last executing test programs:

16m50.079855299s ago: executing program 4 (id=2684):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1e}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

16m49.895024088s ago: executing program 4 (id=2685):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00')
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
getdents(r0, &(0x7f0000001f80)=""/4096, 0x1000)

16m49.649992898s ago: executing program 4 (id=2688):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

16m49.410561768s ago: executing program 4 (id=2689):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$packet(0x11, 0x3, 0x300)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
unshare(0x20000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x81&\xf5\t\x00\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xa9J3\x18\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V\x01\x00\x00\x00\x00\x00\x00\x00\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOe+\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\x99I\x9a9+r\x91\x06\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx', 0x3)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
fcntl$addseals(r0, 0x409, 0x47e8c3b29599b860)
unshare(0x60000600)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/240)

16m48.799900298s ago: executing program 4 (id=2690):
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0)

16m48.57077509s ago: executing program 4 (id=2692):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)}, {&(0x7f0000000700)}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d5", 0x1f}], 0x7, 0x4d9e, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

16m32.595932466s ago: executing program 32 (id=2692):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)}, {&(0x7f0000000700)}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d5", 0x1f}], 0x7, 0x4d9e, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7m46.271851938s ago: executing program 5 (id=5069):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

7m46.186566194s ago: executing program 5 (id=5071):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4)
sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x1000, @multicast1}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x60000000}, 0x20048080)

7m46.002423744s ago: executing program 5 (id=5074):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "1e17"}]}}}}}}}}, 0x0)

7m45.763954915s ago: executing program 5 (id=5075):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000000c0), 0x5, 0x52a, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x147042, 0x0)
r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e)
renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x4)
kcmp(r1, r1, 0x0, r0, 0xffffffffffffffff)

7m45.31606352s ago: executing program 5 (id=5079):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0xfffffffffffff801}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/178, 0xb2}], 0x1, 0x2, 0x6)

7m44.639098759s ago: executing program 5 (id=5084):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0xfffffde1, @multicast}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={r4, 0x2, 0x6, @local}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'})
setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041)
ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'veth1_virt_wifi\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x41004)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
syz_usb_connect(0x0, 0x12, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xc, 0xfff3}}, [{0x8, 0xb, 0x778}]}, 0x2c}}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="c4000000040a05000000000000000000010000080900030073797a3000000000d0a4d2bdfd7111fc00000000000000010c000240fffffffffffffffc0c00014000000000000030cd0c00024000000000000001000c00024000000000000000020c000140fffffffffffffffb0c000140000000000000000408000a4000000000380004080002407df27a3114000300697036746e6c300000000097aa0000000800024024060000000400000043a91b0900030073797a30000000000000000000000000007396ec35b5220d914f078697e9fe9354f067227c5efe4f505faf04f5e50a320459831dc93e15f8f8ea600a160e8469d3d341"], 0xc4}, 0x1, 0x0, 0x0, 0x8040}, 0x40001)

7m44.347638631s ago: executing program 33 (id=5084):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0xfffffde1, @multicast}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={r4, 0x2, 0x6, @local}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'})
setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041)
ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'veth1_virt_wifi\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x41004)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
syz_usb_connect(0x0, 0x12, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xc, 0xfff3}}, [{0x8, 0xb, 0x778}]}, 0x2c}}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="c4000000040a05000000000000000000010000080900030073797a3000000000d0a4d2bdfd7111fc00000000000000010c000240fffffffffffffffc0c00014000000000000030cd0c00024000000000000001000c00024000000000000000020c000140fffffffffffffffb0c000140000000000000000408000a4000000000380004080002407df27a3114000300697036746e6c300000000097aa0000000800024024060000000400000043a91b0900030073797a30000000000000000000000000007396ec35b5220d914f078697e9fe9354f067227c5efe4f505faf04f5e50a320459831dc93e15f8f8ea600a160e8469d3d341"], 0xc4}, 0x1, 0x0, 0x0, 0x8040}, 0x40001)

4m45.25704034s ago: executing program 2 (id=5961):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000140))

4m44.719608629s ago: executing program 2 (id=5965):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$loop(&(0x7f0000000940), 0x3, 0x880)
ioctl$HDIO_GETGEO(r0, 0x301, 0x0)

4m44.472578618s ago: executing program 2 (id=5966):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004b40)={0x0}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc054)

4m44.239928319s ago: executing program 2 (id=5967):
syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100), 0x0, 0xb6c, &(0x7f00000017c0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0)

4m43.860494875s ago: executing program 2 (id=5968):
unshare(0x22020600)
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0xe, 0x28081)
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000880))

4m43.475136111s ago: executing program 2 (id=5969):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001480)=@gettaction={0x24, 0x5a, 0x1, 0x0, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x465}}]}]}, 0x24}}, 0x0)

4m42.99352183s ago: executing program 34 (id=5969):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001480)=@gettaction={0x24, 0x5a, 0x1, 0x0, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x465}}]}]}, 0x24}}, 0x0)

20.084066413s ago: executing program 6 (id=6963):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

19.855925705s ago: executing program 6 (id=6966):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', <r4=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50)
gettid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x30}}, 0x10004000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2})
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000068000480540001800a0001006d617463680000004400028008000240000000002c000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad0a0001006c696d6974000000100001800b00010064796e73657400000900010073797a30000000000900020073797a32"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r9)
getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}]}}}]}, 0x3c}}, 0x40848c0)

14.469710203s ago: executing program 6 (id=6973):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33, 0xee, 0x9, 0xac5b, 0x80000001, 0xa5ca, 0xdb3, 0x3, 0x7}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x8, 0xc71, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4)

11.021826605s ago: executing program 6 (id=6980):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
pread64(r1, 0x0, 0x0, 0x8002)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, 0x0, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0x5, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @vbi={0x3, 0xec, 0x4, 0xa0363159, [0x1, 0x2], [0x2, 0x3], 0x108}}, 0x9})
writev(r7, &(0x7f0000002240)=[{&(0x7f0000001080)="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", 0xf2f}], 0x1)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000210404000000fcdbdf2500000000", @ANYRES32=r0, @ANYBLOB="adffa888d226000024001280090001007866726d000000001400028008000100"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0xc080)

10.967194326s ago: executing program 1 (id=6981):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18)

10.806610069s ago: executing program 3 (id=6984):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', <r4=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50)
gettid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x30}}, 0x10004000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2})
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000068000480540001800a0001006d617463680000004400028008000240000000002c000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad0a0001006c696d6974000000100001800b00010064796e73657400000900010073797a30000000000900020073797a32"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r9)
getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}]}}}]}, 0x3c}}, 0x40848c0)

10.530639983s ago: executing program 1 (id=6985):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$dupfd(r2, 0xf26873250142477, r0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r3, 0x400, 0x1)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40000)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e210000060002004e24000008000200e000000234000380060002004e230000060002004e240000060001004e200000060002004e200000060002004e230000060001004e200000140004000000000000000000000000000000000008000200ac1414aa140005000000000000000000000000000000000008000100e000000284000e801400018008000100ac141409080002000a0101010600034000000000060003400001000006000340000300000c000280050001009f0000000c00028005000100000000002c0001801400"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r6 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=<r7=>0x0, 0x0)
syz_io_uring_submit(r7, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r8 = socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$batadv(0x0, r3)
r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, 0x0, 0x40040)
writev(r8, &(0x7f00000000c0)=[{0x0}], 0x1)
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)

9.533535846s ago: executing program 3 (id=6987):
socket$kcm(0x1e, 0x4, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)

8.42200637s ago: executing program 7 (id=6991):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33, 0xee, 0x9, 0xac5b, 0x80000001, 0xa5ca, 0xdb3, 0x3, 0x7}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x8, 0xc71, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4)

6.726737836s ago: executing program 6 (id=6992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x34, r2, 0x1, 0x8000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x1, 0x2, 0x400, 0xa, 0x2, 0x4, 0x0, 0x8}}}}]}, 0x58}}, 0x44080)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@socket3={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x2b, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6.439990818s ago: executing program 1 (id=6993):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0xc000)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_gact={0x60, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x7b2, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x2, 0x20000000, 0x40, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x112, 0xffffffffffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

4.468232648s ago: executing program 1 (id=6994):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x0, 0x4, 0xb, 0x4], 0x3, [0xb, 0x5, 0xc63, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

4.448804995s ago: executing program 7 (id=6996):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

4.343214627s ago: executing program 3 (id=6997):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
getpid()
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000200)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x40f00}, 0x94)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
epoll_create1(0x80000)
close(r1)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fsopen(0x0, 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)

4.279800336s ago: executing program 0 (id=6998):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r0, &(0x7f00000083c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x0, 0x4, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="d800000000"], 0x0, 0x0, 0x0})
getdents64(r2, 0x0, 0x0)

4.227536058s ago: executing program 7 (id=6999):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

3.414905901s ago: executing program 1 (id=7000):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bff6000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x5}, 0x94)

3.387784406s ago: executing program 7 (id=7001):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680))
set_robust_list(0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000002000000000000000008082295", @ANYRES8, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0)
r2 = getpid()
ptrace$setopts(0x4200, r2, 0x4, 0x100030)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r3 = openat$cgroup_freezer_state(r0, &(0x7f0000000300), 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x8000002)

3.386548357s ago: executing program 3 (id=7002):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
pread64(r1, 0x0, 0x0, 0x8002)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, 0x0, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0x5, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @vbi={0x3, 0xec, 0x4, 0xa0363159, [0x1, 0x2], [0x2, 0x3], 0x108}}, 0x9})
writev(r7, &(0x7f0000002240)=[{&(0x7f0000001080)="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", 0xf2f}], 0x1)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000210404000000fcdbdf2500000000", @ANYRES32=r0, @ANYBLOB="adffa888d226000024001280090001007866726d000000001400028008000100"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0xc080)

3.352415761s ago: executing program 1 (id=7003):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$dupfd(r2, 0xf26873250142477, r0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r3, 0x400, 0x1)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40000)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r6 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=<r7=>0x0, 0x0)
syz_io_uring_submit(r7, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r8 = socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$batadv(0x0, r3)
r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, 0x0, 0x40040)
writev(r8, &(0x7f00000000c0)=[{0x0}], 0x1)
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)

3.303096522s ago: executing program 0 (id=7004):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0xc000)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_gact={0x60, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x7b2, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x2, 0x20000000, 0x40, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x112, 0xffffffffffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

3.121046552s ago: executing program 6 (id=7005):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)

1.696975024s ago: executing program 7 (id=7006):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x0, "518aba4d000000000000000000000000002000"})
r1 = dup(r0)
write$UHID_INPUT(r1, 0x0, 0x0)

1.588504025s ago: executing program 7 (id=7007):
socket$kcm(0x1e, 0x4, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)

1.182070898s ago: executing program 0 (id=7008):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000340))

803.650894ms ago: executing program 0 (id=7009):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

631.737605ms ago: executing program 0 (id=7010):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
r0 = socket(0x2b, 0x1, 0x1)
getpid()
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0xfb78, 0x4)
utimes(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000040)={0x7, 0x9})
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000000000203000000000000000000000900000000040000000000001202000000003061005f"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
io_setup(0x1000, &(0x7f0000001d00))
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x204}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x4850)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES8=r3], 0x14}, 0x1, 0x0, 0x0, 0xc008410}, 0xc1)

300.0159ms ago: executing program 0 (id=7011):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x0, 0x4, 0xb, 0x4], 0x3, [0xb, 0x5, 0xc63, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

161.361167ms ago: executing program 3 (id=7012):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

