  188.530616][ T4883] cdc_wdm 4-1:1.0: skipping garbage
[  188.575223][ T4883] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  188.593197][ T4883] cdc_wdm 4-1:1.0: Unknown control protocol
[  188.764198][ T6215] loop1: detected capacity change from 0 to 64
[  188.765334][ T6163] cdc_wdm 4-1:1.0: Error submitting int urb - -90
[  189.309320][ T3543] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  189.379597][ T3246] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  189.535457][ T4883] usb 4-1: USB disconnect, device number 8
[  189.632695][ T3246] usb 1-1: Using ep0 maxpacket: 8
[  189.751279][ T3246] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  189.801676][ T3543] usb 2-1: config 0 has no interfaces?
[  189.807347][ T3543] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  189.831699][ T3246] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  190.318132][ T3543] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.603934][ T3543] usb 2-1: config 0 descriptor??
[  190.735766][ T3246] usb 1-1: New USB device found, idVendor=8d89, idProduct=8139, bcdDevice=ef.13
[  190.779251][ T3246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.797690][ T3246] usb 1-1: Product: syz
[  190.804236][ T3246] usb 1-1: Manufacturer: syz
[  190.809465][ T3246] usb 1-1: SerialNumber: syz
[  190.827624][ T3246] usb 1-1: config 0 descriptor??
[  192.380756][ T3855] usb 2-1: USB disconnect, device number 6
[  192.650071][ T4036] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.726250][ T6300] tmpfs: Bad value for 'mpol'
[  192.797164][ T4036] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.798309][ T4883] usb 1-1: USB disconnect, device number 10
[  193.890078][ T4036] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.998453][ T6317] loop4: detected capacity change from 0 to 64
[  194.047677][ T6315] ip6gretap0 speed is unknown, defaulting to 1000
[  194.255125][ T4036] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.633903][ T6329] loop0: detected capacity change from 0 to 256
[  194.842997][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  194.849361][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  195.600178][ T4879] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  196.402289][ T4883] Bluetooth: hci1: command 0x0409 tx timeout
[  196.689141][ T6352] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 0 (only 8 groups)
[  196.692689][ T6315] chnl_net:caif_netlink_parms(): no params data found
[  196.934795][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.944494][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.954773][ T6315] device bridge_slave_0 entered promiscuous mode
[  196.964881][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.965779][ T6355] ip6gretap0 speed is unknown, defaulting to 1000
[  196.973370][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.987291][ T6315] device bridge_slave_1 entered promiscuous mode
[  197.020866][ T4879] usb 5-1: unable to read config index 0 descriptor/start: -71
[  197.028592][ T4879] usb 5-1: can't read configurations, error -71
[  197.145591][ T6315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.220749][ T6315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.368949][   T26] audit: type=1326 audit(197.077:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.0.822" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f015eefab99 code=0x0
[  197.482484][ T6385] loop0: detected capacity change from 0 to 512
[  197.501000][ T6315] team0: Port device team_slave_0 added
[  197.517388][ T6315] team0: Port device team_slave_1 added
[  197.619018][ T6386] loop4: detected capacity change from 0 to 256
[  198.340843][ T6385] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #16: comm syz.0.822: corrupted inode contents
[  198.438846][ T6385] EXT4-fs error (device loop0): ext4_dirty_inode:5993: inode #16: comm syz.0.822: mark_inode_dirty error
[  198.454361][ T6385] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #16: comm syz.0.822: corrupted inode contents
[  198.475498][ T6385] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.822: mark_inode_dirty error
[  198.490600][ T6385] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #16: comm syz.0.822: corrupted inode contents
[  198.510364][ T4950] Bluetooth: hci1: command 0x041b tx timeout
[  198.537767][ T6385] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  198.563057][ T6385] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #16: comm syz.0.822: corrupted inode contents
[  198.584670][ T6385] EXT4-fs error (device loop0): ext4_truncate:4261: inode #16: comm syz.0.822: mark_inode_dirty error
[  198.585450][ T6391] team0: Port device team_slave_0 removed
[  198.596908][ T6385] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  198.612066][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.619596][ T6385] EXT4-fs (loop0): 1 truncate cleaned up
[  198.620619][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.642081][ T6385] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  198.659040][ T6315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.676066][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.683557][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.735671][ T6315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.819629][ T6385] 8021q: VLANs not supported on lo
[  198.827660][ T3855] Bluetooth: hci0: command 0x0409 tx timeout
[  198.870658][ T6315] device hsr_slave_0 entered promiscuous mode
[  198.880374][ T6315] device hsr_slave_1 entered promiscuous mode
[  198.887354][ T6315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.895292][ T6315] Cannot create hsr debugfs directory
[  198.968238][ T4879] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  199.077072][ T6355] chnl_net:caif_netlink_parms(): no params data found
[  199.249264][ T4879] usb 5-1: Using ep0 maxpacket: 16
[  199.421371][ T4879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  199.627902][ T4879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  199.768577][ T4879] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  199.807289][ T4879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.871726][ T4879] usb 5-1: config 0 descriptor??
[  200.232515][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.242775][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.264100][ T6355] device bridge_slave_0 entered promiscuous mode
[  200.359495][ T6394] udc-core: couldn't find an available UDC or it's busy
[  200.371039][ T6394] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  200.390002][ T6394] udc-core: couldn't find an available UDC or it's busy
[  200.402970][ T6394] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  200.427558][ T4879] hid (null): bogus close delimiter
[  200.450423][ T4879] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0
[  200.460488][ T4879] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0
[  200.499388][ T4879] hid-generic 0003:0158:0100.0006: bogus close delimiter
[  200.511340][ T4879] hid-generic 0003:0158:0100.0006: item 0 0 2 10 parsing failed
[  200.523554][ T4879] hid-generic: probe of 0003:0158:0100.0006 failed with error -22
[  201.380071][ T4879] usb 5-1: USB disconnect, device number 9
[  201.398111][ T4886] Bluetooth: hci1: command 0x040f tx timeout
[  201.412401][ T4878] Bluetooth: hci0: command 0x041b tx timeout
[  201.448566][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.455939][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.464644][ T6355] device bridge_slave_1 entered promiscuous mode
[  201.795632][ T6355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.024399][ T6451] fuse: Bad value for 'fd'
[  202.042359][ T6355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.621767][ T4036] device hsr_slave_0 left promiscuous mode
[  202.903545][ T4036] device hsr_slave_1 left promiscuous mode
[  202.913217][ T4036] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.920679][ T4036] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.964995][ T4036] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.972518][ T4036] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.992139][ T4036] device bridge_slave_1 left promiscuous mode
[  202.999145][ T4036] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.018353][ T4036] device bridge_slave_0 left promiscuous mode
[  203.029444][ T4036] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.077588][ T4036] device veth1_macvtap left promiscuous mode
[  203.098169][ T4036] device veth0_macvtap left promiscuous mode
[  203.104796][ T4036] device veth1_vlan left promiscuous mode
[  203.110722][ T4036] device veth0_vlan left promiscuous mode
[  203.328475][ T4036] team0 (unregistering): Port device team_slave_1 removed
[  203.341877][ T4036] team0 (unregistering): Port device team_slave_0 removed
[  203.357410][ T4036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.373325][ T4036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.456030][ T4036] bond0 (unregistering): Released all slaves
[  203.499671][ T4879] Bluetooth: hci0: command 0x040f tx timeout
[  203.505943][ T4879] Bluetooth: hci1: command 0x0419 tx timeout
[  203.519226][ T6355] team0: Port device team_slave_0 added
[  203.541211][ T6355] team0: Port device team_slave_1 added
[  203.584599][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.632571][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.670948][ T6355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.713392][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.747851][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.787159][ T6355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.291633][ T6315] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  205.330260][ T6315] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  205.381355][ T6355] device hsr_slave_0 entered promiscuous mode
[  205.390864][ T4878] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  205.408594][ T6355] device hsr_slave_1 entered promiscuous mode
[  205.417002][ T6355] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  205.429665][ T6355] Cannot create hsr debugfs directory
[  205.451333][ T6315] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  205.545421][ T6315] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  205.581668][ T4883] Bluetooth: hci0: command 0x0419 tx timeout
[  205.808946][ T6355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.826811][ T4878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.880566][ T6509] netlink: 'syz.2.860': attribute type 3 has an invalid length.
