last executing test programs:

15m54.371981348s ago: executing program 4 (id=17):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001380)={0x14, 0xe, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}}, 0x14}}, 0x28000000)
bind$llc(0xffffffffffffffff, &(0x7f0000000040), 0x10)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="680200000105010200000000000000000300000a540201"], 0x268}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)

15m53.911103729s ago: executing program 4 (id=19):
r0 = socket(0x2, 0x80805, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x2, 0x0, &(0x7f0000000000)="259a", 0x0, 0xf11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r2, 0xa11c}, 0x8)

15m53.760900332s ago: executing program 4 (id=20):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000000)=0x9, 0x4)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x84, @empty, 0x4e20, 0x3, 'sed\x00', 0x3, 0x1, 0x5f}, 0x2c)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@delqdisc={0x150, 0x25, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xfff2, 0x1}, {0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xfc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x78, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4c8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5c050f0c}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x401}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x140000}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x5, 0xa, 0x7, 0x1, 0xb, 0xd, 0x7, 0xc, 0x5, 0x4, 0x2, 0x2, 0x6, 0xd, 0xb, 0x5], 0x1, [0xa4, 0x34b8, 0x6, 0x1ff, 0x9, 0x1, 0x6d, 0x0, 0xffff, 0x3, 0x6, 0x1000, 0x2, 0xbb, 0x52e, 0x3], [0xfffc, 0x3fc, 0x5, 0x100, 0xc, 0xf, 0x1, 0x1847, 0x6, 0x7, 0x0, 0x8, 0x7, 0x2, 0x9, 0xa90]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xe}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xda}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfff}]}, 0x150}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000400)={<r4=>0x0, 0x9986, 0x10}, &(0x7f00000004c0)=0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0x9, @private0, 0x341d}}, 0x8, 0x8}, 0x90)
recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x2}}]}, 0x13c}}, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000100))
syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[], 0x0)

15m50.967789892s ago: executing program 4 (id=28):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000680)={[{@utf8no}, {@fat=@nocase}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@showexec}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_winnt}]}, 0x0, 0x2b5, &(0x7f00000012c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

15m50.483652695s ago: executing program 4 (id=31):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x24, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0x5, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4)

15m48.458854736s ago: executing program 4 (id=39):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x63}]}]}, 0x28}}, 0xd4)

15m48.198809839s ago: executing program 32 (id=39):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x63}]}]}, 0x28}}, 0xd4)

15m43.58396462s ago: executing program 3 (id=60):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001)
recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0)

15m43.409089136s ago: executing program 3 (id=61):
openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})

15m43.306363635s ago: executing program 3 (id=62):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00')
preadv(r0, &(0x7f0000003900)=[{&(0x7f00000003c0)=""/124, 0x7c}], 0x1, 0x2f, 0x7ff)

15m43.187121426s ago: executing program 3 (id=63):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000680)={[{@utf8no}, {@fat=@nocase}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@showexec}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_winnt}]}, 0x0, 0x2b5, &(0x7f00000012c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

15m43.032291059s ago: executing program 3 (id=64):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x74}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400000000000100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005)

15m41.322018182s ago: executing program 3 (id=71):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{0x0}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001)
recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0)

15m40.825617826s ago: executing program 33 (id=71):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{0x0}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001)
recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0)

4m12.216599446s ago: executing program 5 (id=4661):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x5, 0x2, 0xf, 0x6, 0x1, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x87, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r7, 0x0, 0x4005)

4m11.636911418s ago: executing program 5 (id=4668):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000380))

4m11.483298342s ago: executing program 5 (id=4670):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

4m11.239667464s ago: executing program 5 (id=4675):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x1000000, &(0x7f0000001600), 0xff, 0x55a3, &(0x7f000000bc80)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000001b00)={<r2=>0x0, ""/256, 0x0, <r3=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r4=>0x0, <r5=>0x0})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYRES64=r5, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESOCT=r5, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES16], 0x0, 0x0, &(0x7f0000000000))