0s ago: executing program 3 (id=7013):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
getpid()
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000200)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x40f00}, 0x94)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
epoll_create1(0x80000)
close(r1)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fsopen(0x0, 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

er: invalid cluster chain (i_pos 1046)
[ 1438.135638][T25674] FAT-fs (loop3): Filesystem has been set read-only
[ 1438.160194][T25674] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[ 1438.169010][T25674] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[ 1438.230196][T25674] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[ 1438.239028][T25674] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[ 1438.296187][T25674] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[ 1438.342249][T25674] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[ 1438.372986][T25690] loop6: detected capacity change from 0 to 128
[ 1438.402671][T25674] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[ 1438.495995][T25674] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[ 1438.659818][T25674] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[ 1438.679571][   T14] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1438.883350][   T14] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1438.894806][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1438.903602][   T14] usb 2-1: Product: syz
[ 1438.908206][   T14] usb 2-1: Manufacturer: syz
[ 1438.922160][   T14] usb 2-1: SerialNumber: syz
[ 1438.932666][   T14] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1438.964355][   T14] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1439.098016][T25705] loop6: detected capacity change from 0 to 128
[ 1439.166307][T25705] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1439.231648][T25705] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1439.484213][T22757] EXT4-fs (loop6): unmounting filesystem.
[ 1439.656230][T25708] loop0: detected capacity change from 0 to 256
[ 1440.617460][   T14] usb 2-1: Service connection timeout for: 256
[ 1440.643157][   T14] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1440.685564][   T14] ath9k_htc: Failed to initialize the device
[ 1440.710363][   T14] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1440.984474][T25272] EXT4-fs (loop2): unmounting filesystem.
[ 1441.849066][T14373] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1441.859044][T14373] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1441.867401][T14373] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1441.876320][T14373] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1441.887024][T14373] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1441.894757][T14373] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1442.343740][ T8491] usb 2-1: USB disconnect, device number 29
[ 1442.528016][T25742] device batadv0 entered promiscuous mode
[ 1442.548617][T25742] device bond0 entered promiscuous mode
[ 1442.594196][T25742] device bond_slave_0 entered promiscuous mode
[ 1442.637650][T25742] device bond_slave_1 entered promiscuous mode
[ 1442.669664][T25742] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1442.681202][T25748] loop0: detected capacity change from 0 to 512
[ 1442.689806][T25742] device batadv0 left promiscuous mode
[ 1442.696849][T25742] device bond0 left promiscuous mode
[ 1442.705562][T25742] device bond_slave_0 left promiscuous mode
[ 1442.711937][T25742] device bond_slave_1 left promiscuous mode
[ 1442.724223][T25748] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1442.795387][T25748] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5955: invalid indirect mapped block 256 (level 2)
[ 1442.857648][T25748] EXT4-fs (loop0): 2 truncates cleaned up
[ 1442.863591][T25748] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1442.886273][T25730] chnl_net:caif_netlink_parms(): no params data found
[ 1442.937765][T25748] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.5955: bg 0: block 5: invalid block bitmap
[ 1443.002888][T25748] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28
[ 1443.079845][T25748] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 1443.079845][T25748] 
[ 1443.119938][T25748] EXT4-fs (loop0): Total free blocks count 0
[ 1443.125934][T25748] EXT4-fs (loop0): Free/Dirty block details
[ 1443.147442][T25748] EXT4-fs (loop0): free_blocks=0
[ 1443.177420][T25748] EXT4-fs (loop0): dirty_blocks=44
[ 1443.215732][T25748] EXT4-fs (loop0): Block reservation details
[ 1443.237768][T25748] EXT4-fs (loop0): i_reserved_data_blocks=44
[ 1443.253730][T25730] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1443.288402][T25730] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1443.310860][T25730] device bridge_slave_0 entered promiscuous mode
[ 1443.346568][T24833] EXT4-fs (loop0): unmounting filesystem.
[ 1443.364202][T25730] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1443.372621][T25730] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1443.467444][T25730] device bridge_slave_1 entered promiscuous mode
[ 1443.563113][T25730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1443.604981][T25730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1443.760095][T25730] team0: Port device team_slave_0 added
[ 1443.814138][T25730] team0: Port device team_slave_1 added
[ 1443.890706][T25730] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1443.898585][T25730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1443.937057][T14373] Bluetooth: hci1: command 0x0409 tx timeout
[ 1444.098089][T25730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1444.128553][T25730] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1444.155063][T25730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1444.263779][T25730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1444.395776][T25786] loop2: detected capacity change from 0 to 4096
[ 1444.475923][T25786] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[ 1444.494543][T25730] device hsr_slave_0 entered promiscuous mode
[ 1444.517074][T25730] device hsr_slave_1 entered promiscuous mode
[ 1444.542127][T25730] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1444.570746][T25730] Cannot create hsr debugfs directory
[ 1445.190771][T25730] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1445.559916][T17850] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1445.719945][T25730] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1445.828645][T17850] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1446.008086][T25730] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1446.019025][T14373] Bluetooth: hci1: command 0x041b tx timeout
[ 1446.157639][T17850] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1446.322642][T25730] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1446.487810][T17850] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1446.512222][T14373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1446.541615][T14373] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1446.553892][T14373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1446.629257][T14373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1446.651271][T14373] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1446.664861][T14373] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1446.942940][T25730] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1447.108291][T25730] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1447.130387][T25730] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1447.167862][T25730] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1447.259077][T25775] Set syz1 is full, maxelem 65536 reached
[ 1447.421599][T25799] chnl_net:caif_netlink_parms(): no params data found
[ 1447.834517][T25730] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1448.144883][T22758] Bluetooth: hci1: command 0x040f tx timeout
[ 1448.439468][   T14] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 1448.522354][T25830] IPv6: ADDRCONF(NETDEV_CHANGE): ipip8: link becomes ready
[ 1448.604691][   T14] usb 1-1: device descriptor read/64, error -71
[ 1448.630232][T25840] loop1: detected capacity change from 0 to 256
[ 1448.742374][T25843] loop6: detected capacity change from 0 to 1764
[ 1448.748905][T22758] Bluetooth: hci2: command 0x0409 tx timeout
[ 1448.828524][T25799] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1448.836283][T25799] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1448.846667][T25799] device bridge_slave_0 entered promiscuous mode
[ 1448.857676][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1448.883884][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1448.932006][T25799] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1448.934626][   T14] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[ 1448.939295][T25799] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1448.960908][T25799] device bridge_slave_1 entered promiscuous mode
[ 1448.972519][T25730] 8021q: adding VLAN 0 to HW filter on device team0
[ 1449.036572][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1449.070507][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1449.086709][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1449.093833][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1449.104438][   T14] usb 1-1: device descriptor read/64, error -71
[ 1449.104818][T25799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1449.234392][   T14] usb usb1-port1: attempt power cycle
[ 1449.291359][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1449.299835][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1449.309215][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1449.318575][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1449.325757][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1449.340430][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1449.352298][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1449.365821][T25799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1449.378403][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1449.394461][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1449.403517][T25850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5984'.
[ 1449.453854][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1449.478775][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1449.515898][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1449.622060][T25799] team0: Port device team_slave_0 added
[ 1449.632465][T25799] team0: Port device team_slave_1 added
[ 1449.651316][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1449.660135][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1449.676810][T25730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1449.683960][   T14] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[ 1449.689130][T25730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1449.745764][   T14] usb 1-1: device descriptor read/8, error -71
[ 1449.780955][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1449.794735][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1449.816296][T17850] device hsr_slave_0 left promiscuous mode
[ 1449.838494][T17850] device hsr_slave_1 left promiscuous mode
[ 1449.865733][T17850] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1449.881414][T17850] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1449.897557][T17850] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1449.913455][T17850] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1449.928042][T17850] device bridge_slave_1 left promiscuous mode
[ 1449.941995][T17850] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1449.965330][T17850] device bridge_slave_0 left promiscuous mode
[ 1449.972431][T17850] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1450.023786][   T14] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 1450.048684][T17850] device veth1_macvtap left promiscuous mode
[ 1450.055255][T17850] device veth0_macvtap left promiscuous mode
[ 1450.061365][T17850] device veth1_vlan left promiscuous mode
[ 1450.067497][T17850] device veth0_vlan left promiscuous mode
[ 1450.084549][   T14] usb 1-1: device descriptor read/8, error -71
[ 1450.180465][T22758] Bluetooth: hci1: command 0x0419 tx timeout
[ 1450.203947][   T14] usb usb1-port1: unable to enumerate USB device
[ 1450.429188][T25868] loop6: detected capacity change from 0 to 512
[ 1450.524906][T25868] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.5988: inode has both inline data and extents flags
[ 1450.553777][T25868] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.5988: couldn't read orphan inode 15 (err -117)
[ 1450.616011][T25868] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1450.810052][T22757] EXT4-fs (loop6): unmounting filesystem.
[ 1450.816452][T22758] Bluetooth: hci2: command 0x041b tx timeout
[ 1452.443973][T17850] team0 (unregistering): Port device team_slave_1 removed
[ 1452.496338][T17850] team0 (unregistering): Port device team_slave_0 removed
[ 1452.565202][T17850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1452.660828][T17850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1452.892473][T22758] Bluetooth: hci2: command 0x040f tx timeout
[ 1453.150613][T17850] bond0 (unregistering): Released all slaves
[ 1453.264830][T25884] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1453.267784][T25888] IPv6: ADDRCONF(NETDEV_CHANGE): ipip1: link becomes ready
[ 1453.274430][T25884] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1453.291295][T25884] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1453.354189][T25885] device syzkaller0 entered promiscuous mode
[ 1453.395856][T25905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5994'.
[ 1453.413880][T25799] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1453.421175][T25799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1453.490861][T25799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1454.974626][T22758] Bluetooth: hci2: command 0x0419 tx timeout
[ 1455.941536][T25799] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1455.948508][T25799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1455.975343][T25799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1456.221941][T25799] device hsr_slave_0 entered promiscuous mode
[ 1456.276975][T25799] device hsr_slave_1 entered promiscuous mode
[ 1456.289775][T25799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1456.325739][T25799] Cannot create hsr debugfs directory
[ 1456.463668][T25937] device syzkaller0 entered promiscuous mode
[ 1456.494543][T25730] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1456.537346][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1456.570622][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1456.745685][T25953] loop6: detected capacity change from 0 to 2048
[ 1456.813143][T25953] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1457.035518][T25959] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1457.100961][T25959] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 528 with error 28
[ 1457.150274][T25959] EXT4-fs (loop6): This should not happen!! Data will be lost
[ 1457.150274][T25959] 
[ 1457.171642][T25959] EXT4-fs (loop6): Total free blocks count 0
[ 1457.177731][T25959] EXT4-fs (loop6): Free/Dirty block details
[ 1457.196546][T25959] EXT4-fs (loop6): free_blocks=2415919104
[ 1457.225137][T25959] EXT4-fs (loop6): dirty_blocks=528
[ 1457.240976][T25959] EXT4-fs (loop6): Block reservation details
[ 1457.247705][T25959] EXT4-fs (loop6): i_reserved_data_blocks=33
[ 1457.914912][ T5192] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 138 with max blocks 390 with error 28
[ 1459.839742][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1459.880752][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1460.011436][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1460.049603][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1460.079938][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1460.126226][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1460.155118][T25730] device veth0_vlan entered promiscuous mode
[ 1460.198187][T25730] device veth1_vlan entered promiscuous mode
[ 1460.370770][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1460.389040][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1460.397180][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1460.439601][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1460.461995][T25730] device veth0_macvtap entered promiscuous mode
[ 1460.527815][T25997] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6010'.
[ 1460.550087][T25730] device veth1_macvtap entered promiscuous mode
[ 1460.668986][T26009] netlink: 'syz.1.6014': attribute type 10 has an invalid length.