[  205.894736][ T6514] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  205.963178][ T6514] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  206.018123][ T4878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.028448][ T4878] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  206.037732][ T4878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.047628][ T4878] usb 1-1: config 0 descriptor??
[  206.059005][ T6315] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.087965][ T6355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.431361][ T6355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.538156][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  206.555295][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  206.567852][ T4878] logitech-djreceiver 0003:046D:C71B.0007: unknown main item tag 0x2
[  206.604736][ T4878] logitech-djreceiver 0003:046D:C71B.0007: unknown main item tag 0x6
[  206.621794][ T6315] 8021q: adding VLAN 0 to HW filter on device team0
[  206.651380][ T4878] logitech-djreceiver 0003:046D:C71B.0007: item fetching failed at offset 5/7
[  206.669226][ T6355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.701143][ T4878] logitech-djreceiver 0003:046D:C71B.0007: logi_dj_probe: parse failed
[  206.731747][ T4878] logitech-djreceiver: probe of 0003:046D:C71B.0007 failed with error -22
[  206.811522][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  206.824864][ T4878] usb 1-1: USB disconnect, device number 11
[  206.826228][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  206.870162][ T3855] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.877333][ T3855] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.915631][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  206.934008][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  206.944457][ T3855] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.951623][ T3855] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.970709][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  206.988647][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  206.998256][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  207.016970][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  207.027347][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  207.053585][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  207.076947][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  207.114567][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  207.141770][ T6315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  207.173800][ T6315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  207.193211][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  207.203570][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  207.222583][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  207.250145][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  207.643148][ T6355] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  207.676644][ T6355] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  207.724743][ T6355] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  207.781499][ T6355] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  207.964501][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  207.972753][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  207.997083][ T6315] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.093065][ T6584] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  208.943275][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  208.966519][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  209.076448][ T6355] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.113775][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  209.122228][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  209.192025][ T6315] device veth0_vlan entered promiscuous mode
[  209.202338][   T26] audit: type=1326 audit(208.865:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.0.882" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f015eefab99 code=0x0
[  209.241811][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  209.258091][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  209.316546][ T6611] loop0: detected capacity change from 0 to 512
[  209.323040][ T6355] 8021q: adding VLAN 0 to HW filter on device team0
[  209.337274][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  209.350041][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  209.371672][ T6315] device veth1_vlan entered promiscuous mode
[  209.406049][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  209.426511][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  209.446573][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  209.463529][ T6611] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #16: comm syz.0.882: corrupted inode contents
[  209.483617][ T4886] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.490804][ T4886] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.506980][ T6611] EXT4-fs error (device loop0): ext4_dirty_inode:5993: inode #16: comm syz.0.882: mark_inode_dirty error
[  209.554115][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  209.562602][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  209.581781][ T6611] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #16: comm syz.0.882: corrupted inode contents
[  209.613900][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  209.630825][ T6611] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.882: mark_inode_dirty error
[  209.651786][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  209.662286][ T6611] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #16: comm syz.0.882: corrupted inode contents
[  209.685007][ T4883] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.692874][ T4883] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.708825][ T6611] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  209.721596][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  209.735357][ T6611] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #16: comm syz.0.882: corrupted inode contents
[  209.774148][ T6611] EXT4-fs error (device loop0): ext4_truncate:4261: inode #16: comm syz.0.882: mark_inode_dirty error
[  209.796464][ T6611] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  209.824614][ T6611] EXT4-fs (loop0): 1 truncate cleaned up
[  209.863271][ T6315] device veth0_macvtap entered promiscuous mode
[  209.886792][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  209.903776][ T6611] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  209.918907][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  210.119458][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  210.276313][ T6611] 8021q: VLANs not supported on lo
[  210.400901][ T6315] device veth1_macvtap entered promiscuous mode
[  210.419380][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.432307][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.443007][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.453503][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.463876][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.478449][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.503842][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.515301][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.530818][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.541796][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  210.552844][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  210.569873][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  210.598819][   T26] audit: type=1804 audit(210.251:117): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.889" name="/root/syzkaller.PN5BdQ/286/file0/bus" dev="ramfs" ino=44492 res=1 errno=0
[  210.629914][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.640785][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.651384][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.662082][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.671962][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.684312][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.720438][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.759498][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  210.770804][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  210.781185][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  210.796279][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  210.822385][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  210.831888][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  210.850835][ T6315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.863762][ T6315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.895739][ T6315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.941161][ T6315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.002144][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  211.014468][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  211.032016][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  211.034229][ T6647] binder: Binderfs stats mode cannot be changed during a remount
[  211.055608][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  211.084711][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  211.103651][ T6355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  211.128036][   T26] audit: type=1326 audit(210.779:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.4.897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f035eb44b99 code=0x0
[  211.246947][ T6657] loop4: detected capacity change from 0 to 512
[  211.379630][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.398159][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.449420][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  211.463858][ T4037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.489144][ T4037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.514373][ T6657] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #16: comm syz.4.897: corrupted inode contents
[  211.562757][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  211.574287][ T6657] EXT4-fs error (device loop4): ext4_dirty_inode:5993: inode #16: comm syz.4.897: mark_inode_dirty error
[  211.574681][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  211.602409][ T6657] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #16: comm syz.4.897: corrupted inode contents
[  211.606375][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  211.622928][ T6657] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.897: mark_inode_dirty error
[  211.635322][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'.
[  211.651567][ T6657] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #16: comm syz.4.897: corrupted inode contents
[  211.652191][ T6355] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.664026][ T6657] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  211.700913][ T6657] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #16: comm syz.4.897: corrupted inode contents
[  211.731448][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  211.759719][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  211.783226][ T6657] EXT4-fs error (device loop4): ext4_truncate:4261: inode #16: comm syz.4.897: mark_inode_dirty error
[  211.813932][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  211.831566][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  211.849485][ T6657] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  211.860658][ T6355] device veth0_vlan entered promiscuous mode
[  211.915269][ T6657] EXT4-fs (loop4): 1 truncate cleaned up
[  211.920962][ T6657] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  211.958990][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  211.961463][ T6684] loop0: detected capacity change from 0 to 128
[  211.977052][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  212.005097][ T6685] binder: Binderfs stats mode cannot be changed during a remount
[  212.025365][ T6355] device veth1_vlan entered promiscuous mode
[  212.089141][ T6684] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  212.167959][ T6684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.208869][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  212.219971][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  212.229912][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  212.239510][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  212.292903][ T6657] 8021q: VLANs not supported on lo
[  212.300821][ T6355] device veth0_macvtap entered promiscuous mode
[  212.309887][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  212.358855][ T6355] device veth1_macvtap entered promiscuous mode
[  212.412779][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.425121][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.452394][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.462937][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.472883][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.487009][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.497943][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.508594][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.518636][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.529206][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.540806][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.565591][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'.
[  212.597510][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  212.628451][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  212.657997][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.723934][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.754942][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.774656][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.800623][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.816700][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.832018][ T6714] loop3: detected capacity change from 0 to 256
[  212.835297][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.850934][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.863140][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.883072][ T6716] binder: Binderfs stats mode cannot be changed during a remount
[  212.954226][ T6718] loop0: detected capacity change from 0 to 256
[  212.971832][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  212.981999][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  213.015418][ T6355] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.033145][ T6355] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.063246][ T6355] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.076980][ T6355] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.090838][ T6723] netlink: 'syz.2.922': attribute type 3 has an invalid length.