4m7.492141721s ago: executing program 5 (id=4699):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c00020008000300"], 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039042abd7000eaffff000003e400", @ANYRES32=r6, @ANYBLOB="03000000c31006002000128008000100736974001400028008000300ac1414bb08001400"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)

4m5.72946893s ago: executing program 5 (id=4711):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x5, 0x2, 0xf, 0x6, 0x1, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x87, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003cddcb0000", 0x10}], 0x1}, 0x4005)

4m4.563289665s ago: executing program 34 (id=4711):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x5, 0x2, 0xf, 0x6, 0x1, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x87, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003cddcb0000", 0x10}], 0x1}, 0x4005)

31.558965117s ago: executing program 2 (id=5528):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fchownat(r2, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
write$binfmt_format(r6, &(0x7f0000000000)='1\x00', 0x2400)

29.86658497s ago: executing program 2 (id=5534):
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0)

28.350242266s ago: executing program 2 (id=5543):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000043000103f9e675e93a8100b740bdd3df250000"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/4096, 0xe9c}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000001700)=""/117, 0x75}], 0x3}, 0x2000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket(0xa, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x40000, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
writev(r3, 0xfffffffffffffffc, 0x1)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4624, 0x9, @empty, 0xfffffe01}}}, 0x108)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16, @ANYBLOB="07020000000000000000010000002c01088044"], 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x6, 0x7, 0xa, 0x41, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x0, 0x20, 0xd0, 0x9}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000740)=@ipv4_getnetconf={0x44, 0x52, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x5}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xd62d}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x74}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}]}, 0x44}}, 0x8000)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000004c0), 0xce, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)

27.402438082s ago: executing program 2 (id=5546):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0), 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8040)

26.170212493s ago: executing program 2 (id=5548):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x20000000)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6fc84b579dfed949, 0x0)
close(r6)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4)

25.390788113s ago: executing program 2 (id=5551):
r0 = getpid()
syz_pidfd_open(r0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pread64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x7fff)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @empty}, 0x1c)
io_setup(0x6, &(0x7f0000000680)=<r6=>0x0)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4)
io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0xaa6c, r5, 0x0}])
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x15, 0x0, 0x1, 0x20000}, {0x1, 0x0, 0x0, 0xfffffffe}]})

14.910044097s ago: executing program 0 (id=5579):
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0xa7e}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c81f005fb311", 0x31}, {0x0}], 0x5}, 0x800)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

11.514264913s ago: executing program 0 (id=5581):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
syz_usb_disconnect(r0)

10.044224995s ago: executing program 7 (id=5589):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000811}, 0x20000000)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6fc84b579dfed949, 0x0)
close(r6)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4)

9.157173635s ago: executing program 0 (id=5592):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

6.347482978s ago: executing program 1 (id=5599):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x4000000000000000}]})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x83f, 0x0, 0x2}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.145326836s ago: executing program 1 (id=5600):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.279283235s ago: executing program 6 (id=5603):
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000180)=@sg0, 0xee01, &(0x7f0000000340))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x30)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}]}}, 0x0, 0x2a}, 0x28)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

4.783413969s ago: executing program 1 (id=5604):
syz_emit_ethernet(0xe, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x6}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2a2380, 0x0)
close(r6)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x16}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001500)="1e8d7a3262b5a2a2dbadcac7f3d1e694", 0x10}], 0x1}, 0x4c00c)

4.308360992s ago: executing program 6 (id=5605):
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x10020, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140))
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000040))

3.395338484s ago: executing program 6 (id=5606):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

3.127388968s ago: executing program 6 (id=5607):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8923, 0x0)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000600)="f9b399b378caca", 0x7}], 0x1)

3.047408515s ago: executing program 6 (id=5608):
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0)

2.982190451s ago: executing program 7 (id=5609):
r0 = getpid()
syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pread64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x7fff)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4)
io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0xaa6c, r4, 0x0}])
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)