[ 1460.676861][T26009] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1460.716788][T26009] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1460.758196][T25730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1460.821820][T25730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1460.852406][T25730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1460.892042][T25730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1460.926376][T25730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1460.946419][T25730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1460.957751][T25730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1460.987121][T25730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1461.008132][T25730] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1461.033041][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1461.053009][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1461.074929][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1461.093939][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1461.112818][T25799] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1461.163425][T26003] device syzkaller0 entered promiscuous mode
[ 1461.176647][T26021] netlink: 'syz.1.6016': attribute type 10 has an invalid length.
[ 1461.196145][T25730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1461.224874][T25730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1461.253811][T25730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1461.281694][T25730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1461.303035][T25730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1461.315773][T25730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1461.343209][T25730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1461.355960][T25730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1461.369899][T25730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1461.381502][T25730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1461.393454][T25730] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1461.405006][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1461.424095][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1461.439685][T25799] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1461.462527][T25799] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1463.490453][T26048] loop6: detected capacity change from 0 to 512
[ 1463.527484][T26048] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1463.568736][T26048] EXT4-fs (loop6): 1 truncate cleaned up
[ 1463.576741][T26048] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1463.671410][   T26] audit: type=1800 audit(1772836052.966:1437): pid=26048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6026" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1463.731022][   T26] audit: type=1800 audit(1772836053.006:1438): pid=26051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6026" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1464.153878][T22757] EXT4-fs (loop6): unmounting filesystem.
[ 1464.224544][T26053] loop6: detected capacity change from 0 to 128
[ 1464.259226][T26053] EXT4-fs: Ignoring removed nobh option
[ 1464.279534][T26053] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1464.289012][T26053] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1464.351785][T22757] EXT4-fs (loop6): unmounting filesystem.
[ 1464.617051][T25799] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1464.633767][T26056] netlink: 'syz.6.6028': attribute type 15 has an invalid length.
[ 1464.641674][T26056] netlink: 'syz.6.6028': attribute type 7 has an invalid length.
[ 1464.668506][T25730] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1464.706124][T25730] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1464.736012][T25730] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1464.745115][T25730] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1464.861163][T26060] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6030'.
[ 1465.005116][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1465.037341][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1465.062886][T26065] loop6: detected capacity change from 0 to 256
[ 1465.096073][T25799] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1465.145323][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1465.203058][ T5188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1465.226962][T25799] 8021q: adding VLAN 0 to HW filter on device team0
[ 1465.234729][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1465.249168][ T5188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1465.276786][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1465.313219][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1465.386156][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1465.426497][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1465.456623][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1465.463740][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1465.491050][T26077] loop1: detected capacity change from 0 to 128
[ 1465.508173][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1465.531010][T26077] EXT4-fs: Ignoring removed nobh option
[ 1465.538642][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1465.566876][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1465.574006][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1465.612270][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1465.624554][T26077] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1465.694651][T26077] ext4 filesystem being mounted at /567/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1466.015451][T15973] EXT4-fs (loop1): unmounting filesystem.
[ 1466.427320][T26073] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1466.434795][T26073] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1466.818894][T26073] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1466.861427][T26073] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1467.169327][T26073] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1467.178778][T26073] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1467.187693][T26073] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1467.197322][T26073] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1467.295044][T26074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 49796 - 0
[ 1467.305899][T26074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 49796 - 0
[ 1467.314701][T26074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 49796 - 0
[ 1467.324727][T26074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 49796 - 0
[ 1467.333664][T26074] device geneve2 entered promiscuous mode
[ 1467.407032][T26087] device syzkaller0 entered promiscuous mode
[ 1467.424597][T26114] netlink: 'syz.1.6040': attribute type 1 has an invalid length.
[ 1467.934550][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1467.949660][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1468.152023][T26135] loop3: detected capacity change from 0 to 256
[ 1470.385939][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1470.395700][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1470.561487][T26137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1470.605208][T26151] loop3: detected capacity change from 0 to 128
[ 1470.625171][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1470.634724][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1470.639785][T26151] EXT4-fs: Ignoring removed nobh option
[ 1470.683224][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1470.750073][T26151] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1470.759293][T26151] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1470.814526][T26137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1470.853263][T14517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1470.869141][T14517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1470.883329][T25730] EXT4-fs (loop3): unmounting filesystem.
[ 1470.889859][T14517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1470.899620][T14517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1470.912992][T25799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1471.036801][T26160] loop6: detected capacity change from 0 to 512
[ 1471.111956][T26160] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1471.121833][T26137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1471.149815][T26160] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1471.355088][T26137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1471.371545][T22757] EXT4-fs (loop6): unmounting filesystem.
[ 1471.442385][T26174] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6055'.
[ 1471.652493][T26183] loop0: detected capacity change from 0 to 256
[ 1471.673577][T26137] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1471.730338][T26137] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1471.766520][T26137] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1471.821045][T26137] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1471.938548][T26187] device syzkaller0 entered promiscuous mode
[ 1472.004011][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1472.022041][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1472.035229][T25799] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1472.194747][T26201] loop1: detected capacity change from 0 to 128
[ 1472.225958][T26201] EXT4-fs: Ignoring removed nobh option
[ 1472.313506][T26201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1472.377199][T26201] ext4 filesystem being mounted at /571/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1472.500791][T15973] EXT4-fs (loop1): unmounting filesystem.
[ 1473.705382][T26222] loop1: detected capacity change from 0 to 256
[ 1474.821197][T26217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6067'.
[ 1475.102961][T26240] loop1: detected capacity change from 0 to 128
[ 1475.113813][T26233] device syzkaller0 entered promiscuous mode
[ 1475.128886][T26240] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1475.159721][T26236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1475.177583][T26236] device syzkaller0 entered promiscuous mode
[ 1475.218431][T26240] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1478.203365][T26280] Invalid argument reading file caps for ./file0
[ 1478.440513][T26284] loop3: detected capacity change from 0 to 2048
[ 1478.500675][T26284] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1479.163051][T26265] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1479.288648][T26288] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1479.353471][T26288] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[ 1479.377089][T26288] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 1479.377089][T26288] 
[ 1479.397299][T26288] EXT4-fs (loop3): Total free blocks count 0
[ 1479.424440][T26288] EXT4-fs (loop3): Free/Dirty block details
[ 1479.440895][T26288] EXT4-fs (loop3): free_blocks=2415919104
[ 1479.457784][T26288] EXT4-fs (loop3): dirty_blocks=4816
[ 1479.469109][T26288] EXT4-fs (loop3): Block reservation details
[ 1479.475120][T26288] EXT4-fs (loop3): i_reserved_data_blocks=301
[ 1479.797590][   T62] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[ 1479.855242][T26265] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1479.867134][T26265] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1479.883923][T26265] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1479.895870][T26265] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1479.916616][T26265] device geneve2 left promiscuous mode
[ 1480.040729][T26269] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 53783 - 0
[ 1480.069840][T26269] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 53783 - 0
[ 1480.085126][T26269] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 53783 - 0
[ 1480.098141][T26269] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 53783 - 0
[ 1480.121447][T26269] device geneve3 entered promiscuous mode
[ 1480.132510][T26235] tipc: Resetting bearer <eth:syzkaller0>
[ 1480.185210][T26235] tipc: Disabling bearer <eth:syzkaller0>
[ 1480.249332][T26259] device syzkaller0 entered promiscuous mode
[ 1480.453000][T26305] loop6: detected capacity change from 0 to 128
[ 1480.479883][T26305] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1480.544462][T26305] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1483.418031][T25382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1483.436172][T25382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1483.515212][T25382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1483.568362][T25382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1483.619461][T25799] device veth0_vlan entered promiscuous mode
[ 1483.636041][T25382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1483.667850][T25382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1483.681582][T25799] device veth1_vlan entered promiscuous mode
[ 1483.720937][T26339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6092'.
[ 1483.760935][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1483.767337][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1483.823713][T26344] can0: slcan on ptm0.
[ 1483.830080][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1483.849719][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1483.912959][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1483.957703][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1484.019194][T26350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6097'.
[ 1484.050293][T25799] device veth0_macvtap entered promiscuous mode
[ 1484.087215][T26343] can0 (unregistered): slcan off ptm0.
[ 1484.097579][T25799] device veth1_macvtap entered promiscuous mode
[ 1484.179248][T26355] device syzkaller0 entered promiscuous mode
[ 1484.221896][T25799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1484.267808][T25799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1484.285758][T25799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1484.296315][T25799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1484.323865][T25799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1484.352005][T25799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1484.375131][T25799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1484.414551][T25799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1484.455256][T25799] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1484.523427][T25382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1484.541859][T25382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1484.582862][T25382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1484.595161][T26377] loop3: detected capacity change from 0 to 512
[ 1484.603298][T25382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1484.627093][T25799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1484.640285][T26377] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1484.649608][T25799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1484.676509][T25799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1484.704836][T25799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1484.723899][T25799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1484.732311][T26377] EXT4-fs (loop3): 1 truncate cleaned up
[ 1484.750707][T26377] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1484.764487][T25799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1484.848177][   T26] audit: type=1800 audit(1772836074.157:1439): pid=26377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6105" name="file1" dev="loop3" ino=15 res=0 errno=0
[ 1484.855481][T25799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1484.890800][T25799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1484.912280][T25799] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1484.960720][T25382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1484.988649][T25382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1485.031363][T25799] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1485.096410][T25799] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1485.166022][T25799] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1485.175238][T14005] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1485.223440][T25799] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1485.254786][T26391] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6106'.
[ 1485.416449][T14005] usb 1-1: Using ep0 maxpacket: 32
[ 1485.432452][T14005] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[ 1485.467557][T25730] EXT4-fs (loop3): unmounting filesystem.
[ 1485.473442][T14005] usb 1-1: config 0 has no interface number 0
[ 1485.481318][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1485.503823][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1485.516551][T14005] usb 1-1: config 0 interface 184 has no altsetting 0
[ 1485.568286][T14005] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1485.599186][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1485.600039][T14005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1485.622029][ T5192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1485.652830][T14005] usb 1-1: Product: syz
[ 1485.659814][ T5192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1485.674988][T14005] usb 1-1: Manufacturer: syz