[  213.117672][ T6718] FAT-fs (loop0): Unrecognized mount option "uid=00000000000000000000Ö!$9ð8ƒ‰žÜı@èùÔ¬ŒNŸŠÈz‰¯|h²¬àÈS¡œÖP‰‚äÎl`8
aD¥_—¾øvA0Õ�" or missing value
[  213.159478][ T6723] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  213.174249][ T6723] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  213.372402][ T4037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.391117][ T4037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.432674][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'.
[  213.442221][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  213.533219][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.556216][ T6736] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0
[  213.563813][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.597426][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  213.828015][ T4036] device hsr_slave_0 left promiscuous mode
[  213.873798][ T4036] device hsr_slave_1 left promiscuous mode
[  213.928462][ T4036] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.935947][ T4036] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.943738][ T6749] binder: Binderfs stats mode cannot be changed during a remount
[  214.028170][ T4883] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  214.051373][ T4036] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.078782][ T4036] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.089986][ T4036] device bridge_slave_1 left promiscuous mode
[  214.106553][ T4036] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.163354][ T6760] 9pnet: Insufficient options for proto=fd
[  214.171855][ T4036] device bridge_slave_0 left promiscuous mode
[  214.196927][ T4036] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.274812][ T4036] device veth1_macvtap left promiscuous mode
[  214.285100][ T4036] device veth0_macvtap left promiscuous mode
[  214.296938][ T4036] device veth1_vlan left promiscuous mode
[  214.310777][ T4036] device veth0_vlan left promiscuous mode
[  214.469256][ T4883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  214.496682][ T4883] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85
[  214.526588][ T4883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.552446][ T4883] usb 5-1: config 0 descriptor??
[  214.622090][ T4883] comedi comedi0: Wrong number of endpoints
[  214.628615][ T4883] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device.
[  214.857020][ T6774] loop1: detected capacity change from 0 to 256
[  214.931719][ T6774] exfat: Unknown parameter 'ë	©'
[  215.109067][ T4036] team0 (unregistering): Port device team_slave_1 removed
[  215.130251][ T4036] team0 (unregistering): Port device team_slave_0 removed
[  215.155693][ T4036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.185289][ T4036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.330231][ T4036] bond0 (unregistering): Released all slaves
[  215.393003][ T6761] netlink: 'syz.3.935': attribute type 3 has an invalid length.
[  215.401548][ T6762] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  215.415210][ T6762] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  215.429964][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'.
[  215.471809][ T6776] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0
[  216.683105][ T6786] binder: Binderfs stats mode cannot be changed during a remount
[  216.701307][ T3855] usb 5-1: USB disconnect, device number 10
[  216.794789][ T6794] loop0: detected capacity change from 0 to 128
[  216.888873][ T6794] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  216.922338][ T6794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  216.976548][ T4883] Bluetooth: hci3: command 0x0406 tx timeout
[  217.252957][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'.
[  217.283653][ T6804] loop1: detected capacity change from 0 to 4096
[  217.284007][ T6807] loop4: detected capacity change from 0 to 256
[  217.303224][ T6810] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0
[  217.398988][ T6807] exfat: Unknown parameter 'ë	©'
[  217.431796][ T6804] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  218.742704][ T6835] loop1: detected capacity change from 0 to 128
[  218.849946][ T6835] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  218.868027][ T6831] loop0: detected capacity change from 0 to 4096
[  218.920008][ T6835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.944568][ T6831] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  219.030854][ T6831] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  219.055469][ T6831] ntfs3: loop0: Failed to load $Extend.
[  220.670966][ T6866] loop3: detected capacity change from 0 to 4096
[  220.887238][ T6866] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  220.912157][ T6866] ntfs3: loop3: Failed to load $MFT.
[  221.210850][ T6877] loop1: detected capacity change from 0 to 4096
[  221.263414][ T6877] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  221.358476][ T3540] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  221.426746][ T6877] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  221.451427][ T6877] ntfs3: loop1: Failed to load $Extend.
[  221.739298][ T3540] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.779395][ T3540] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85
[  221.819068][ T3540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.887620][ T3540] usb 5-1: config 0 descriptor??
[  221.967405][ T3540] comedi comedi0: Wrong number of endpoints
[  221.987912][ T3540] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device.
[  222.081907][ T6891] program syz.3.984 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  222.751764][ T6899] serio: Serial port pts0
[  224.138827][ T6910] netlink: 192 bytes leftover after parsing attributes in process `syz.2.991'.
[  224.193214][ T6910] overlayfs: missing 'lowerdir'
[  224.482287][ T6907] loop3: detected capacity change from 0 to 32768
[  224.616170][ T6907] XFS (loop3): Mounting V5 Filesystem
[  224.653041][ T3855] usb 5-1: USB disconnect, device number 11
[  224.771588][ T6907] XFS (loop3): Ending clean mount
[  225.016541][ T6925] 9pnet: Insufficient options for proto=fd
[  225.097330][ T6315] XFS (loop3): Unmounting Filesystem
[  225.791771][ T6950] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1004'.
[  225.842520][ T6950] overlayfs: missing 'lowerdir'
[  226.493294][ T6953] loop4: detected capacity change from 0 to 32768
[  226.634640][ T6953] XFS (loop4): Mounting V5 Filesystem
[  226.767537][ T6953] XFS (loop4): Ending clean mount
[  227.235030][ T4249] XFS (loop4): Unmounting Filesystem
[  228.638886][ T6993] 9pnet: Insufficient options for proto=fd
[  229.056561][ T7009] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1025'.
[  229.086233][ T7009] overlayfs: missing 'lowerdir'
[  230.008563][    T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.076413][ T7025] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1032'.