2.947341835s ago: executing program 0 (id=5610):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fremovexattr(r0, &(0x7f0000000140)=@random={'user.', '^\x00'})
getresgid(&(0x7f0000000100)=<r1=>0x0, &(0x7f0000000e80), &(0x7f0000000ec0))
openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0)
read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020)
syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x2004054, &(0x7f0000000f00)={[{@mode={'mode', 0x3d, 0x7}}, {@gid={'gid', 0x3d, r1}}, {@mode={'mode', 0x3d, 0x1ff}}, {@unhide}, {@longad}, {}, {@uid_ignore}, {@session={'session', 0x3d, 0xffffffffffffff00}}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0x3}}, {@adinicb}, {}, {@lastblock={'lastblock', 0x3d, 0x1}}, {@rootdir={'rootdir', 0x3d, 0x40}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}], [{@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'dioread_lock'}}, {@obj_role}, {@pcr={'pcr', 0x3d, 0x3}}]}, 0x1, 0xc43, &(0x7f0000000200)="$eJzs3U9sHNd9B/DfGy7Fpd1WTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUWRFi2KFCV/Pjb13Z19b/a9easZiuCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8ev7EybSDgrV9aAwAsC8ujn31xKmdXP8BgMfG5Z3++x8AAAAAAAAAAAAAAHhYUhTxVKSYu7iWJqrnHfUL7f6bt8ZHRreuNpiqmn1V+fKrfvLU6TNfenH4bDcvtGc+pP6D9tl4fezy+cYrszfm5qcWFqYmG+Mz7auzk1M73sNu6292rDoAjRtv3Jy8dm2hceqF03e8fGvog4EnjwydG37u+LPdsuMjo6NjG0XqveV3e/eF7WZ4HIoijkeK57/309SKiCJ2fyzq+zv2mw1WnThWdWJ8ZLTqyHS7NbNYvnipeyCKiEZPpWb3GG09FlHr39c+bK8ZsVQ2v2zwsbJ7Y3Ot+daV6anGpdb8YnuxPTtzKXVaW/anEUWcTRHLEbE6cPfu+qOIWqT4zuG1dCUi+rrH4YvVxODt21HsYR93oGxnoz9iuXgExuwAG4giXosUP3v3aFzN55nqXPOFiNfK/EHE22W+HJHKD8aZiPe3+BzxaKpFEX9Zjv+5tTRZnQ+655ULX2t8ZebabE/Z7nnlI14f7jpTPKTrw+Cm3B8H/NxUjyJa1Rl/Ld3/NzsAAAAAAAAAAAAAAAAAPGiDUcRnIsWr//En1bziqOalHz43/IdDv9o7Z/yZe+ynLPtCRCwVO5uTeyhPDLyULqX0kOcSf5zVo4g/zfP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxls7+JFK89N7RtBy9a4q3Z643BiOisypsd+3f7prp6+vr643UyWbOiZxLOZdzruRczRlFrp+zmXMi51LO5ZwrOVdzRl+un7OZcyLnUs7lnCs5V3NGLdfP2cw5kXMp53LOlZyrOeOArN0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA4KaKIX0SKb39jLUWKiGbERHRyZeBhtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2kIr4fKRp/1Ly9rRYRqfq/42j5x5loHirzk9EcLvPlaJ7P2aqy1vzWQ2g/u9OfivhxpBiov3N7wPP493ee3f4YxNvf3Hj22Von+7ovDn0w8OSRw+eGR3/jme0ep60acOxCe+bmrcb4yOjoWM/mWn73T/ZsG8rvWzyYrhMRC2++9UZrenpq/v4flB+BXVR/hB6k2selpx5UD6J2IJrxcPp+D4f79ucMxV4qr//vR4rffe8/uxf8zvW/Hr/SebYxzD//s43r/0ubd7TD639tc718/S+v6Vtd/5/q2fZS/m6kvxZRX7wx138kor7w5lvH2zda16euT82cOXHiy8PDXz59ov9QRP1ae3qq59EDOVwAAAAAAAAAAAAAAAAA+ycV8fuRovXjtdSIiFvVfK2hc8PPHX+2L/qq+VZ3zNt+fezy+cYrszfm5qcWFqYmG+Mz7auzk1M7fbt6Nd1rfGR0TzpzT4N73P7B+iuzc2/Ot6//8eKWrz9RP39lYXG+dXXrl2Mwiohm75ZjVYPHR0arRk+3WzNV1UtbTqb/6PpTEf8VKa6eaaTP5215/v/mGf53zP9f2ryjPZr//4mebeV7plTEzyPF7/zVM/H5qp1PxF3HLJf7u0hx7Ozncrk4VJbrtqFzX4HOzMCy7P9Fin/6xZ1lu/Mhn9ooe3LHB/YRUY7/4Ujx/b/4bvxm3nbn/R+2Hv8nNu/ofsd//cPH/+mebU/ccb+CXXedPP7HI8XLT70Tv5W3fdj9P7r33jiaC9++P8ce/f3/VM+2ofy+v/1gug4AAAAAAAAAAPBI609F/H2k+OFoLb2Yt+3k9/8mN+9oj37/69M92yYfzHpF93yw64MKAAAAAAdEfyriJ5Hi+uI7t+dQ3zn/u2f+5+9tzP8cSZterX7O92vVfQMe5M//eg3l953YfbcBAAAAAAAAAAAAAAAAAADgQEmpiBfzeuoT1Xz+yW3XU1+JFK/+z/O5XDpSluuuAz9U/Vm/ODtz/Pz09OzV1mLryvRUY2yudXWqrPt0pFj728/lukW1vnp3vfnOGu8ba7HPR4rRf+iW7azF3l2b/OmNsifLsp+IFP/9j3eW7a5j/amNsqfKsn8TKb7+L1uXPbJR9nRZ9ruR4kdfb3TLPlGW7d4f9dMbZV+4OlvswagAAAAAAAAAAAAAAAAAAADwcdOfivjzSPG/N5Zvz+XP6//39zytvP3NnvX+N7lVrfM/VK3/v93j+1n/v7qvwNJ27woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+nFEW8FSnmLq6llYHyeUf9Qnvm5q3xkdGtqw2mqmZfVb78qp88dfrMl14cPtvND6//oH0mXh+7fL7xyuyNufmphYWpycb4TPvq7OTUjvew2/qbHasOQOPGGzcnr11baJx64fQdL98a+mDgySND54afO/5st+z4yOjoWE+ZWv99v/td0jbbD0URfx0pnv/eT9MPByKK2P2xuMdnZ68NVp04VnVifGS06sh0uzWzWL54qXsgiohGT6Vm9xjtw1jsSjNiqWx+2eBjZffG5lrzrSvTU41LrfnF9mJ7duZS6rS27E8jijibIpYjYnXg7t31RxFvRIrvHF5L/zoQ0dc9Dl+8OPbVE6e2b0exh33cgbKdjf6I5eKjjtn6+vr6/rXzoBuIIv45Uvzs3aPxbwMRteh8xRciXivzBxFvR2e8U/nBOBPx/hafIx5NtSji/8vxP7eW3h0ozwfd88qFrzW+MnNttqds97zyyF8f9tMBv57Uo4gfVWf8tfTv/l4DAAAAAAAAAAAAAAAAHCBF/HqkeOm9o6maH3x7TnF75nrjcuvKdGdaX3fuX3fO9Pr6+nojdbKZcyLnUs7lnCs5V3NGkevnbJZZX1+fyM+Xci7nXMm5mjP6cv2czZwTOZdyLudcybmaM2q5fs5mzomcSzmXc67kXM0ZB2TuHgAAAAAAAAAAAAAAAAAA8Hgpqv9SfPsba2l9oLO+9ER0csV6oI+9XwYAAP//VMb8Tw==")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r5 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8)