[ 1485.687305][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1485.715977][T14005] usb 1-1: SerialNumber: syz
[ 1485.736961][T14005] usb 1-1: config 0 descriptor??
[ 1485.781738][T14005] smsc75xx v1.0.0
[ 1485.885894][ T4315] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1486.089366][ T4315] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1486.123361][ T4315] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1486.186473][ T4315] usb 7-1: can't read configurations, error -71
[ 1486.246463][T26413] device syzkaller0 entered promiscuous mode
[ 1486.576968][T26425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6117'.
[ 1486.690319][T26431] tipc: Started in network mode
[ 1486.705997][T26431] tipc: Node identity 56ee35f1b469, cluster identity 4711
[ 1486.726033][T26431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1486.771919][T26433] device syzkaller0 entered promiscuous mode
[ 1486.818594][T26431] tipc: Resetting bearer <eth:syzkaller0>
[ 1486.852319][T26430] tipc: Resetting bearer <eth:syzkaller0>
[ 1486.957961][T26430] tipc: Disabling bearer <eth:syzkaller0>
[ 1487.084743][T26439] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6120'.
[ 1487.303475][T26446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6122'.
[ 1487.497174][T26455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6124'.
[ 1487.565659][T26452] can0: slcan on ptm0.
[ 1487.745543][T26447] can0 (unregistered): slcan off ptm0.
[ 1488.487849][T26488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6132'.
[ 1488.975806][T14005] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1489.021877][T14005] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1489.072134][T14005] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 1489.161939][T14005] smsc75xx: probe of 1-1:0.184 failed with error -71
[ 1489.202503][T14005] usb 1-1: USB disconnect, device number 2
[ 1489.314861][T26502] device syzkaller0 entered promiscuous mode
[ 1489.607428][T26510] can0: slcan on ptm0.
[ 1489.814214][T26507] can0 (unregistered): slcan off ptm0.
[ 1490.377793][T26537] loop1: detected capacity change from 0 to 256
[ 1490.871564][T26552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1490.972614][T26555] device syzkaller0 entered promiscuous mode
[ 1491.046598][T26552] tipc: Resetting bearer <eth:syzkaller0>
[ 1491.100527][T26550] tipc: Resetting bearer <eth:syzkaller0>
[ 1491.178334][T26550] tipc: Disabling bearer <eth:syzkaller0>
[ 1491.449206][T26561] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1491.485369][T26561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1491.513355][T26561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1492.355022][   T33] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 53783 - 0
[ 1492.368363][T22758] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1492.378971][T22758] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1492.401601][T22758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1492.421182][T22758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1492.428668][T22758] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1492.436294][T22758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1492.533113][   T33] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 53783 - 0
[ 1492.708998][   T33] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53783 - 0
[ 1492.886016][   T33] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53783 - 0
[ 1493.253121][T26590] chnl_net:caif_netlink_parms(): no params data found
[ 1493.546965][   T33] tipc: Disabling bearer <udp:syz2>
[ 1493.556231][   T33] tipc: Left network mode
[ 1493.707704][T26590] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1493.807465][T26590] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1493.931875][T26590] device bridge_slave_0 entered promiscuous mode
[ 1494.215797][T26637] IPv6: ADDRCONF(NETDEV_CHANGE): ipip1: link becomes ready
[ 1494.294855][T26590] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1494.471802][T22758] Bluetooth: hci0: command 0x0409 tx timeout
[ 1494.491874][T26590] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1494.542717][T26590] device bridge_slave_1 entered promiscuous mode
[ 1494.805746][T26590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1494.923678][T26590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1494.992296][T26590] team0: Port device team_slave_0 added
[ 1495.084332][T26590] team0: Port device team_slave_1 added
[ 1495.151452][   T41] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1495.221596][T26590] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1495.245442][T26590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1495.283148][T26590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1495.334731][T26590] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1495.341942][T26590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1495.385361][   T41] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1495.395951][T26590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1495.410848][   T41] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1495.427157][   T41] usb 1-1: can't read configurations, error -71
[ 1495.610807][T26590] device hsr_slave_0 entered promiscuous mode
[ 1495.647385][T26590] device hsr_slave_1 entered promiscuous mode
[ 1495.668041][T26590] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1495.709001][T26590] Cannot create hsr debugfs directory
[ 1495.840066][T26487] Set syz1 is full, maxelem 65536 reached
[ 1496.085964][T26674] loop0: detected capacity change from 0 to 128
[ 1496.119934][T26674] EXT4-fs: Ignoring removed nobh option
[ 1496.131917][T26676] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1496.249006][T26674] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1496.258700][T26674] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1496.553866][T22758] Bluetooth: hci0: command 0x041b tx timeout
[ 1497.011624][T24833] EXT4-fs (loop0): unmounting filesystem.
[ 1497.169383][T26693] loop3: detected capacity change from 0 to 512
[ 1497.207239][T26693] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1497.283352][T26688] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1497.292827][T26688] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1497.302536][T26688] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1497.421421][T26693] EXT4-fs (loop3): 1 truncate cleaned up
[ 1497.427118][T26693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1497.819981][T26725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6184'.
[ 1497.895783][T26724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1497.923084][T26724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1497.950625][T26724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1497.980188][T26724] device bridge_slave_0 left promiscuous mode
[ 1497.986458][T26724] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1498.078821][T26724] device bridge_slave_1 left promiscuous mode
[ 1498.103461][T26724] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1498.157680][T26724] bond0: (slave bond_slave_0): Releasing backup interface
[ 1498.281506][T26724] bond0: (slave bond_slave_1): Releasing backup interface
[ 1498.443347][T26724] team0: Port device team_slave_0 removed
[ 1498.506718][T26724] team0: Port device team_slave_1 removed
[ 1498.541598][T26724] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1498.564483][T26724] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1498.582455][T26724] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1498.591058][T26724] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1498.635111][T22758] Bluetooth: hci0: command 0x040f tx timeout
[ 1498.701700][T25730] EXT4-fs (loop3): unmounting filesystem.
[ 1498.932525][   T33] device hsr_slave_0 left promiscuous mode
[ 1498.947451][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1499.010993][   T33] device bridge_slave_1 left promiscuous mode
[ 1499.033832][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1499.046285][   T33] device bridge_slave_0 left promiscuous mode
[ 1499.052961][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1499.269625][T26105] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1499.488625][T26105] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1499.525492][T26105] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1499.533833][T26105] usb 4-1: can't read configurations, error -71
[ 1499.668851][   T33] team0 (unregistering): Port device team_slave_1 removed
[ 1499.717497][   T33] team0 (unregistering): Port device team_slave_0 removed
[ 1499.766480][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1499.816068][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1500.124625][T26769] loop3: detected capacity change from 0 to 128
[ 1500.149846][T26769] EXT4-fs: Ignoring removed nobh option
[ 1500.213395][T26769] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1500.228463][T26769] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1500.369337][   T33] bond0 (unregistering): Released all slaves
[ 1500.399803][T25730] EXT4-fs (loop3): unmounting filesystem.
[ 1500.629318][T26775] loop3: detected capacity change from 0 to 512
[ 1500.666798][T26775] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.6195: inode has both inline data and extents flags
[ 1500.708661][T22758] Bluetooth: hci0: command 0x0419 tx timeout
[ 1500.751764][T26775] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.6195: couldn't read orphan inode 15 (err -117)
[ 1500.790364][T26775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1501.007498][T26774] process '/file0' started with executable stack
[ 1501.073876][T25730] EXT4-fs (loop3): unmounting filesystem.
[ 1501.084246][T26785] loop0: detected capacity change from 0 to 512
[ 1501.110449][T26781] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 1501.142710][T26785] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1501.274406][T26785] EXT4-fs (loop0): 1 truncate cleaned up
[ 1501.328301][T26785] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1501.374053][   T26] audit: type=1800 audit(1772836090.695:1440): pid=26785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6198" name="file1" dev="loop0" ino=15 res=0 errno=0
[ 1501.436271][T26790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6200'.
[ 1501.511853][T26590] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1501.593783][T26590] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1501.620179][T26590] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1501.644715][T26590] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1501.711238][T24833] EXT4-fs (loop0): unmounting filesystem.
[ 1501.837984][T25406] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1501.928801][T26590] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1501.953860][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1502.006655][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1502.028907][T26590] 8021q: adding VLAN 0 to HW filter on device team0
[ 1502.040034][T25406] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1502.071481][T25406] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1502.086147][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1502.093353][T25406] usb 4-1: can't read configurations, error -71
[ 1502.105889][T26809] loop0: detected capacity change from 0 to 128
[ 1502.128382][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1502.150990][T26809] EXT4-fs: Ignoring removed nobh option
[ 1502.167923][T26694] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1502.175032][T26694] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1502.213142][T26809] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1502.238502][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1502.265156][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1502.298176][T26809] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1502.368707][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1502.425450][T26694] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1502.432630][T26694] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1502.474784][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1502.498928][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1502.526776][T24833] EXT4-fs (loop0): unmounting filesystem.
[ 1502.559133][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1502.633100][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1502.642335][T26830] loop6: detected capacity change from 0 to 512
[ 1502.654920][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1502.677842][T26830] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1502.738475][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1502.750711][T26830] EXT4-fs (loop6): 1 truncate cleaned up
[ 1502.770146][T26835] loop0: detected capacity change from 0 to 512
[ 1502.777496][T26830] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1502.814935][T26590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1502.860824][   T26] audit: type=1800 audit(1772836092.176:1441): pid=26830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6207" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1502.904373][T26590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1502.941347][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1502.971679][T26835] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.6208: inode has both inline data and extents flags
[ 1502.979495][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1502.995269][T26835] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.6208: couldn't read orphan inode 15 (err -117)
[ 1503.009243][T26835] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1503.062566][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1503.075724][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1503.126066][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1503.156453][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1503.178304][T24833] EXT4-fs (loop0): unmounting filesystem.
[ 1503.389793][T22757] EXT4-fs (loop6): unmounting filesystem.
[ 1503.520207][T26848] device syzkaller0 entered promiscuous mode
[ 1503.853279][T26862] loop0: detected capacity change from 0 to 128
[ 1503.892691][T26859] device syzkaller0 entered promiscuous mode
[ 1503.928802][T26862] EXT4-fs: Ignoring removed nobh option
[ 1504.006323][T26862] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1504.030220][T26862] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1504.057674][T21189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1504.065112][T21189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1504.165821][T26590] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1504.190719][T26871] netlink: 148 bytes leftover after parsing attributes in process `syz.7.6219'.
[ 1504.259247][T26871] netlink: 116 bytes leftover after parsing attributes in process `syz.7.6219'.
[ 1504.291988][T26874] loop3: detected capacity change from 0 to 512
[ 1504.308502][T26871] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6219'.
[ 1504.346831][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1504.357220][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1504.464760][T26874] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.6220: inode has both inline data and extents flags
[ 1504.517165][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1504.535956][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1504.546303][T24833] EXT4-fs (loop0): unmounting filesystem.
[ 1504.565195][T26874] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.6220: couldn't read orphan inode 15 (err -117)
[ 1504.570186][T26590] device veth0_vlan entered promiscuous mode
[ 1504.618245][T26886] loop6: detected capacity change from 0 to 512
[ 1504.640768][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1504.657825][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1504.722707][T26590] device veth1_vlan entered promiscuous mode
[ 1504.736758][T26886] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1504.755451][T26874] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1504.769911][T26890] loop0: detected capacity change from 0 to 512
[ 1504.874009][T26890] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1504.905532][T26590] device veth0_macvtap entered promiscuous mode
[ 1504.916386][ T4315] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1504.925864][T26886] EXT4-fs (loop6): 1 truncate cleaned up
[ 1504.964009][T26890] EXT4-fs (loop0): 1 truncate cleaned up
[ 1504.975351][T26886] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1504.978832][T26890] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1504.996309][T26590] device veth1_macvtap entered promiscuous mode
[ 1505.006315][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1505.052355][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1505.114525][   T26] audit: type=1800 audit(1772836094.427:1442): pid=26890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6222" name="file1" dev="loop0" ino=15 res=0 errno=0