[  230.133569][    T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.178946][ T7024] ip6gretap0 speed is unknown, defaulting to 1000
[  230.228892][    T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.284678][ T7034] loop4: detected capacity change from 0 to 256
[  230.321799][    T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.354016][ T7034] exfat: Unknown parameter 'ë	©'
[  230.627742][ T7024] chnl_net:caif_netlink_parms(): no params data found
[  230.877852][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.904848][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.967243][ T7024] device bridge_slave_0 entered promiscuous mode
[  231.013706][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.028277][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.040045][ T7024] device bridge_slave_1 entered promiscuous mode
[  231.212897][ T7024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.270088][ T7024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.418386][ T7024] team0: Port device team_slave_0 added
[  231.457142][ T7024] team0: Port device team_slave_1 added
[  231.564173][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.571139][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.639986][ T7024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.687930][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.750367][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.857828][ T7024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.075061][ T4883] Bluetooth: hci2: command 0x0409 tx timeout
[  232.198660][ T7083] ip6gretap0 speed is unknown, defaulting to 1000
[  232.230473][ T7024] device hsr_slave_0 entered promiscuous mode
[  232.239222][ T7024] device hsr_slave_1 entered promiscuous mode
[  232.247285][ T7024] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  232.262925][ T7089] loop4: detected capacity change from 0 to 256
[  232.284652][ T7024] Cannot create hsr debugfs directory
[  232.375376][ T7089] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  232.476366][    T9] device hsr_slave_0 left promiscuous mode
[  232.502623][    T9] device hsr_slave_1 left promiscuous mode
[  232.525701][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.533789][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.601715][    T9] device bridge_slave_1 left promiscuous mode
[  232.627251][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.658282][    T9] device bridge_slave_0 left promiscuous mode
[  232.671719][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.717306][    T9] device veth1_macvtap left promiscuous mode
[  232.729925][ T7078] loop3: detected capacity change from 0 to 32768
[  232.742753][    T9] device veth0_macvtap left promiscuous mode
[  232.749121][    T9] device veth1_vlan left promiscuous mode
[  232.756190][    T9] device veth0_vlan left promiscuous mode
[  232.841013][ T7078] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1047 (7078)
[  232.908359][ T7078] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  232.934795][ T7078] BTRFS info (device loop3): using free space tree
[  232.956795][ T7078] BTRFS info (device loop3): has skinny extents
[  233.032539][ T7078] BTRFS info (device loop3): enabling ssd optimizations
[  233.091474][ T7078] BTRFS warning (device loop3): can't set the mixed_backref feature bit while mounted
[  233.258844][    T9] team0 (unregistering): Port device team_slave_1 removed
[  233.279306][    T9] team0 (unregistering): Port device team_slave_0 removed
[  233.294743][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.312842][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.456123][    T9] bond0 (unregistering): Released all slaves
[  234.128706][ T4879] Bluetooth: hci0: command 0x0409 tx timeout
[  234.128885][ T3246] Bluetooth: hci2: command 0x041b tx timeout
[  234.250619][ T7083] chnl_net:caif_netlink_parms(): no params data found
[  234.794361][ T7083] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.837553][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.855598][ T7083] device bridge_slave_0 entered promiscuous mode
[  234.911297][ T7083] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.918386][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.981366][ T7083] device bridge_slave_1 entered promiscuous mode
[  235.326378][ T7190] (unnamed net_device) (uninitialized): up delay (4) is not a multiple of miimon (6516), value rounded to 0 ms
[  235.348146][ T7190] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring
[  235.378765][ T7083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.437365][ T7083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.860408][ T7083] team0: Port device team_slave_0 added
[  235.980735][ T7024] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  236.196200][ T7083] team0: Port device team_slave_1 added
[  236.292713][ T7024] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  236.304304][ T3246] Bluetooth: hci2: command 0x040f tx timeout
[  236.310466][ T3246] Bluetooth: hci0: command 0x041b tx timeout
[  236.398145][ T7024] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  236.500742][ T7024] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  236.544649][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.573982][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.667905][ T7083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.712798][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.739985][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.838925][ T7083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.915975][ T7225] loop3: detected capacity change from 0 to 128
[  237.368319][ T7083] device hsr_slave_0 entered promiscuous mode
[  237.455918][ T7083] device hsr_slave_1 entered promiscuous mode
[  237.533064][ T7083] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  237.552881][ T7083] Cannot create hsr debugfs directory
[  238.539390][ T7144] Bluetooth: hci0: command 0x040f tx timeout
[  238.667817][ T7144] Bluetooth: hci2: command 0x0419 tx timeout
[  238.728392][   T26] audit: type=1800 audit(238.321:119): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1087" name="bus" dev="sda1" ino=2005 res=0 errno=0
[  238.817717][ T7024] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.828584][   T26] audit: type=1800 audit(238.381:120): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1087" name="bus" dev="sda1" ino=2005 res=0 errno=0
[  238.968221][ T7024] 8021q: adding VLAN 0 to HW filter on device team0
[  239.007662][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  239.019062][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  239.097094][ T7083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.166084][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  239.183022][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  239.213702][ T3246] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.220973][ T3246] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.286980][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  239.307549][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  239.327610][ T3246] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.334893][ T3246] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.378696][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  239.399279][ T7273] input: syz1 as /devices/virtual/input/input14
[  239.464716][ T7083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.507816][ T7271] (unnamed net_device) (uninitialized): up delay (4) is not a multiple of miimon (6516), value rounded to 0 ms
[  239.527839][ T7271] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring
[  239.538578][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  239.560286][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  239.597944][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1096'.
[  239.673515][ T7083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.768258][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  239.789453][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  239.807295][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  239.817773][   T26] audit: type=1326 audit(239.408:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.3.1099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cd47f6b99 code=0x0
[  239.831571][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  239.866512][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  239.884433][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  239.898552][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  239.924649][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  239.943642][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1096'.
[  240.018725][ T7083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.069394][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  240.099136][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  240.369354][ T7083] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  240.402698][ T7312] input: syz1 as /devices/virtual/input/input15
[  240.413805][ T7083] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  240.460521][ T7083] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  240.514483][ T7083] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  240.548381][ T7319] (unnamed net_device) (uninitialized): up delay (4) is not a multiple of miimon (6516), value rounded to 0 ms
[  240.582062][ T7319] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring
[  240.622127][ T7144] Bluetooth: hci0: command 0x0419 tx timeout
[  240.646153][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  240.675542][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  241.531887][ T7024] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.653032][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  241.674839][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  241.765697][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  241.777997][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  241.799025][ T7024] device veth0_vlan entered promiscuous mode
[  241.850547][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  241.867354][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  241.892120][ T7083] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.030646][ T7024] device veth1_vlan entered promiscuous mode
[  242.053793][   T26] audit: type=1326 audit(241.634:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.4.1115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f035eb44b99 code=0x0
[  242.103658][ T7083] 8021q: adding VLAN 0 to HW filter on device team0
[  242.134386][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  242.154143][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  242.170649][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  242.179719][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  242.188512][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  242.203915][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  242.212864][ T4878] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.220005][ T4878] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.224308][ T7365] fuse: Bad value for 'fd'
[  242.312890][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  242.323248][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  242.334020][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  242.343081][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  242.352462][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  242.361126][ T4884] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.368289][ T4884] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.376610][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  242.386332][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  242.397631][ T7024] device veth0_macvtap entered promiscuous mode
[  242.421856][ T7024] device veth1_macvtap entered promiscuous mode
[  242.430442][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  242.446228][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  242.461303][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  242.473492][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  242.486517][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  242.524818][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.540506][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.552712][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.563613][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.574555][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.595913][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.615534][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.635418][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.635810][ T4878] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  242.657151][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.026508][ T4878] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  243.038498][ T4878] usb 4-1: config 0 has no interface number 0
[  243.051401][ T4878] usb 4-1: config 0 interface 255 has no altsetting 0
[  243.062654][ T4878] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  243.076265][ T4878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.094349][ T4878] usb 4-1: config 0 descriptor??
[  243.113708][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  243.139781][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  243.149582][ T4878] cp210x 4-1:0.255: cp210x converter detected
[  243.157241][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  243.166279][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  243.175676][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  243.184891][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  243.196330][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  243.206056][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  243.225289][ T7083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  243.253872][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.266091][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.278920][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.290053][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.300047][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.311165][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.321750][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.332600][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.346321][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.361629][ T7024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.386815][ T7024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.395624][ T7024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.425991][ T7024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.437735][ T7377] loop4: detected capacity change from 0 to 128
[  243.471980][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  243.481642][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  243.489654][ T7377] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  243.554322][ T7377] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  243.628365][ T4878] cp210x 4-1:0.255: failed to get vendor val 0x000e size 3: -32
[  243.700907][ T4249] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  243.723653][ T1191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.738236][ T4249] FAT-fs (loop4): Filesystem has been set read-only
[  243.746175][ T1191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.766798][ T4249] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  243.800903][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  243.901021][ T4878] cp210x 4-1:0.255: GPIO initialisation failed: -19
[  243.914426][ T7388] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1125'.
[  243.945428][ T4878] usb 4-1: cp210x converter now attached to ttyUSB0
[  243.992217][ T4037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.011888][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  244.022241][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  244.029855][ T4037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.045104][ T7083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.064017][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  244.111802][    T9] IPVS: stopping backup sync thread 6776 ...