[ 1505.117579][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1505.219564][ T4315] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1505.236442][ T4315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1505.240677][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1505.278710][ T4315] usb 8-1: Product: syz
[ 1505.282905][ T4315] usb 8-1: Manufacturer: syz
[ 1505.293251][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1505.300876][ T4315] usb 8-1: SerialNumber: syz
[ 1505.311705][T25730] EXT4-fs (loop3): unmounting filesystem.
[ 1505.336330][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1505.415512][T26590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1505.435722][T26590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1505.469972][ T4315] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1505.486166][T26590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1505.592921][T26590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1505.636083][T26590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1505.656294][ T4315] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1505.679226][T26590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1505.701365][T26590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1505.738110][T26590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1505.765253][T24833] EXT4-fs (loop0): unmounting filesystem.
[ 1505.767619][T26590] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1505.840602][T17719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1505.857053][T17719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1505.961496][T26590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1506.000094][T26590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1506.042099][T26590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1506.063990][T26590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1506.076714][T26590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1506.087686][T26590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1506.103197][T26590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1506.120586][T26590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1506.151712][T26590] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1506.184112][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1506.212612][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1506.265140][T26590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1506.294433][T26590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1506.305854][T14373] Bluetooth: hci5: command 0x0406 tx timeout
[ 1506.343242][T26590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1506.450197][T26590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1506.584716][T26913] device syzkaller0 entered promiscuous mode
[ 1506.945753][ T4315] usb 8-1: Service connection timeout for: 256
[ 1506.952612][ T4315] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1507.027135][ T4315] ath9k_htc: Failed to initialize the device
[ 1507.039828][ T4315] usb 8-1: ath9k_htc: USB layer deinitialized
[ 1507.748073][T22757] EXT4-fs (loop6): unmounting filesystem.
[ 1507.894136][ T8491] usb 8-1: USB disconnect, device number 2
[ 1510.400344][T26930] device syzkaller0 entered promiscuous mode
[ 1510.503109][T26960] loop0: detected capacity change from 0 to 512
[ 1510.543220][T26960] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1510.599187][T26960] EXT4-fs (loop0): 1 truncate cleaned up
[ 1510.620362][T26960] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1510.704106][   T26] audit: type=1800 audit(1772836100.020:1443): pid=26960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6233" name="file1" dev="loop0" ino=15 res=0 errno=0
[ 1511.097271][T26970] loop6: detected capacity change from 0 to 512
[ 1511.130650][T26970] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1511.187659][T26970] EXT4-fs (loop6): 1 truncate cleaned up
[ 1511.213275][T26970] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1511.410801][T24833] EXT4-fs (loop0): unmounting filesystem.
[ 1511.660349][T26977] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6238'.
[ 1511.690812][T26977] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6238'.
[ 1511.707462][T26977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6238'.
[ 1512.100117][ T8491] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1512.328685][ T8491] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1512.341616][ T8491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1512.356723][ T8491] usb 1-1: Product: syz
[ 1512.361029][ T8491] usb 1-1: Manufacturer: syz
[ 1512.370047][ T8491] usb 1-1: SerialNumber: syz
[ 1512.411132][ T8491] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1512.489502][ T8491] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1512.523099][T22757] EXT4-fs (loop6): unmounting filesystem.
[ 1513.742155][ T8491] usb 1-1: Service connection timeout for: 256
[ 1513.748345][ T8491] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1513.979076][ T8491] ath9k_htc: Failed to initialize the device
[ 1514.003545][ T8491] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1514.718057][T25445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1514.748425][T25445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1514.774389][T26694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1514.777751][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1514.795623][T26694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1514.839403][T26694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1514.997480][T26998] device syzkaller0 entered promiscuous mode
[ 1515.815899][T27002] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1515.825511][T27002] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1515.835236][T27002] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1515.853266][T27006] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready
[ 1516.126010][ T4315] usb 1-1: USB disconnect, device number 5
[ 1516.285584][T27019] loop0: detected capacity change from 0 to 512
[ 1516.390009][T27019] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1516.531051][T27019] EXT4-fs (loop0): 1 truncate cleaned up
[ 1516.536748][T27019] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1516.568790][T27021] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1516.661093][T27040] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1516.686350][T27040] device syzkaller0 entered promiscuous mode
[ 1516.695364][   T26] audit: type=1800 audit(1772836106.023:1444): pid=27019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6247" name="file1" dev="loop0" ino=15 res=0 errno=0
[ 1516.853893][T27031] device syzkaller0 entered promiscuous mode
[ 1516.955762][T27021] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1517.049217][T24833] EXT4-fs (loop0): unmounting filesystem.
[ 1517.055568][T27047] tipc: Resetting bearer <eth:syzkaller0>
[ 1519.322310][T27051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6254'.
[ 1519.404871][T27021] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1519.424738][T27035] tipc: Resetting bearer <eth:syzkaller0>
[ 1519.462337][T27035] tipc: Disabling bearer <eth:syzkaller0>
[ 1519.586770][T27021] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1519.804497][T27070] netlink: 148 bytes leftover after parsing attributes in process `syz.7.6258'.
[ 1519.821979][T27070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6258'.
[ 1519.960334][T27082] device syzkaller0 entered promiscuous mode
[ 1520.122512][T27073] device syzkaller0 entered promiscuous mode
[ 1520.219959][ T8491] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1520.244745][T27021] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1520.276775][T27021] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1520.499514][ T8491] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1520.567814][ T8491] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.641316][ T8491] usb 8-1: Product: syz
[ 1520.645525][ T8491] usb 8-1: Manufacturer: syz
[ 1520.754122][ T8491] usb 8-1: SerialNumber: syz
[ 1520.793671][ T8491] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1521.006764][ T8491] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1522.313776][ T8491] usb 8-1: Service connection timeout for: 256
[ 1522.353289][ T8491] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1522.428751][ T8491] ath9k_htc: Failed to initialize the device
[ 1522.439596][ T8491] usb 8-1: ath9k_htc: USB layer deinitialized
[ 1523.552030][T26105] usb 8-1: USB disconnect, device number 3
[ 1523.650260][T27109] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6265'.
[ 1523.660720][T27109] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6265'.
[ 1523.876111][T27021] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.910662][T27021] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1525.271986][T27147] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6275'.
[ 1525.361345][T27147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6275'.
[ 1525.381733][T27153] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1525.836085][   T22] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1525.989606][T27174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 49796 - 0
[ 1526.097334][   T22] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1526.130633][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1526.193883][   T22] usb 2-1: Product: syz
[ 1526.210621][   T22] usb 2-1: Manufacturer: syz
[ 1526.235416][   T22] usb 2-1: SerialNumber: syz
[ 1526.387854][T27174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 49796 - 0
[ 1526.461519][   T22] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1526.575104][T27174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 49796 - 0
[ 1526.653574][ T4320] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1526.768246][T27174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 49796 - 0
[ 1526.796518][T27191] loop3: detected capacity change from 0 to 2048
[ 1526.866141][T27193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6284'.
[ 1526.903640][T27191] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1526.972965][T27194] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6284'.
[ 1527.124624][T27174] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 49796 - 0
[ 1527.230031][T27174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 49796 - 0
[ 1527.365942][T27174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 49796 - 0
[ 1527.504743][T27174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 49796 - 0
[ 1527.949650][T27214] IPv6: ADDRCONF(NETDEV_CHANGE): ipip2: link becomes ready
[ 1527.975145][ T4320] usb 2-1: Service connection timeout for: 256
[ 1527.988724][ T4320] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1528.651671][ T4320] ath9k_htc: Failed to initialize the device
[ 1528.660360][ T4320] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1528.981102][T27222] device syzkaller0 entered promiscuous mode
[ 1529.135498][T25406] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1529.196421][T25730] EXT4-fs (loop3): unmounting filesystem.
[ 1529.347415][T25406] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1529.361180][T25406] usb 8-1: unable to read config index 0 descriptor/start: -71
[ 1529.384352][T25406] usb 8-1: can't read configurations, error -71
[ 1529.608143][   T41] usb 2-1: USB disconnect, device number 30
[ 1529.721474][T27233] device syzkaller0 entered promiscuous mode
[ 1530.340525][T27266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6299'.
[ 1532.845361][T27244] device syzkaller0 entered promiscuous mode
[ 1532.946032][T27275] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 49796 - 0
[ 1533.050014][T27275] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 49796 - 0
[ 1533.179505][T27275] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 49796 - 0
[ 1533.278810][T27290] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1533.314264][T27275] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 49796 - 0
[ 1533.363722][T27290] bond0 speed is unknown, defaulting to 1000
[ 1533.408972][T27290] bond0 speed is unknown, defaulting to 1000
[ 1533.442477][T27290] bond0 speed is unknown, defaulting to 1000
[ 1533.469773][T27275] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 49796 - 0
[ 1533.546113][T27275] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 49796 - 0
[ 1533.605708][T27275] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 49796 - 0
[ 1533.644872][T27275] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 49796 - 0
[ 1533.692281][T27306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6309'.
[ 1533.803426][   T22] bond0 speed is unknown, defaulting to 1000
[ 1533.810024][T27290] infiniband syz0: set down
[ 1533.827736][T27290] infiniband syz0: added bond0
[ 1534.064903][T27290] RDS/IB: syz0: added
[ 1534.087710][T27290] smc: adding ib device syz0 with port count 1
[ 1534.187318][T27290] smc:    ib device syz0 port 1 has pnetid 
[ 1534.264081][   T41] bond0 speed is unknown, defaulting to 1000
[ 1534.289256][T27325] device syzkaller0 entered promiscuous mode
[ 1534.337996][T27290] bond0 speed is unknown, defaulting to 1000
[ 1534.685490][T27290] bond0 speed is unknown, defaulting to 1000
[ 1535.097102][T27347] 9pnet_fd: Insufficient options for proto=fd
[ 1535.134071][T27290] bond0 speed is unknown, defaulting to 1000
[ 1535.331306][T14373] Bluetooth: hci0: command 0x0407 tx timeout
[ 1535.475853][T27290] bond0 speed is unknown, defaulting to 1000
[ 1535.796729][T27369] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1535.850202][T27290] bond0 speed is unknown, defaulting to 1000
[ 1535.895707][T27369] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1535.963226][T27374] device syzkaller0 entered promiscuous mode
[ 1536.122181][T27369] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1536.294832][T27376] device syzkaller0 entered promiscuous mode
[ 1536.346236][T27369] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1536.389730][T27290] bond0 speed is unknown, defaulting to 1000
[ 1536.539898][T27369] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1539.559628][T27290] bond0 speed is unknown, defaulting to 1000
[ 1539.565130][T27369] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1539.590433][T27418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6336'.
[ 1539.608905][T27369] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1539.725389][T27369] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1539.806150][T27438] loop0: detected capacity change from 0 to 512
[ 1539.916212][T27438] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1539.961291][T27438] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1539.972035][T27290] bond0 speed is unknown, defaulting to 1000
[ 1540.191510][T24833] EXT4-fs (loop0): unmounting filesystem.
[ 1540.241973][T27290] bond0 speed is unknown, defaulting to 1000
[ 1540.369286][T27456] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6342'.
[ 1540.381419][T27456] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6342'.
[ 1540.550934][ T4320] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1540.691888][T27469] device syzkaller0 entered promiscuous mode
[ 1540.752985][ T4320] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1540.772261][ T4320] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1540.898624][   T22] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1540.918399][ T4320] usb 2-1: can't read configurations, error -71
[ 1541.255047][   T22] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1541.271631][   T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1541.341839][   T22] usb 7-1: Product: syz
[ 1541.346049][   T22] usb 7-1: Manufacturer: syz
[ 1541.459561][   T22] usb 7-1: SerialNumber: syz
[ 1541.518774][   T22] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1541.544288][T27495] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6354'.
[ 1541.570626][T27493] 9pnet_fd: Insufficient options for proto=fd
[ 1541.588214][T27495] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6354'.
[ 1541.678850][T27495] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6354'.
[ 1541.906615][T27501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6357'.
[ 1541.950359][   T22] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1543.258127][   T22] usb 7-1: Service connection timeout for: 256
[ 1543.264883][   T22] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1543.345455][   T22] ath9k_htc: Failed to initialize the device
[ 1543.355765][T27549] device syzkaller0 entered promiscuous mode
[ 1543.356952][   T22] usb 7-1: ath9k_htc: USB layer deinitialized
[ 1544.577587][T27581] rdma_rxe: already configured on bond0
[ 1544.763697][ T4320] usb 7-1: USB disconnect, device number 20
[ 1545.025658][T27592] device syzkaller0 entered promiscuous mode
[ 1545.168191][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.174519][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1545.209984][T27598] loop6: detected capacity change from 0 to 256