[  244.134805][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  244.146255][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  244.180186][ T7144] usb 4-1: USB disconnect, device number 9
[  244.199011][ T7144] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  244.207264][ T7144] cp210x 4-1:0.255: device disconnected
[  244.338446][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  244.347671][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  244.371194][ T7083] device veth0_vlan entered promiscuous mode
[  244.401890][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  244.411237][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  244.427068][ T7083] device veth1_vlan entered promiscuous mode
[  244.446316][   T26] audit: type=1326 audit(244.020:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.0.1130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff978f77b99 code=0x0
[  244.591486][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  244.606363][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  244.617754][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  244.627136][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  244.640612][ T7083] device veth0_macvtap entered promiscuous mode
[  244.667585][    T9] device hsr_slave_0 left promiscuous mode
[  244.681416][    T9] device hsr_slave_1 left promiscuous mode
[  244.688032][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.705154][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.750580][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.769446][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.778226][    T9] device bridge_slave_1 left promiscuous mode
[  244.787125][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.796457][    T9] device bridge_slave_0 left promiscuous mode
[  244.803128][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.816288][    T9] device veth1_macvtap left promiscuous mode
[  244.822503][    T9] device veth0_macvtap left promiscuous mode
[  244.828930][    T9] device veth1_vlan left promiscuous mode
[  244.835587][    T9] device veth0_vlan left promiscuous mode
[  245.156684][ T7413] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1135'.
[  245.223127][    T9] team0 (unregistering): Port device team_slave_1 removed
[  245.249696][    T9] team0 (unregistering): Port device team_slave_0 removed
[  245.284087][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.325145][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.582519][    T9] bond0 (unregistering): Released all slaves
[  245.706150][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  245.732464][ T7083] device veth1_macvtap entered promiscuous mode
[  245.787909][ T7406] ip6gretap0 speed is unknown, defaulting to 1000
[  245.829827][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.859339][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.877787][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.880512][   T26] audit: type=1800 audit(245.457:124): pid=7417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1137" name="file0" dev="sda1" ino=2008 res=0 errno=0
[  245.920285][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.948110][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.959382][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.973096][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.985587][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.029185][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.058506][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  246.069079][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  246.090325][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.123831][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.141392][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.154784][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.167101][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.179102][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.191873][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.202740][ T7425] fuse: Bad value for 'fd'
[  246.221544][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.265875][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.289977][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  246.314122][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  246.333127][ T7083] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.341860][ T7083] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.355920][ T7083] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.371129][ T7083] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.741206][ T1191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.196511][ T1191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.606644][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  247.641195][ T4950] Bluetooth: hci3: command 0x0409 tx timeout
[  247.688199][ T7439] program syz.0.1146 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  247.707080][ T4036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.733201][ T4036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.762193][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  247.788609][ T7406] chnl_net:caif_netlink_parms(): no params data found
[  248.052999][ T7444] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1045'.
[  248.325170][ T7406] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.372815][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.424031][ T7406] device bridge_slave_0 entered promiscuous mode
[  248.457473][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.512362][ T7466] netlink: 'syz.1.1154': attribute type 3 has an invalid length.
[  248.522739][   T26] audit: type=1326 audit(248.103:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff978f77b99 code=0x7ffc0000
[  248.554737][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.561677][ T7466] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[  248.561886][ T7466] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1154'.
[  248.608641][   T26] audit: type=1326 audit(248.103:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff978f77b99 code=0x7ffc0000
[  248.664514][ T7406] device bridge_slave_1 entered promiscuous mode
[  248.673470][   T26] audit: type=1326 audit(248.103:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff978f77b99 code=0x7ffc0000
[  248.677832][ T7463] device bridge_slave_1 left promiscuous mode
[  248.696374][   T26] audit: type=1326 audit(248.103:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff978f77b99 code=0x7ffc0000
[  248.731359][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.743776][   T26] audit: type=1326 audit(248.103:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff978f77b99 code=0x7ffc0000
[  248.768548][ T7463] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  248.805152][   T26] audit: type=1326 audit(248.103:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff978f77b99 code=0x7ffc0000
[  248.892355][   T26] audit: type=1326 audit(248.103:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff978f799b7 code=0x7ffc0000
[  248.960116][ T7406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.007202][   T26] audit: type=1326 audit(248.103:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff978f77b99 code=0x7ffc0000
[  249.011809][ T7474] loop1: detected capacity change from 0 to 256
[  249.049807][ T7406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.195647][ T7406] team0: Port device team_slave_0 added
[  249.225401][ T7406] team0: Port device team_slave_1 added
[  249.332555][ T7474] exfat: Deprecated parameter 'namecase'
[  249.347514][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1159'.
[  249.388299][    C1] vcan0: j1939_xtp_rx_dpo: no connection found
[  249.394970][    C1] vcan0: j1939_xtp_rx_dpo: no connection found
[  249.401306][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  249.407734][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[  249.414177][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  249.420622][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[  249.427091][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  249.433614][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[  249.440099][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  249.446508][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[  249.453015][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  249.459489][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  249.545127][ T7474] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[  249.557790][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.565232][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.584154][ T7474] exFAT-fs (loop1): failed to load alloc-bitmap
[  249.592824][ T7406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.629401][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.634600][ T7474] exFAT-fs (loop1): failed to recognize exfat type
[  249.636432][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.636466][ T7406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.771558][ T7144] Bluetooth: hci3: command 0x041b tx timeout
[  249.909815][ T7486] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1161'.
[  249.924265][ T7493] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1164'.
[  249.945488][ T7406] device hsr_slave_0 entered promiscuous mode
[  250.005931][ T7406] device hsr_slave_1 entered promiscuous mode
[  250.078815][ T7406] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  250.086516][ T7406] Cannot create hsr debugfs directory
[  250.198209][   T26] kauditd_printk_skb: 35 callbacks suppressed
[  250.198227][   T26] audit: type=1326 audit(249.760:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd47f6b99 code=0x7ffc0000
[  250.383680][   T26] audit: type=1326 audit(249.760:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd47f6b99 code=0x7ffc0000
[  250.423850][   T26] audit: type=1326 audit(249.770:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2cd47f6b99 code=0x7ffc0000
[  250.588159][ T7406] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.599057][   T26] audit: type=1326 audit(249.770:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd47f6b99 code=0x7ffc0000
[  250.695362][   T26] audit: type=1326 audit(249.770:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd47f6b99 code=0x7ffc0000
[  250.779363][ T7406] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.831233][   T26] audit: type=1326 audit(249.770:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cd47f6b99 code=0x7ffc0000
[  250.929550][   T26] audit: type=1326 audit(249.770:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd47f6b99 code=0x7ffc0000
[  250.984581][ T7406] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.046406][   T26] audit: type=1326 audit(249.770:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd47f6b99 code=0x7ffc0000
[  251.097183][ T7518] loop1: detected capacity change from 0 to 256
[  251.119612][ T7406] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.181958][   T26] audit: type=1326 audit(249.770:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2cd47f89b7 code=0x7ffc0000
[  251.231052][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1173'.
[  251.321011][   T26] audit: type=1326 audit(249.770:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd47f6b99 code=0x7ffc0000
[  251.609344][ T7406] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  251.645266][ T7529] loop1: detected capacity change from 0 to 764
[  251.665034][ T7406] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  251.739664][ T7406] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  251.792496][ T7529] rock: directory entry would overflow storage
[  251.822276][ T7406] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  251.834220][ T7529] rock: sig=0x4654, size=5, remaining=4
[  251.843000][ T4950] Bluetooth: hci3: command 0x040f tx timeout
[  252.364584][ T7406] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.458092][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  252.475058][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  252.504323][ T7406] 8021q: adding VLAN 0 to HW filter on device team0
[  252.553322][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  252.571282][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  252.585581][ T4879] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.592864][ T4879] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.708061][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  252.719781][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  252.753876][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  252.766675][ T4880] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.773838][ T4880] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.788935][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  252.799846][ T7546] loop0: detected capacity change from 0 to 512
[  252.804133][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  252.848613][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  252.864459][ T7546] EXT4-fs (loop0): Ignoring removed orlov option
[  252.874914][ T7550] loop1: detected capacity change from 0 to 256
[  252.896530][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  252.910485][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  252.920822][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  252.938543][ T7406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  252.952467][ T7406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  252.993512][ T4878] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  253.001469][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  253.024636][ T7546] EXT4-fs (loop0): 1 orphan inode deleted
[  253.040921][ T7546] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,inode_readahead_blks=0x0000000000080000,stripe=0x0000000000000079,max_batch_time=0x000000000000007f,sysvgroups,orlov,dioread_lock,. Quota mode: writeback.
[  253.040985][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  253.106396][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  253.122392][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  253.136900][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  253.178901][ T7546] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  253.229749][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  253.445135][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  253.470897][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  253.474525][ T4878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.507819][ T7406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.549099][ T4878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.604181][ T4878] usb 4-1: New USB device found, idVendor=056a, idProduct=ffbb, bcdDevice= 0.00
[  253.645851][ T4878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.696509][ T4878] usb 4-1: config 0 descriptor??
[  253.805224][    C1] Illegal XDP return value 1603896156, expect packet loss!
[  253.925009][ T3855] Bluetooth: hci3: command 0x0419 tx timeout
[  254.320137][ T7578] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  254.765800][ T7575] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1191'.
[  254.924687][ T7576] ip6gretap0 speed is unknown, defaulting to 1000
[  254.935032][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  254.960492][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  255.219370][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  255.231178][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  255.276966][ T7406] device veth0_vlan entered promiscuous mode
[  255.284353][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  255.312696][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  255.384490][ T7406] device veth1_vlan entered promiscuous mode
[  255.534023][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  255.549669][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  255.574192][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  255.604575][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  255.641672][ T7406] device veth0_macvtap entered promiscuous mode
[  255.685145][ T7406] device veth1_macvtap entered promiscuous mode
[  255.710298][    T9] IPVS: stopping backup sync thread 6810 ...
[  255.720160][ T7576] chnl_net:caif_netlink_parms(): no params data found
[  255.804178][ T7581] loop0: detected capacity change from 0 to 40427
[  255.886016][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.896949][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.907839][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.919258][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.938298][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  255.942596][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.944617][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  255.958929][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.971665][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.988171][ T4878] usbhid 4-1:0.0: can't add hid device: -71
[  255.994220][ T4878] usbhid: probe of 4-1:0.0 failed with error -71
[  255.996348][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.017504][ T4878] usb 4-1: USB disconnect, device number 10
[  256.041942][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.059141][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.077577][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_0
[  256.090588][ T7581] F2FS-fs (loop0): Invalid log sectorsize (2)
[  256.103239][ T7581] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  256.154696][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  256.186045][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  256.186595][ T7581] F2FS-fs (loop0): Found nat_bits in checkpoint
[  256.213118][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  256.231053][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  256.244077][ T7581] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  256.253059][ T7581] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  256.283151][ T7581] F2FS-fs (loop0): switch extent_cache option is not allowed
[  256.321065][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.347571][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.357995][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.376898][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.386897][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.397385][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.411951][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.422629][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.432977][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.444192][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.457616][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.469211][ T7406] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.477935][ T7406] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.499094][ T7406] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.509992][ T7406] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.831551][ T4880] Bluetooth: hci4: command 0x0409 tx timeout
[  257.940831][    C1] sched: RT throttling activated
[  257.986780][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  257.996208][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  258.227120][ T7616] loop3: detected capacity change from 0 to 512
[  258.261757][ T7576] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.270347][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.281635][ T7576] device bridge_slave_0 entered promiscuous mode
[  258.305521][ T7616] EXT4-fs (loop3): Ignoring removed orlov option
[  258.330287][ T7616] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  258.368801][    T9] device hsr_slave_0 left promiscuous mode
[  258.372332][ T7616] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  258.386618][    T9] device hsr_slave_1 left promiscuous mode
[  258.400795][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.410539][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.428747][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.449958][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.455773][ T7616] EXT4-fs (loop3): 1 truncate cleaned up
[  258.466618][    T9] device bridge_slave_1 left promiscuous mode
[  258.475359][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.478944][ T7616] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,mblk_io_submit,debug_want_extra_isize=0x000000000000002e,auto_da_alloc,noauto_da_alloc,quota,,errors=continue. Quota mode: writeback.
[  258.517664][    T9] device bridge_slave_0 left promiscuous mode
[  258.527704][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.585513][    T9] device veth0_macvtap left promiscuous mode
[  258.591577][    T9] device veth1_vlan left promiscuous mode
[  258.602087][    T9] device veth0_vlan left promiscuous mode
[  258.913872][ T4878] Bluetooth: hci4: command 0x041b tx timeout
[  259.246352][    T9] team0 (unregistering): Port device team_slave_1 removed
[  259.290030][    T9] team0 (unregistering): Port device team_slave_0 removed
[  259.322176][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.362333][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.511738][    T9] bond0 (unregistering): Released all slaves
[  259.709377][ T7576] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.741107][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.743039][ T7629] loop3: detected capacity change from 0 to 32768
[  259.756498][ T7576] device bridge_slave_1 entered promiscuous mode
[  259.782595][ T7629] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1204 (7629)
[  259.850743][ T7629] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  259.867047][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.893365][ T7576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.899534][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.910769][ T7629] BTRFS info (device loop3): force zlib compression, level 3
[  259.932649][ T7629] BTRFS info (device loop3): force clearing of disk cache
[  259.946308][ T7576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.973701][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.993928][ T7629] BTRFS info (device loop3): setting nodatasum
[  260.003146][ T7629] BTRFS info (device loop3): allowing degraded mounts
[  260.011399][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.041689][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  260.060709][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  260.073992][ T7629] BTRFS info (device loop3): enabling disk space caching
[  260.081067][ T7629] BTRFS info (device loop3): disk space caching is enabled
[  260.110703][ T7629] BTRFS info (device loop3): has skinny extents
[  260.139634][ T7576] team0: Port device team_slave_0 added
[  260.181545][ T7576] team0: Port device team_slave_1 added
[  260.242836][ T7642] No such timeout policy "syz1"
[  260.290273][ T7642] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  260.312598][ T7576] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.319880][ T7576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.355971][ T7576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.370335][ T7576] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.377949][ T7576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.415689][ T7576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.438366][ T7652] netlink: 'syz.4.1129': attribute type 2 has an invalid length.
[  260.506933][ T7629] BTRFS info (device loop3): clearing free space tree
[  260.517547][ T7576] device hsr_slave_0 entered promiscuous mode
[  260.546656][ T7629] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  260.577650][ T7576] device hsr_slave_1 entered promiscuous mode
[  260.592909][ T7629] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  260.746852][ T7675] loop0: detected capacity change from 0 to 512
[  260.907158][ T7675] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  260.952986][ T7675] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1216: inode #13: comm syz.0.1216: iget: illegal inode #
[  260.985464][ T4885] Bluetooth: hci4: command 0x040f tx timeout
[  260.999264][ T7675] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1216: couldn't read orphan inode 13 (err -117)
[  261.042803][ T7629] BTRFS info (device loop3): balance: start -s
[  261.096995][ T7675] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,i_version,noblock_validity,abort,mblk_io_submit,nogrpid,jqfmt=vfsv0,delalloc,nolazytime,,errors=continue. Quota mode: none.
[  261.163644][ T7576] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.181802][ T7675] EXT4-fs error (device loop0): ext4_resize_begin:61: comm syz.0.1216: resize_inode disabled but reserved GDT blocks non-zero
[  261.217636][ T7629] BTRFS info (device loop3): relocating block group 1048576 flags system
[  261.349801][ T7576] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.424100][ T7629] BTRFS info (device loop3): balance: ended with status: 0
[  261.521341][ T7576] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.573266][ T7692] netlink: 'syz.0.1221': attribute type 15 has an invalid length.