[ 1545.422589][T27609] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6390'.
[ 1546.360635][T27628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6396'.
[ 1546.504408][T27628] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6396'.
[ 1546.765493][ T8491] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1546.982938][ T8491] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1547.019240][ T8491] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1547.080844][ T8491] usb 2-1: Product: syz
[ 1547.085051][ T8491] usb 2-1: Manufacturer: syz
[ 1547.189134][ T8491] usb 2-1: SerialNumber: syz
[ 1547.246372][ T8491] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1547.393957][ T8491] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1547.653798][T27661] device syzkaller0 entered promiscuous mode
[ 1548.430546][T27677] device syzkaller0 entered promiscuous mode
[ 1548.435894][T27678] loop0: detected capacity change from 0 to 256
[ 1548.604840][ T8491] usb 2-1: Service connection timeout for: 256
[ 1548.615188][ T8491] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1548.706013][ T8491] ath9k_htc: Failed to initialize the device
[ 1548.754849][ T8491] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1548.886642][T27686] 9pnet_fd: Insufficient options for proto=fd
[ 1549.484177][ T4315] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1549.603487][T27699] loop6: detected capacity change from 0 to 2048
[ 1549.691488][ T4315] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1549.722929][ T4315] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1549.742693][T27699] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1549.772995][ T4315] usb 4-1: can't read configurations, error -71
[ 1549.819200][   T41] usb 2-1: USB disconnect, device number 33
[ 1549.910998][T22757] EXT4-fs (loop6): unmounting filesystem.
[ 1550.101374][T27714] netlink: 'syz.7.6426': attribute type 11 has an invalid length.
[ 1550.230326][T27718] device syzkaller0 entered promiscuous mode
[ 1550.663160][T27724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6430'.
[ 1551.029557][T27731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6433'.
[ 1551.245688][T27738] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6434'.
[ 1551.388944][T27738] netlink: 100 bytes leftover after parsing attributes in process `syz.7.6434'.
[ 1551.643365][T14005] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1551.890003][T14005] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1551.904775][T14005] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1551.926423][T14005] usb 8-1: Product: syz
[ 1551.943453][T14005] usb 8-1: Manufacturer: syz
[ 1551.991596][T14005] usb 8-1: SerialNumber: syz
[ 1552.061127][T14005] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1552.148961][T27758] 9pnet_fd: Insufficient options for proto=fd
[ 1552.208821][T14005] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1552.638391][T27776] loop3: detected capacity change from 0 to 256
[ 1552.822219][T27780] netlink: 'syz.0.6450': attribute type 1 has an invalid length.
[ 1552.867814][T27780] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.6450'.
[ 1553.482894][T14005] usb 8-1: Service connection timeout for: 256
[ 1553.490615][T14005] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1553.575247][T14005] ath9k_htc: Failed to initialize the device
[ 1553.598948][T14005] usb 8-1: ath9k_htc: USB layer deinitialized
[ 1553.736352][T27792] device syzkaller0 entered promiscuous mode
[ 1553.783688][T27789] loop0: detected capacity change from 0 to 512
[ 1554.092137][T27789] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1554.222068][T27789] EXT4-fs (loop0): 1 truncate cleaned up
[ 1554.246398][T27789] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1554.488351][T27800] loop6: detected capacity change from 0 to 512
[ 1554.723056][T27800] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1554.836067][T27800] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1554.850653][T14005] usb 8-1: USB disconnect, device number 6
[ 1554.935517][T27804] 9pnet_fd: Insufficient options for proto=fd
[ 1554.998333][T27806] tipc: Started in network mode
[ 1555.011633][T27806] tipc: Node identity ea8252372c8e, cluster identity 4711
[ 1555.026805][T22757] EXT4-fs (loop6): unmounting filesystem.
[ 1555.042577][T27806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1555.214998][T27807] device syzkaller0 entered promiscuous mode
[ 1555.229656][T27807] tipc: Resetting bearer <eth:syzkaller0>
[ 1555.527320][   T11] tipc: Resetting bearer <eth:syzkaller0>
[ 1555.543193][T27805] tipc: Resetting bearer <eth:syzkaller0>
[ 1555.989043][T24833] EXT4-fs (loop0): unmounting filesystem.
[ 1558.060297][T27805] tipc: Disabling bearer <eth:syzkaller0>
[ 1558.079981][ T4315] tipc: Node number set to 3322696247
[ 1558.301246][T27837] device syzkaller0 entered promiscuous mode
[ 1558.420199][T27846] loop0: detected capacity change from 0 to 2048
[ 1558.483191][T27846] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1558.650492][T27846] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1558.668437][T27846] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 608 with error 28
[ 1558.681623][T27846] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 1558.681623][T27846] 
[ 1558.691634][T27846] EXT4-fs (loop0): Total free blocks count 0
[ 1558.697857][T27846] EXT4-fs (loop0): Free/Dirty block details
[ 1558.703928][T27846] EXT4-fs (loop0): free_blocks=2415919104
[ 1558.735172][T27846] EXT4-fs (loop0): dirty_blocks=608
[ 1558.749487][T27846] EXT4-fs (loop0): Block reservation details
[ 1558.755569][T27846] EXT4-fs (loop0): i_reserved_data_blocks=38
[ 1558.943704][T27860] loop7: detected capacity change from 0 to 512
[ 1558.970070][ T5192] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 486 with max blocks 122 with error 28
[ 1559.018297][T27860] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1559.067045][T27866] rdma_rxe: rxe_register_device failed with error -23
[ 1559.070759][T27860] EXT4-fs (loop7): 1 truncate cleaned up
[ 1559.081131][T27860] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1559.115966][T27866] rdma_rxe: failed to add bond0
[ 1559.882730][T25799] EXT4-fs (loop7): unmounting filesystem.
[ 1561.738574][T27878] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1561.827447][T27886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6483'.
[ 1562.057172][T27897] netlink: 'syz.1.6486': attribute type 10 has an invalid length.
[ 1562.167198][T27897] team0: Port device wlan1 added
[ 1562.641740][T27914] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1562.659001][T27917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1562.680222][T27914] rdma_rxe: already configured on bond0
[ 1562.698527][T27916] tipc: Disabling bearer <eth:syzkaller0>
[ 1562.842833][T27932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6499'.
[ 1563.040289][T27938] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.6501'.
[ 1563.577136][ T8492] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1563.725583][T27963] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1563.813774][ T8492] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1563.833492][ T8492] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1563.847944][ T8492] usb 7-1: can't read configurations, error -71
[ 1564.044119][T27976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6515'.
[ 1564.694119][T28001] loop0: detected capacity change from 0 to 512
[ 1564.725115][T28001] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1564.777640][T28001] EXT4-fs (loop0): 1 truncate cleaned up
[ 1564.783330][T28001] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1565.047136][T28014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6531'.
[ 1565.234478][T28025] device geneve1 entered promiscuous mode
[ 1565.780899][T28044] device syzkaller0 entered promiscuous mode
[ 1566.234945][T28060] device syzkaller0 entered promiscuous mode
[ 1566.267191][T24833] EXT4-fs (loop0): unmounting filesystem.
[ 1567.719074][T14373] Bluetooth: hci1: command 0x0406 tx timeout
[ 1569.950298][T28070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6552'.
[ 1570.435563][T28128] device syzkaller0 entered promiscuous mode
[ 1570.668751][T28140] loop7: detected capacity change from 0 to 1024
[ 1570.704860][T28141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6576'.
[ 1570.952035][T28145] device syzkaller0 entered promiscuous mode
[ 1571.057498][ T5192] hfsplus: b-tree write err: -5, ino 25
[ 1571.079776][ T5192] hfsplus: b-tree write err: -5, ino 4
[ 1571.094981][ T5192] hfsplus: b-tree write err: -5, ino 2
[ 1571.118808][ T5192] hfsplus: b-tree write err: -5, ino 26
[ 1572.838335][T14373] Bluetooth: hci2: command 0x0406 tx timeout
[ 1574.142996][T28190] loop6: detected capacity change from 0 to 32768
[ 1575.038783][T28207] tipc: Started in network mode
[ 1575.065360][T28207] tipc: Node identity 8a87abce7c17, cluster identity 4711
[ 1575.094711][T28207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1575.287981][T28206] tipc: Disabling bearer <eth:syzkaller0>
[ 1575.517398][T28220] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6597'.
[ 1575.729748][T28224] device syzkaller0 entered promiscuous mode
[ 1579.043143][T28245] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6595'.
[ 1579.355018][T28264] device syzkaller0 entered promiscuous mode
[ 1582.069205][T28297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6611'.
[ 1582.376979][T28315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6619'.
[ 1582.740089][T28326] loop1: detected capacity change from 0 to 2048
[ 1582.799315][T28326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1583.175667][T28333] device syzkaller0 entered promiscuous mode
[ 1583.812071][T28326] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 86016 lbcount: 90112 extent 129+89088
[ 1586.218945][T28366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6638'.
[ 1587.749673][T28402] device syzkaller0 entered promiscuous mode
[ 1588.008331][T28419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6653'.
[ 1588.038834][T28419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6653'.
[ 1588.414944][   T22] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1588.624864][   T22] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1588.638849][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1588.658990][   T22] usb 2-1: Product: syz
[ 1588.670763][   T22] usb 2-1: Manufacturer: syz
[ 1588.717983][   T22] usb 2-1: SerialNumber: syz
[ 1588.752904][   T22] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1588.932986][   T22] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1590.189033][   T22] usb 2-1: Service connection timeout for: 256
[ 1590.198235][   T22] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1590.425971][   T22] ath9k_htc: Failed to initialize the device
[ 1590.433713][   T22] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1591.302030][ T8492] usb 2-1: USB disconnect, device number 34
[ 1592.802517][T28465] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6667'.
[ 1593.132806][T28479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6671'.
[ 1593.145450][T28479] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6671'.
[ 1593.289421][T28487] loop0: detected capacity change from 0 to 128
[ 1593.337725][T28487] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1593.371253][T28487] hpfs: filesystem error: improperly stopped
[ 1593.380665][T28487] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1593.396412][T28487] hpfs: You really don't want any checks? You are crazy...
[ 1593.464274][T28487] hpfs: hpfs_map_sector(): read error
[ 1593.515992][T28487] hpfs: code page support is disabled
[ 1593.537891][T28487] hpfs: hpfs_map_4sectors(): unaligned read
[ 1593.582084][ T8491] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1593.592570][T28487] hpfs: hpfs_map_4sectors(): unaligned read
[ 1593.618831][T28487] hpfs: filesystem error: unable to find root dir
[ 1593.841118][ T8491] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1593.886140][ T8491] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1593.960384][ T8491] usb 2-1: Product: syz
[ 1593.996592][T28498] device syzkaller0 entered promiscuous mode
[ 1594.008363][ T8491] usb 2-1: Manufacturer: syz
[ 1594.030944][ T8491] usb 2-1: SerialNumber: syz
[ 1594.125287][ T8491] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1594.299210][ T8491] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1595.547501][ T8491] usb 2-1: Service connection timeout for: 256
[ 1595.554278][ T8491] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1595.626009][ T8491] ath9k_htc: Failed to initialize the device
[ 1595.634684][ T8491] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1596.190271][T14005] usb 2-1: USB disconnect, device number 35
[ 1597.693431][T28523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6682'.
[ 1597.930648][T28538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6683'.
[ 1598.812698][T28551] 9pnet: Could not find request transport: fd0x0000000000000004
[ 1598.849161][T28554] device syzkaller0 entered promiscuous mode
[ 1599.069949][T28559] loop6: detected capacity change from 0 to 256
[ 1600.187180][T28565] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1600.869341][T28590] loop7: detected capacity change from 0 to 2048
[ 1600.977947][T28590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1604.056386][T28603] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6700'.
[ 1604.562847][T28625] 9pnet: Could not find request transport: fd0x0000000000000004
[ 1605.613642][T28640] device syzkaller0 entered promiscuous mode
[ 1606.580996][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1606.590076][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1608.602616][T28677] device syzkaller0 entered promiscuous mode
[ 1608.746121][T28696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6717'.
[ 1609.118879][T28717] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6721'.
[ 1609.139941][T28717] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6721'.
[ 1609.434225][   T22] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1609.643354][   T22] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1609.671211][   T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1609.725328][   T22] usb 7-1: Product: syz
[ 1609.729533][   T22] usb 7-1: Manufacturer: syz
[ 1609.789688][   T22] usb 7-1: SerialNumber: syz
[ 1609.858885][   T22] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1609.925947][   T22] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1610.196996][T28723] rdma_rxe: rxe_register_device failed with error -23
[ 1610.215011][T28723] rdma_rxe: failed to add bond0
[ 1611.223280][   T22] usb 7-1: Service connection timeout for: 256
[ 1611.229846][   T22] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1611.287100][   T22] ath9k_htc: Failed to initialize the device
[ 1611.301172][   T22] usb 7-1: ath9k_htc: USB layer deinitialized
[ 1612.798406][   T41] usb 7-1: USB disconnect, device number 23
[ 1613.176474][T28704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6719'.
[ 1613.186083][T28705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1613.223340][T28708] device syzkaller0 entered promiscuous mode
[ 1613.229788][T28708] tipc: Resetting bearer <eth:syzkaller0>
[ 1613.293657][T28701] tipc: Resetting bearer <eth:syzkaller0>
[ 1615.043898][ T8491] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1615.251588][ T8491] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1615.276842][ T8491] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1615.287952][ T8491] usb 7-1: can't read configurations, error -71
[ 1617.415813][T28701] tipc: Disabling bearer <eth:syzkaller0>
[ 1617.600232][T28754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6725'.
[ 1617.630383][T28754] device bridge_slave_1 left promiscuous mode
[ 1617.641825][T28754] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1617.686876][T28754] device bridge_slave_0 left promiscuous mode
[ 1617.703438][T28754] bridge0: port 1(bridge_slave_0) entered disabled state
v	§eá[ 1618.700663][T28765] device syzkaller0 entered promiscuous mode
[ 1618.717639][T28794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6736'.
[ 1619.291217][T28809] loop1: detected capacity change from 0 to 2048
[ 1619.686840][T28809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1620.597363][T28807] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 172032 lbcount: 176128 extent 129+175104
[ 1622.958188][T28801] device syzkaller0 entered promiscuous mode
[ 1623.141823][T28835] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1623.268944][T28841] loop6: detected capacity change from 0 to 512
[ 1623.297801][T28846] loop3: detected capacity change from 0 to 16
[ 1623.350873][T28841] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1623.406425][T28846] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1624.347225][T28841] EXT4-fs (loop6): 1 truncate cleaned up
[ 1624.352942][T28841] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1624.551165][T28863] 9pnet_fd: Insufficient options for proto=fd
[ 1625.398959][T22757] EXT4-fs (loop6): unmounting filesystem.
[ 1627.374161][T28853] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1627.377756][T28855] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready
[ 1627.383790][T28853] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1627.400365][T28853] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1628.542954][T28899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1628.766062][T28904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6759'.
[ 1628.954855][T28898] tipc: Disabling bearer <eth:syzkaller0>
[ 1629.450144][T28918] device syzkaller0 entered promiscuous mode
[ 1629.485927][T28924] 9pnet_fd: Insufficient options for proto=fd
[ 1632.897648][T28932] device syzkaller0 entered promiscuous mode
[ 1634.403981][T28957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1634.595328][T28960] device syzkaller0 entered promiscuous mode
[ 1634.619534][T28960] tipc: Resetting bearer <eth:syzkaller0>
[ 1634.651716][T28967] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6777'.
[ 1634.688050][T28954] tipc: Resetting bearer <eth:syzkaller0>
[ 1634.730373][T28979] loop3: detected capacity change from 0 to 2048
[ 1634.763221][T28979] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1635.671765][T28978] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 155648 lbcount: 159744 extent 129+158720
[ 1636.007803][T28986] loop3: detected capacity change from 0 to 32768
[ 1636.103531][T28986] XFS (loop3): Mounting V5 Filesystem
[ 1636.242538][T28986] XFS (loop3): Ending clean mount
[ 1636.400182][T28986] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[ 1636.670312][T25730] XFS (loop3): Unmounting Filesystem
[ 1639.226234][T28954] tipc: Disabling bearer <eth:syzkaller0>
[ 1639.233953][T28972] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[ 1639.284028][T28964] device syzkaller0 entered promiscuous mode
[ 1639.494631][T29010] loop6: detected capacity change from 0 to 256
[ 1639.586189][T29010] FAT-fs (loop6): Directory bread(block 64) failed
[ 1639.607557][T29010] FAT-fs (loop6): Directory bread(block 65) failed
[ 1639.629281][T29010] FAT-fs (loop6): Directory bread(block 66) failed
[ 1639.666528][T29010] FAT-fs (loop6): Directory bread(block 67) failed
[ 1639.701350][T29010] FAT-fs (loop6): Directory bread(block 68) failed
[ 1639.735408][T29010] FAT-fs (loop6): Directory bread(block 69) failed
[ 1639.758783][T29010] FAT-fs (loop6): Directory bread(block 70) failed
[ 1639.795608][T29010] FAT-fs (loop6): Directory bread(block 71) failed
[ 1639.830668][T29010] FAT-fs (loop6): Directory bread(block 72) failed
[ 1639.847159][T29010] FAT-fs (loop6): Directory bread(block 73) failed
[ 1639.899207][T29010] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1640.147266][T29024] loop6: detected capacity change from 0 to 64
[ 1640.312087][   T26] audit: type=1800 audit(1772836229.704:1445): pid=29024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6785" name="file1" dev="loop6" ino=21 res=0 errno=0
[ 1640.755721][   T41] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1640.942478][   T41] usb 7-1: Using ep0 maxpacket: 32
[ 1640.953135][   T41] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1640.973487][   T41] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1640.992848][   T41] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1641.006716][   T41] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1641.025977][   T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1641.035793][   T41] usb 7-1: Product: syz
[ 1641.055918][   T41] usb 7-1: Manufacturer: syz
[ 1641.060828][   T41] usb 7-1: SerialNumber: syz
[ 1641.082600][   T41] usb 7-1: config 0 descriptor??
[ 1641.515714][   T41] gs_usb 7-1:0.0: Configuring for 1 interfaces
[ 1641.923299][   T41] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[ 1641.937380][   T41] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[ 1641.957198][   T41] gs_usb: probe of 7-1:0.0 failed with error -71
[ 1641.992991][   T41] usb 7-1: USB disconnect, device number 26
[ 1643.081797][T29048] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6792'.
[ 1643.155668][T29050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1643.233888][T29053] loop1: detected capacity change from 0 to 2048
[ 1643.259746][T29053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1643.315766][T29050] device syzkaller0 entered promiscuous mode
[ 1643.416372][T29050] tipc: Resetting bearer <eth:syzkaller0>
[ 1643.531264][T29049] tipc: Resetting bearer <eth:syzkaller0>
[ 1644.124111][T29063] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 159744 lbcount: 163840 extent 129+162816
[ 1646.942274][T29049] tipc: Disabling bearer <eth:syzkaller0>
[ 1646.955595][ T4315] tipc: Node number set to 3800511985
[ 1647.199609][T29105] loop1: detected capacity change from 0 to 128
[ 1647.231175][T29105] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1647.260310][T29105] hpfs: filesystem error: improperly stopped
[ 1647.275902][T29105] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1647.305150][T29105] hpfs: You really don't want any checks? You are crazy...
[ 1647.312693][T29105] hpfs: hpfs_map_sector(): read error
[ 1647.325379][T29105] hpfs: code page support is disabled
[ 1647.331224][T29105] hpfs: hpfs_map_4sectors(): unaligned read
[ 1647.397001][T29105] hpfs: hpfs_map_4sectors(): unaligned read
[ 1647.423719][T29105] hpfs: filesystem error: unable to find root dir
[ 1647.587842][T29119] loop3: detected capacity change from 0 to 2048
[ 1647.629862][T29119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1647.846342][T29133] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6814'.
[ 1648.436685][T29118] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 151552 lbcount: 155648 extent 129+154624
[ 1648.502377][T29142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1648.727096][T29142] device syzkaller0 entered promiscuous mode
[ 1648.818255][T29142] tipc: Resetting bearer <eth:syzkaller0>
[ 1648.845733][T29155] fuse: Bad value for 'fd'
[ 1648.918746][T29149] loop3: detected capacity change from 0 to 4096
[ 1648.946083][T29149] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[ 1649.018711][T29151] device syzkaller0 entered promiscuous mode
[ 1649.035682][T29141] tipc: Resetting bearer <eth:syzkaller0>
[ 1649.203076][T25730] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22.
[ 1649.220715][T25730] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 1649.266069][T25730] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22.
[ 1649.704008][ T8491] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[ 1649.907064][ T8491] usb 4-1: config 1 has an invalid interface association descriptor of length 5, skipping
[ 1649.918452][ T8491] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1649.936258][ T8491] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1649.949318][ T8491] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1649.959732][ T8491] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1649.969558][ T8491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1649.977990][ T8491] usb 4-1: Product: syz
[ 1649.982173][ T8491] usb 4-1: Manufacturer: syz
[ 1649.987073][ T8491] usb 4-1: SerialNumber: syz
[ 1650.277699][T29172] loop3: detected capacity change from 0 to 128
[ 1650.295971][T29172] ext4: Unknown parameter 'hash'
[ 1650.351462][ T8491] cdc_ether 4-1:1.0: skipping garbage
[ 1650.359922][ T8491] cdc_ether 4-1:1.0: invalid descriptor buffer length
[ 1650.377423][ T8491] usb 4-1: bad CDC descriptors
[ 1650.400624][ T8491] usb 4-1: USB disconnect, device number 18
[ 1652.336961][T29141] tipc: Disabling bearer <eth:syzkaller0>
[ 1652.365679][T29186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6828'.
[ 1655.172049][T29208] fuse: Bad value for 'fd'
[ 1655.907628][T29219] loop7: detected capacity change from 0 to 1024
[ 1657.006039][T29220] loop6: detected capacity change from 0 to 4096
[ 1657.316444][T29243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1657.401096][   T26] audit: type=1326 audit(1772836246.803:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29246 comm="syz.0.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89499c799 code=0x7ffc0000
[ 1657.500761][   T26] audit: type=1326 audit(1772836246.813:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29246 comm="syz.0.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fe89499c799 code=0x7ffc0000
[ 1657.546153][T22757] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22.
[ 1657.573021][T22757] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[ 1657.619229][   T26] audit: type=1326 audit(1772836246.813:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29246 comm="syz.0.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89499c799 code=0x7ffc0000
[ 1657.652996][T29248] device syzkaller0 entered promiscuous mode
[ 1657.677654][T29248] tipc: Resetting bearer <eth:syzkaller0>
[ 1657.734268][   T26] audit: type=1326 audit(1772836246.813:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29246 comm="syz.0.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89499c799 code=0x7ffc0000
[ 1657.821387][T29252] device syzkaller0 entered promiscuous mode
[ 1659.017511][T29275] fuse: Bad value for 'fd'
[ 1661.645999][T29242] tipc: Resetting bearer <eth:syzkaller0>
[ 1661.799223][T29291] loop3: detected capacity change from 0 to 2048
[ 1661.888425][T29291] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1662.722819][T29290] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 139264 lbcount: 143360 extent 129+142336
[ 1664.941698][T29242] tipc: Disabling bearer <eth:syzkaller0>
[ 1665.251318][T29313] bond0 speed is unknown, defaulting to 1000
[ 1665.620484][T29326] device syzkaller0 entered promiscuous mode
[ 1665.849320][T29337] loop1: detected capacity change from 0 to 1024
[ 1666.685524][ T8491] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[ 1666.894090][ T8491] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1666.923720][ T8491] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1666.954178][ T8491] usb 7-1: Product: syz
[ 1666.965353][ T8491] usb 7-1: Manufacturer: syz
[ 1666.970690][ T8491] usb 7-1: SerialNumber: syz
[ 1666.998390][ T8491] usb 7-1: config 0 descriptor??
[ 1667.223413][ T8491] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1667.670624][ T8491] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32
[ 1667.679951][ T8491] usb 7-1: USB disconnect, device number 27
[ 1667.989034][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1667.997531][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1668.857470][T29364] loop6: detected capacity change from 0 to 65536
[ 1668.949231][T29364] XFS (loop6): Mounting V5 Filesystem
[ 1669.005378][T29364] XFS (loop6): Ending clean mount
[ 1669.033069][T29364] XFS (loop6): Quotacheck needed: Please wait.
[ 1669.210354][T29364] XFS (loop6): Quotacheck: Done.
[ 1669.585596][T29374] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1669.941308][T22757] XFS (loop6): Unmounting Filesystem
[ 1670.896440][T29336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1670.943503][ T4315] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 1670.960669][T29338] device syzkaller0 entered promiscuous mode
[ 1670.975833][T29338] tipc: Resetting bearer <eth:syzkaller0>
[ 1671.010379][T29331] tipc: Resetting bearer <eth:syzkaller0>
[ 1671.153606][ T4315] usb 7-1: Using ep0 maxpacket: 32
[ 1671.160566][ T4315] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1671.171215][ T4315] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1671.181670][ T4315] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1671.191491][ T4315] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1671.208480][ T4315] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1671.231912][ T4315] usb 7-1: Product: syz
[ 1671.248068][ T4315] usb 7-1: Manufacturer: syz
[ 1671.252816][ T4315] usb 7-1: SerialNumber: syz
[ 1671.283251][ T4315] usb 7-1: config 0 descriptor??
[ 1671.515886][T29396] loop7: detected capacity change from 0 to 512
[ 1671.560726][T29396] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1671.594569][T29396] EXT4-fs (loop7): 1 truncate cleaned up
[ 1671.625862][T29396] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1671.707278][ T4315] gs_usb 7-1:0.0: Configuring for 1 interfaces
[ 1671.908292][ T4315] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[ 1671.939368][ T4315] gs_usb: probe of 7-1:0.0 failed with error -71
[ 1671.964616][ T4315] usb 7-1: USB disconnect, device number 28
[ 1672.428146][T25799] EXT4-fs (loop7): unmounting filesystem.
[ 1672.741538][T29409] loop7: detected capacity change from 0 to 2048
[ 1672.800012][T29409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1673.672706][T29411] UDF-fs: warning (device loop7): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 131072 lbcount: 135168 extent 129+134144
[ 1675.354298][T29331] tipc: Disabling bearer <eth:syzkaller0>
[ 1675.686378][T29424] device syzkaller0 entered promiscuous mode
[ 1675.774014][T29433] loop1: detected capacity change from 0 to 512
[ 1675.800124][T29433] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1675.858637][T29429] device syzkaller0 entered promiscuous mode
[ 1675.877760][T29433] EXT4-fs (loop1): 1 truncate cleaned up
[ 1675.899173][T29433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1676.075312][T29444] loop6: detected capacity change from 0 to 1024
[ 1676.931829][T26590] EXT4-fs (loop1): unmounting filesystem.
[ 1682.352245][T29490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1682.395761][T29485] loop3: detected capacity change from 0 to 512
[ 1682.444503][T29485] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1682.541913][T29490] device syzkaller0 entered promiscuous mode
[ 1682.548697][T29490] tipc: Resetting bearer <eth:syzkaller0>
[ 1682.564509][T29485] EXT4-fs (loop3): 1 truncate cleaned up
[ 1682.582628][T29485] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1682.605288][T29489] tipc: Resetting bearer <eth:syzkaller0>
[ 1684.966629][T25730] EXT4-fs (loop3): unmounting filesystem.
[ 1686.875523][T29489] tipc: Disabling bearer <eth:syzkaller0>
[ 1686.884429][T29511] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1686.887958][T29515] IPv6: ADDRCONF(NETDEV_CHANGE): ipip2: link becomes ready
[ 1686.893986][T29511] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1686.911441][T29511] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1687.236078][T29531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1687.426279][T29531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1687.472163][T29549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6913'.
[ 1687.594852][T29531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1687.734540][T29531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1687.927174][T29531] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1688.033890][T29531] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1688.052174][T29531] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1688.728109][T29531] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1690.010785][T29584] IPv6: ADDRCONF(NETDEV_CHANGE): ipip1: link becomes ready
[ 1690.034178][T29580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1690.223475][T29580] device syzkaller0 entered promiscuous mode
[ 1690.246581][T29580] tipc: Resetting bearer <eth:syzkaller0>
[ 1690.325915][T29579] tipc: Resetting bearer <eth:syzkaller0>
[ 1691.529070][T29615] loop3: detected capacity change from 0 to 512
[ 1691.544596][T29615] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1691.594306][T29615] EXT4-fs (loop3): 1 truncate cleaned up
[ 1691.600013][T29615] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1692.293727][T25730] EXT4-fs (loop3): unmounting filesystem.
[ 1692.639772][T29626] loop3: detected capacity change from 0 to 2048
[ 1692.680623][T29626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1693.529372][T29627] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 122880 lbcount: 126976 extent 129+125952
[ 1693.630128][T29631] loop3: detected capacity change from 0 to 128
[ 1693.688628][T29631] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1693.701393][T29631] hpfs: filesystem error: improperly stopped
[ 1693.707709][T29631] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1693.715726][T29631] hpfs: You really don't want any checks? You are crazy...
[ 1693.723567][T29631] hpfs: hpfs_map_sector(): read error
[ 1693.729031][T29631] hpfs: code page support is disabled
[ 1693.737402][T29631] hpfs: hpfs_map_4sectors(): unaligned read
[ 1693.743858][T29631] hpfs: hpfs_map_4sectors(): unaligned read
[ 1693.749784][T29631] hpfs: filesystem error: unable to find root dir
[ 1694.934599][T29579] tipc: Disabling bearer <eth:syzkaller0>
[ 1694.942471][T29602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6925'.
[ 1694.961511][   T14] tipc: Node number set to 4136676302