[  261.593485][ T7692] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1221'.
[  261.634379][ T7690] netlink: 'syz.1.1222': attribute type 10 has an invalid length.
[  262.063992][ T7690] team0: Port device dummy0 added
[  262.175857][ T7576] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.535401][ T7576] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  262.607039][ T7576] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  262.680567][ T7718] netlink: 'syz.0.1233': attribute type 15 has an invalid length.
[  262.700975][ T7718] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1233'.
[  262.724191][ T7576] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  262.757129][ T7576] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  262.834119][ T7725] loop3: detected capacity change from 0 to 512
[  262.885766][ T7727] netlink: 'syz.0.1236': attribute type 10 has an invalid length.
[  262.928171][ T7725] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  262.984610][ T7725] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1231: inode #13: comm syz.3.1231: iget: illegal inode #
[  262.985607][ T7727] team0: Port device dummy0 added
[  263.008614][ T7725] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1231: couldn't read orphan inode 13 (err -117)
[  263.085583][ T7725] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,i_version,noblock_validity,abort,mblk_io_submit,nogrpid,jqfmt=vfsv0,delalloc,nolazytime,,errors=continue. Quota mode: none.
[  263.117769][ T7725] EXT4-fs error (device loop3): ext4_resize_begin:61: comm syz.3.1231: resize_inode disabled but reserved GDT blocks non-zero
[  263.122438][ T7699] Bluetooth: hci4: command 0x0419 tx timeout
[  263.339221][ T7576] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.428024][ T7576] 8021q: adding VLAN 0 to HW filter on device team0
[  263.462386][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  263.500104][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  263.533712][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  263.556040][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  263.591005][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.598162][ T7144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.665052][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  263.680647][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  263.712367][   T26] kauditd_printk_skb: 43 callbacks suppressed
[  263.712385][   T26] audit: type=1800 audit(263.260:221): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1245" name="file0" dev="sda1" ino=1999 res=0 errno=0
[  263.729959][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  263.783627][ T7754] loop3: detected capacity change from 0 to 8
[  263.788063][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.796895][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.802668][ T7753] 9pnet: Insufficient options for proto=fd
[  263.855647][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  263.871106][ T7754] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  263.892541][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  263.903854][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  263.930146][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  263.941667][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  263.951335][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  264.009229][ T7576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  264.084383][ T7576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  264.099251][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  264.111172][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  264.126119][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  264.135530][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  264.152369][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  264.168651][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  264.340335][ T4950] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  264.444889][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  264.453530][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  264.489487][ T7576] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.550308][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  264.564169][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  264.590345][ T4950] usb 1-1: Using ep0 maxpacket: 16
[  264.625899][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  264.637446][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  264.649540][ T7576] device veth0_vlan entered promiscuous mode
[  264.658377][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  264.667580][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  264.684379][ T7576] device veth1_vlan entered promiscuous mode
[  264.710768][ T4950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.749544][ T4950] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  264.779635][ T7576] device veth0_macvtap entered promiscuous mode
[  264.788239][ T4950] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  264.799550][ T4950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.819618][ T7576] device veth1_macvtap entered promiscuous mode
[  264.835600][ T4950] usb 1-1: config 0 descriptor??
[  264.846590][   T26] audit: type=1800 audit(264.398:222): pid=7779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1256" name="file0" dev="sda1" ino=2018 res=0 errno=0
[  264.917876][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  264.928255][ T7783] 9pnet: Insufficient options for proto=fd
[  264.936901][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  264.955484][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  264.969917][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  264.986569][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  265.007217][ T3246] ip6gretap0 speed is unknown, defaulting to 1000
[  265.028605][ T3246] ==================================================================
[  265.037352][ T3246] BUG: KASAN: use-after-free in siw_query_port+0x342/0x430
[  265.044701][ T3246] Read of size 4 at addr ffff88806722a0d8 by task kworker/1:3/3246
[  265.052620][ T3246] 
[  265.054978][ T3246] CPU: 1 PID: 3246 Comm: kworker/1:3 Not tainted 5.15.161-syzkaller #0
[  265.063245][ T3246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  265.073331][ T3246] Workqueue: infiniband ib_cache_event_task
[  265.079269][ T3246] Call Trace:
[  265.082572][ T3246]  <TASK>
[  265.085521][ T3246]  dump_stack_lvl+0x1e3/0x2d0
[  265.090243][ T3246]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  265.095907][ T3246]  ? _printk+0xd1/0x120
[  265.100103][ T3246]  ? __wake_up_klogd+0xcc/0x100
[  265.104988][ T3246]  ? panic+0x860/0x860
[  265.109086][ T3246]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  265.114587][ T3246]  print_address_description+0x63/0x3b0
[  265.120163][ T3246]  ? siw_query_port+0x342/0x430
[  265.125040][ T3246]  kasan_report+0x16b/0x1c0
[  265.129571][ T3246]  ? siw_query_port+0x342/0x430
[  265.134458][ T3246]  siw_query_port+0x342/0x430
[  265.139164][ T3246]  ? ib_query_port+0x5cd/0x770
[  265.143960][ T3246]  ib_cache_update+0x1a8/0xaf0
[  265.148773][ T3246]  ? ib_cache_setup_one+0x5a0/0x5a0
[  265.154000][ T3246]  ? read_lock_is_recursive+0x10/0x10
[  265.159409][ T3246]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  265.165449][ T3246]  ? print_irqtrace_events+0x210/0x210
[  265.170941][ T3246]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  265.176957][ T3246]  ib_cache_event_task+0xef/0x1e0
[  265.182018][ T3246]  process_one_work+0x8a1/0x10c0
[  265.187019][ T3246]  ? worker_detach_from_pool+0x260/0x260
[  265.192697][ T3246]  ? _raw_spin_lock_irqsave+0x120/0x120