[ 1694.972015][T29633] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1695.066219][T29633] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1695.133254][T29633] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1695.287082][T29633] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1695.932751][T29653] IPv6: ADDRCONF(NETDEV_CHANGE): ipip3: link becomes ready
[ 1696.154094][T29648] device syzkaller0 entered promiscuous mode
[ 1696.189188][T29633] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1696.227429][T29633] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1696.272854][T29663] loop0: detected capacity change from 0 to 512
[ 1696.316328][T29663] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1696.442799][T29663] EXT4-fs (loop0): 1 truncate cleaned up
[ 1696.484723][T29663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1697.819523][T24833] EXT4-fs (loop0): unmounting filesystem.
[ 1701.185999][T29633] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1701.229710][T29633] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1701.536455][T29730] rdma_rxe: rxe_register_device failed with error -23
[ 1701.581845][T29730] rdma_rxe: failed to add bond0
[ 1702.025217][T29743] IPv6: ADDRCONF(NETDEV_CHANGE): ipip4: link becomes ready
[ 1702.431011][T29745] loop1: detected capacity change from 0 to 512
[ 1702.451452][T29745] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1702.580361][T29752] device syzkaller0 entered promiscuous mode
[ 1702.611032][T29757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6955'.
[ 1702.630905][T29757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6955'.
[ 1702.648929][T29757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6955'.
[ 1702.688708][T29745] EXT4-fs (loop1): 1 truncate cleaned up
[ 1702.705045][T29745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1702.741971][T29757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6955'.
[ 1703.567216][ T8492] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1703.574897][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[ 1703.767156][ T8492] usb 1-1: device descriptor read/64, error -32
[ 1704.156750][ T8492] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1704.853947][ T8492] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1704.884156][ T8492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1704.913919][ T8492] usb 1-1: Product: syz
[ 1704.928119][ T8492] usb 1-1: Manufacturer: syz
[ 1704.932765][ T8492] usb 1-1: SerialNumber: syz
[ 1705.199127][T26590] EXT4-fs (loop1): unmounting filesystem.
[ 1705.211976][ T8492] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1705.393781][ T8492] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1706.172032][ T4320] usb 1-1: USB disconnect, device number 7
[ 1706.465320][ T8492] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 1706.473945][ T8492] ath9k_htc: Failed to initialize the device
[ 1706.480992][ T4320] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1708.216928][T29790] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1708.327639][T29790] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1708.430238][T29814] device syzkaller0 entered promiscuous mode
[ 1708.449591][T29790] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1708.639258][T29821] loop3: detected capacity change from 0 to 2048
[ 1708.662819][T29821] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1710.132319][T29841] loop3: detected capacity change from 0 to 512
[ 1710.158020][T29841] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1710.219289][T29841] EXT4-fs (loop3): 1 truncate cleaned up
[ 1710.236562][T29841] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1710.896229][T29849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6970'.
[ 1710.927927][T29849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6970'.
[ 1710.977915][T29849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6970'.
[ 1710.989562][T29849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6970'.
[ 1711.287526][T25730] EXT4-fs (loop3): unmounting filesystem.
[ 1711.353194][   T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1711.598968][   T22] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1711.618078][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1711.672481][   T22] usb 1-1: Product: syz
[ 1711.714993][   T22] usb 1-1: Manufacturer: syz
[ 1711.801177][   T22] usb 1-1: SerialNumber: syz
[ 1711.901779][   T22] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1712.076479][   T22] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1713.329868][   T22] usb 1-1: Service connection timeout for: 256
[ 1713.336453][   T22] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1713.605137][   T22] ath9k_htc: Failed to initialize the device
[ 1713.613142][   T22] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1713.895531][T29828] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1713.905047][T29828] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1713.914654][T29828] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1713.932544][T29830] IPv6: ADDRCONF(NETDEV_CHANGE): ipip3: link becomes ready
[ 1713.985752][T29790] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1714.203743][ T8491] usb 1-1: USB disconnect, device number 8
[ 1714.246466][T29790] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1714.420324][T29879] device syzkaller0 entered promiscuous mode
[ 1714.472977][T29790] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1717.365142][T29790] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1717.397374][T29790] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1718.192186][T29932] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready
[ 1719.057226][T29928] device syzkaller0 entered promiscuous mode
[ 1719.110515][T29938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6985'.
[ 1719.111262][T29938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6985'.
[ 1719.111301][T29938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6985'.
[ 1719.111336][T29938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6985'.
[ 1719.411209][T14005] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1719.687506][T14005] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1719.687540][T14005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1719.687562][T14005] usb 2-1: Product: syz
[ 1719.687578][T14005] usb 2-1: Manufacturer: syz
[ 1719.687592][T14005] usb 2-1: SerialNumber: syz
[ 1719.743428][T14005] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1719.850881][T14005] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1721.086054][T14005] usb 2-1: Service connection timeout for: 256
[ 1721.106265][T14005] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1721.192927][T14005] ath9k_htc: Failed to initialize the device
[ 1721.205790][T14005] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1721.933343][ T8491] usb 2-1: USB disconnect, device number 36
[ 1724.972443][T29998] fuse: Bad value for 'fd'
[ 1726.848723][T30022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7003'.
[ 1726.958613][T30022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7003'.
[ 1726.990850][T30022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7003'.
[ 1727.126824][T30026] device syzkaller0 entered promiscuous mode
[ 1727.264746][T30022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7003'.
[ 1727.505269][ T8491] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1727.722667][ T8491] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1727.764465][ T8491] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1727.834147][ T8491] usb 2-1: Product: syz
[ 1727.849449][T30048] loop0: detected capacity change from 0 to 2048
[ 1727.867097][ T8491] usb 2-1: Manufacturer: syz
[ 1727.891054][T30048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1727.919121][ T8491] usb 2-1: SerialNumber: syz
[ 1728.026441][ T8491] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1728.128140][ T8491] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1729.234772][ T8491] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1729.396334][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1729.397030][    C1] ------------[ cut here ]------------
[ 1729.402722][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1729.408510][    C1] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x350
[ 1729.421054][ T8491] ath9k_htc: Failed to initialize the device
[ 1729.425816][    C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530
[ 1729.441307][    C1] Modules linked in:
[ 1729.445274][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[ 1729.452318][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1729.462448][    C1] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530
[ 1729.468832][    C1] Code: ef e8 48 cc bd fd 4c 8b 45 00 48 c7 c7 c0 18 df 8a 48 c7 c6 80 15 df 8a 48 c7 c2 20 1a df 8a 8b 0c 24 4d 89 e9 e8 34 52 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 a5 7a 0a
[ 1729.488503][    C1] RSP: 0018:ffffc900001e0a10 EFLAGS: 00010246
[ 1729.494618][    C1] RAX: 9955bd84529ceb00 RBX: ffffffff96e18a40 RCX: ffff888017689dc0
[ 1729.502603][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[ 1729.510639][    C1] RBP: ffffffff8a8def40 R08: ffffffff90af6437 R09: 1ffffffff215ec86
[ 1729.518665][    C1] R10: dffffc0000000000 R11: fffffbfff215ec87 R12: ffff888055b33200
[ 1729.526707][    C1] R13: ffffffff892aadc0 R14: ffff888055b33000 R15: ffff888055b33090
[ 1729.534713][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1729.543659][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1729.550314][    C1] CR2: 00002000001c4000 CR3: 00000000607aa000 CR4: 00000000003506e0
[ 1729.558334][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1729.566364][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1729.574377][    C1] Call Trace:
[ 1729.577655][    C1]  <IRQ>
[ 1729.580506][    C1]  slab_free_freelist_hook+0xd2/0x1a0
[ 1729.586031][    C1]  ? rose_timer_expiry+0x4a7/0x5d0
[ 1729.591180][    C1]  __kmem_cache_free+0xb6/0x1f0
[ 1729.596106][    C1]  rose_timer_expiry+0x4a7/0x5d0
[ 1729.601065][    C1]  ? call_timer_fn+0x194/0x670
[ 1729.605970][    C1]  call_timer_fn+0x1ac/0x670
[ 1729.610572][    C1]  ? rose_start_t1timer+0xd0/0xd0
[ 1729.615654][    C1]  ? call_timer_fn+0xcf/0x670
[ 1729.620333][    C1]  ? __run_timers+0x800/0x800
[ 1729.625084][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1729.630375][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1729.635682][    C1]  ? rose_start_t1timer+0xd0/0xd0
[ 1729.640723][    C1]  __run_timers+0x53e/0x800
[ 1729.645276][    C1]  ? detach_timer+0x350/0x350
[ 1729.649964][    C1]  ? lock_chain_count+0x20/0x20
[ 1729.654906][    C1]  run_timer_softirq+0x63/0xf0
[ 1729.659688][    C1]  handle_softirqs+0x2a1/0x930
[ 1729.664568][    C1]  ? __irq_exit_rcu+0x13b/0x230
[ 1729.669437][    C1]  ? do_softirq+0x210/0x210
[ 1729.673997][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[ 1729.679229][    C1]  __irq_exit_rcu+0x13b/0x230
[ 1729.683953][    C1]  ? irq_exit_rcu+0x20/0x20
[ 1729.688477][    C1]  irq_exit_rcu+0x5/0x20
[ 1729.692730][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1729.698410][    C1]  </IRQ>
[ 1729.701342][    C1]  <TASK>
[ 1729.704328][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1729.710336][    C1] RIP: 0010:default_idle+0xb/0x10
[ 1729.715429][    C1] Code: 48 89 df e8 e7 5f 9c f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 77 ac 4f 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[ 1729.735085][    C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6
[ 1729.741175][    C1] RAX: 9955bd84529ceb00 RBX: ffffffff8a3702b7 RCX: 9955bd84529ceb00
[ 1729.749332][    C1] RDX: 0000000000000001 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0f60
[ 1729.757343][    C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01
[ 1729.765365][    C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 1ffff9200002efc8
[ 1729.773348][    C1] R13: dffffc0000000000 R14: ffff888017689dc0 R15: 0000000000000001
[ 1729.781370][    C1]  ? default_idle_call+0x77/0xc0
[ 1729.786344][    C1]  default_idle_call+0x84/0xc0
[ 1729.791127][    C1]  do_idle+0x20d/0x5a0
[ 1729.795345][    C1]  ? idle_inject_timer_fn+0x60/0x60
[ 1729.800561][    C1]  ? schedule_idle+0x57/0x90
[ 1729.805220][    C1]  ? do_idle+0x588/0x5a0
[ 1729.809472][    C1]  cpu_startup_entry+0x3f/0x60
[ 1729.814244][    C1]  start_secondary+0xe4/0xf0
[ 1729.818944][    C1]  secondary_startup_64_no_verify+0xcf/0xdb
[ 1729.824900][    C1]  </TASK>
[ 1729.827934][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1729.835206][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[ 1729.842214][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1729.852260][    C1] Call Trace:
[ 1729.855540][    C1]  <IRQ>
[ 1729.858388][    C1]  dump_stack_lvl+0x188/0x24e
[ 1729.863086][    C1]  ? memcpy+0x3c/0x60
[ 1729.867074][    C1]  ? show_regs_print_info+0x12/0x12
[ 1729.872263][    C1]  ? load_image+0x400/0x400
[ 1729.876804][    C1]  panic+0x2e5/0x730
[ 1729.880727][    C1]  ? bpf_jit_dump+0xd0/0xd0
[ 1729.885242][    C1]  ? secondary_startup_64_no_verify+0xcf/0xdb
[ 1729.891324][    C1]  __warn+0x2f8/0x4f0
[ 1729.895338][    C1]  ? debug_check_no_obj_freed+0x43c/0x530
[ 1729.901077][    C1]  ? debug_check_no_obj_freed+0x43c/0x530
[ 1729.906811][    C1]  report_bug+0x2ba/0x4f0
[ 1729.911228][    C1]  ? debug_check_no_obj_freed+0x43c/0x530
[ 1729.916953][    C1]  handle_bug+0x3a/0x70
[ 1729.921112][    C1]  exc_invalid_op+0x16/0x40
[ 1729.925622][    C1]  asm_exc_invalid_op+0x16/0x20
[ 1729.930544][    C1] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530
[ 1729.936883][    C1] Code: ef e8 48 cc bd fd 4c 8b 45 00 48 c7 c7 c0 18 df 8a 48 c7 c6 80 15 df 8a 48 c7 c2 20 1a df 8a 8b 0c 24 4d 89 e9 e8 34 52 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 a5 7a 0a
[ 1729.956497][    C1] RSP: 0018:ffffc900001e0a10 EFLAGS: 00010246
[ 1729.962548][    C1] RAX: 9955bd84529ceb00 RBX: ffffffff96e18a40 RCX: ffff888017689dc0
[ 1729.970531][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[ 1729.978504][    C1] RBP: ffffffff8a8def40 R08: ffffffff90af6437 R09: 1ffffffff215ec86
[ 1729.986483][    C1] R10: dffffc0000000000 R11: fffffbfff215ec87 R12: ffff888055b33200
[ 1729.994446][    C1] R13: ffffffff892aadc0 R14: ffff888055b33000 R15: ffff888055b33090
[ 1730.002420][    C1]  ? rose_transmit_link+0x730/0x730
[ 1730.007631][    C1]  slab_free_freelist_hook+0xd2/0x1a0
[ 1730.013016][    C1]  ? rose_timer_expiry+0x4a7/0x5d0
[ 1730.018138][    C1]  __kmem_cache_free+0xb6/0x1f0
[ 1730.022994][    C1]  rose_timer_expiry+0x4a7/0x5d0
[ 1730.027925][    C1]  ? call_timer_fn+0x194/0x670
[ 1730.032678][    C1]  call_timer_fn+0x1ac/0x670
[ 1730.037262][    C1]  ? rose_start_t1timer+0xd0/0xd0
[ 1730.042286][    C1]  ? call_timer_fn+0xcf/0x670
[ 1730.046970][    C1]  ? __run_timers+0x800/0x800
[ 1730.051638][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1730.056842][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1730.062031][    C1]  ? rose_start_t1timer+0xd0/0xd0
[ 1730.067060][    C1]  __run_timers+0x53e/0x800
[ 1730.071581][    C1]  ? detach_timer+0x350/0x350
[ 1730.076252][    C1]  ? lock_chain_count+0x20/0x20
[ 1730.081206][    C1]  run_timer_softirq+0x63/0xf0
[ 1730.085976][    C1]  handle_softirqs+0x2a1/0x930
[ 1730.090753][    C1]  ? __irq_exit_rcu+0x13b/0x230
[ 1730.095609][    C1]  ? do_softirq+0x210/0x210
[ 1730.100120][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[ 1730.105320][    C1]  __irq_exit_rcu+0x13b/0x230
[ 1730.109999][    C1]  ? irq_exit_rcu+0x20/0x20
[ 1730.114497][    C1]  irq_exit_rcu+0x5/0x20
[ 1730.118741][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1730.124384][    C1]  </IRQ>
[ 1730.127303][    C1]  <TASK>
[ 1730.130229][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1730.136202][    C1] RIP: 0010:default_idle+0xb/0x10
[ 1730.141222][    C1] Code: 48 89 df e8 e7 5f 9c f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 77 ac 4f 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[ 1730.160828][    C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6
[ 1730.166874][    C1] RAX: 9955bd84529ceb00 RBX: ffffffff8a3702b7 RCX: 9955bd84529ceb00
[ 1730.174835][    C1] RDX: 0000000000000001 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0f60
[ 1730.182820][    C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01
[ 1730.190792][    C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 1ffff9200002efc8
[ 1730.198776][    C1] R13: dffffc0000000000 R14: ffff888017689dc0 R15: 0000000000000001
[ 1730.206772][    C1]  ? default_idle_call+0x77/0xc0
[ 1730.211725][    C1]  default_idle_call+0x84/0xc0
[ 1730.216486][    C1]  do_idle+0x20d/0x5a0
[ 1730.220557][    C1]  ? idle_inject_timer_fn+0x60/0x60
[ 1730.225768][    C1]  ? schedule_idle+0x57/0x90
[ 1730.230457][    C1]  ? do_idle+0x588/0x5a0
[ 1730.234702][    C1]  cpu_startup_entry+0x3f/0x60
[ 1730.239487][    C1]  start_secondary+0xe4/0xf0
[ 1730.244085][    C1]  secondary_startup_64_no_verify+0xcf/0xdb
[ 1730.249984][    C1]  </TASK>
[ 1730.253129][    C1] Kernel Offset: disabled
[ 1730.257530][    C1] Rebooting in 86400 seconds..