[  265.198279][ T3246]  ? kthread_data+0x4e/0xc0
[  265.202816][ T3246]  ? wq_worker_running+0x97/0x170
[  265.207882][ T3246]  worker_thread+0xaca/0x1280
[  265.212633][ T3246]  kthread+0x3f6/0x4f0
[  265.216732][ T3246]  ? rcu_lock_release+0x20/0x20
[  265.221618][ T3246]  ? kthread_blkcg+0xd0/0xd0
[  265.226239][ T3246]  ret_from_fork+0x1f/0x30
[  265.230759][ T3246]  </TASK>
[  265.233832][ T3246] 
[  265.236161][ T3246] Allocated by task 3507:
[  265.240495][ T3246]  ____kasan_kmalloc+0xba/0xf0
[  265.245278][ T3246]  __kmalloc_node+0x199/0x390
[  265.249978][ T3246]  kvmalloc_node+0x80/0x140
[  265.254504][ T3246]  alloc_netdev_mqs+0x85/0xc10
[  265.259294][ T3246]  rtnl_create_link+0x2e9/0x9c0
[  265.264197][ T3246]  rtnl_newlink+0x13d2/0x2070
[  265.268984][ T3246]  rtnetlink_rcv_msg+0x993/0xee0
[  265.273942][ T3246]  netlink_rcv_skb+0x1cf/0x410
[  265.278720][ T3246]  netlink_unicast+0x7b6/0x980
[  265.283498][ T3246]  netlink_sendmsg+0xa30/0xd60
[  265.288282][ T3246]  __sys_sendto+0x564/0x720
[  265.292805][ T3246]  __x64_sys_sendto+0xda/0xf0
[  265.297505][ T3246]  do_syscall_64+0x3b/0xb0
[  265.301160][ T7795] loop4: detected capacity change from 0 to 8
[  265.301936][ T3246]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  265.313943][ T3246] 
[  265.316279][ T3246] Freed by task 9:
[  265.320003][ T3246]  kasan_set_track+0x4b/0x80
[  265.324621][ T3246]  kasan_set_free_info+0x1f/0x40
[  265.329575][ T3246]  ____kasan_slab_free+0xd8/0x120
[  265.334605][ T3246]  slab_free_freelist_hook+0xdd/0x160
[  265.339995][ T3246]  kfree+0xf1/0x270
[  265.343822][ T3246]  device_release+0x91/0x1c0
[  265.348423][ T3246]  kobject_put+0x224/0x460
[  265.352837][ T3246]  netdev_run_todo+0xaaf/0xc40
[  265.357725][ T3246]  ip6gre_exit_batch_net+0x41a/0x460
[  265.363013][ T3246]  cleanup_net+0x763/0xb60
[  265.367436][ T3246]  process_one_work+0x8a1/0x10c0
[  265.372401][ T3246]  worker_thread+0xaca/0x1280
[  265.377094][ T3246]  kthread+0x3f6/0x4f0
[  265.381173][ T3246]  ret_from_fork+0x1f/0x30
[  265.385693][ T3246] 
[  265.388009][ T3246] The buggy address belongs to the object at ffff88806722a000
[  265.388009][ T3246]  which belongs to the cache kmalloc-cg-4k of size 4096
[  265.402434][ T3246] The buggy address is located 216 bytes inside of
[  265.402434][ T3246]  4096-byte region [ffff88806722a000, ffff88806722b000)
[  265.415791][ T3246] The buggy address belongs to the page:
[  265.421618][ T3246] page:ffffea00019c8a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67228
[  265.431875][ T3246] head:ffffea00019c8a00 order:3 compound_mapcount:0 compound_pincount:0
[  265.440226][ T3246] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  265.448239][ T3246] raw: 00fff00000010200 ffffea0001e69400 0000000200000002 ffff888011c4c280
[  265.456832][ T3246] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  265.465436][ T3246] page dumped because: kasan: bad access detected
[  265.471857][ T3246] page_owner tracks the page as allocated
[  265.477580][ T3246] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3508, ts 49528553360, free_ts 14673437175
[  265.498445][ T3246]  get_page_from_freelist+0x322a/0x33c0
[  265.504085][ T3246]  __alloc_pages+0x272/0x700
[  265.508699][ T3246]  new_slab+0xbb/0x4b0
[  265.512854][ T3246]  ___slab_alloc+0x6f6/0xe10
[  265.517526][ T3246]  __kmalloc_node+0x1fa/0x390
[  265.522203][ T3246]  kvmalloc_node+0x80/0x140
[  265.526723][ T3246]  alloc_netdev_mqs+0x7aa/0xc10
[  265.531590][ T3246]  rtnl_create_link+0x2e9/0x9c0
[  265.536472][ T3246]  rtnl_newlink+0x13d2/0x2070
[  265.541154][ T3246]  rtnetlink_rcv_msg+0x993/0xee0
[  265.546110][ T3246]  netlink_rcv_skb+0x1cf/0x410
[  265.550886][ T3246]  netlink_unicast+0x7b6/0x980
[  265.555646][ T3246]  netlink_sendmsg+0xa30/0xd60
[  265.560406][ T3246]  __sys_sendto+0x564/0x720
[  265.564911][ T3246]  __x64_sys_sendto+0xda/0xf0
[  265.569601][ T3246]  do_syscall_64+0x3b/0xb0
[  265.574038][ T3246] page last free stack trace:
[  265.578749][ T3246]  free_unref_page_prepare+0xc34/0xcf0
[  265.584264][ T3246]  free_unref_page+0x95/0x2d0
[  265.589073][ T3246]  free_contig_range+0x95/0xf0
[  265.593858][ T3246]  destroy_args+0xfe/0x980
[  265.598273][ T3246]  debug_vm_pgtable+0x40d/0x470
[  265.603125][ T3246]  do_one_initcall+0x22b/0x7a0
[  265.607919][ T3246]  do_initcall_level+0x157/0x210
[  265.612858][ T3246]  do_initcalls+0x49/0x90
[  265.617181][ T3246]  kernel_init_freeable+0x425/0x5c0
[  265.622396][ T3246]  kernel_init+0x19/0x290
[  265.626755][ T3246]  ret_from_fork+0x1f/0x30
[  265.631301][ T3246] 
[  265.633616][ T3246] Memory state around the buggy address:
[  265.639237][ T3246]  ffff888067229f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  265.647303][ T3246]  ffff88806722a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  265.655379][ T3246] >ffff88806722a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  265.663443][ T3246]                                                     ^
[  265.670523][ T3246]  ffff88806722a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  265.678589][ T3246]  ffff88806722a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  265.686662][ T3246] ==================================================================
[  265.694721][ T3246] Disabling lock debugging due to kernel taint
[  265.704268][ T3246] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  265.711575][ T3246] CPU: 1 PID: 3246 Comm: kworker/1:3 Tainted: G    B             5.15.161-syzkaller #0
[  265.721336][ T3246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  265.731408][ T3246] Workqueue: infiniband ib_cache_event_task
[  265.737304][ T3246] Call Trace:
[  265.740581][ T3246]  <TASK>
[  265.743511][ T3246]  dump_stack_lvl+0x1e3/0x2d0
[  265.748209][ T3246]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  265.753953][ T3246]  ? panic+0x860/0x860
[  265.758019][ T3246]  ? preempt_schedule_common+0xa6/0xd0
[  265.763486][ T3246]  ? preempt_schedule+0xd9/0xe0
[  265.768342][ T3246]  panic+0x318/0x860
[  265.772240][ T3246]  ? check_panic_on_warn+0x1d/0xa0
[  265.777357][ T3246]  ? fb_is_primary_device+0xd0/0xd0
[  265.782597][ T3246]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  265.788592][ T3246]  ? _raw_spin_unlock+0x40/0x40
[  265.793454][ T3246]  ? print_memory_metadata+0xe2/0x140
[  265.798839][ T3246]  check_panic_on_warn+0x7e/0xa0
[  265.803780][ T3246]  ? siw_query_port+0x342/0x430
[  265.808634][ T3246]  end_report+0x6d/0xf0
[  265.812790][ T3246]  kasan_report+0x18e/0x1c0
[  265.817287][ T3246]  ? siw_query_port+0x342/0x430
[  265.822134][ T3246]  siw_query_port+0x342/0x430
[  265.826823][ T3246]  ? ib_query_port+0x5cd/0x770
[  265.831579][ T3246]  ib_cache_update+0x1a8/0xaf0
[  265.836345][ T3246]  ? ib_cache_setup_one+0x5a0/0x5a0
[  265.841547][ T3246]  ? read_lock_is_recursive+0x10/0x10
[  265.846934][ T3246]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  265.852938][ T3246]  ? print_irqtrace_events+0x210/0x210
[  265.858395][ T3246]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  265.864297][ T3246]  ib_cache_event_task+0xef/0x1e0
[  265.869356][ T3246]  process_one_work+0x8a1/0x10c0
[  265.874312][ T3246]  ? worker_detach_from_pool+0x260/0x260
[  265.879946][ T3246]  ? _raw_spin_lock_irqsave+0x120/0x120
[  265.885489][ T3246]  ? kthread_data+0x4e/0xc0
[  265.889987][ T3246]  ? wq_worker_running+0x97/0x170
[  265.895001][ T3246]  worker_thread+0xaca/0x1280
[  265.899683][ T3246]  kthread+0x3f6/0x4f0
[  265.903742][ T3246]  ? rcu_lock_release+0x20/0x20
[  265.908583][ T3246]  ? kthread_blkcg+0xd0/0xd0
[  265.913164][ T3246]  ret_from_fork+0x1f/0x30
[  265.917583][ T3246]  </TASK>
[  265.920870][ T3246] Kernel Offset: disabled
[  265.934395][ T3246] Rebooting in 86400 seconds..