2.931820936s ago: executing program 1 (id=5611):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x4000000000000000}]})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x83f, 0x0, 0x2}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.012308219s ago: executing program 7 (id=5612):
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e"], 0x200)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1}, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x4, 0x9, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}]}}}, @hopopts={{0xd8, 0x29, 0x36, {0x5e, 0x17, '\x00', [@generic={0xff, 0x22, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c3"}, @pad1, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x4c, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b"}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1c0}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.859954162s ago: executing program 0 (id=5613):
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80))
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0)

1.298837013s ago: executing program 1 (id=5614):
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000180)=@sg0, 0xee01, &(0x7f0000000340))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x30)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}]}}, 0x0, 0x2a}, 0x28)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1.271874345s ago: executing program 7 (id=5615):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@local, 0x4e20, 0x2, 0xcd}}, 0x44)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0d00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000009000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa00000000690e000000000000008b798b4f7458d1863cc67c4c6a06fa28e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc7a65d073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f838f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b32176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d247714358d8b170c3b5cad11f72cd9d88e56b95fe9f3de5cfcfa5c1da8ba181580d9db035efe38834de171b64f4b4c1b242786dcc5679e3d0613cdf05b02d7ad4f3b8af27a696e9b8809c2d68fddfcbd451e81d37c11f95094b91fff61ab9e69780b133d1dbca5a78695131c34c855dd793f90ca3973a4bd5606151b3600373d2bbfb7b3638e713e7275af06107949ff5dffe24d3c448ae6e4646b346fe0a21eef1e55d0659eac930d00000000000ff52b98317c45417b900a47c1ae1103c09fc173c1cf28bf7ef7a61523c6b2dbb35f5ae29877bb8e1b3e257056c0d205d391ed7b2089a72a93885b9fc8430ff"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r2, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0xf5, "1d81e07d8f4a5848fd698ed843227b243b7cfb3f75f8b577dc0b9ac7a4bafab6276c1dd2026a7dab38ab212d0c2cb99154d37db29223ff3c785f401610ed6edacf8388815358de915683a57825662368fff5feee0c30f22a2802debf1a997b4a63211278e6e9e951b3cd07ce63f68eb46f1bcd4d9a1f9df29c44441ff8e8a6b050618826b89c558841ddfcd802b2e920a8ef879024f916e00904cfa4940dbe3432a5cf8558dcaf649b5f55abccab278bd19de53f19220b9f8798c25cae9a5472f19d4e3664ea9daf7e6b743e7b3082b3bec66da62c1dcfe1929a4cae5da097a965529a340b84ea417d41f713ef65fe2e4ab915f099"}, &(0x7f0000000140)=0xfd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006140)=ANY=[@ANYBLOB="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"], 0x1e34}}, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000810feb0000", @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050003000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x94, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x53, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0xfffffffffffffffe, @default, 0x1, @val={0x0, 0x18, @random="c0f6067bf42317c844d3bcceac6bc85d591320f0a0079d8a"}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x29}}, @val={0x76, 0x6, {0x3e, 0x6, 0x9, 0xef58}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x94}}, 0x0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xc}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffffc}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x8014}, 0x9)

1.118630319s ago: executing program 7 (id=5616):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

283.050574ms ago: executing program 1 (id=5617):
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0xd8, 0x29, 0x36, {0x5e, 0x18, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x72, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1"}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x188}}], 0x1, 0x810)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445a0e2b4f79b91acb8cfb6bbbb83081c02ec544d20af0b521d102bedc65eeda06df41d160c2197a51325f28b8a789a6fa17d6eaa40f1e40dab9f427d85943241e191c78e6f552fcbf0050938e7b2511c3ee70e6749e1fe51991654e6aa47561590e8b7acf4f8b5ce9f0c90feb97c0ed1a5a08fdd926b", 0xeb}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x9, 0x4d9e, 0x8)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

93.840771ms ago: executing program 0 (id=5618):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000811}, 0x20000000)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6fc84b579dfed949, 0x0)
close(r6)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4)

14.184478ms ago: executing program 7 (id=5619):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

0s ago: executing program 6 (id=5620):
syz_emit_ethernet(0xe, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x6}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2a2380, 0x0)
close(r6)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x16}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001500)="1e8d7a3262b5a2a2dbadcac7f3d1e694", 0x10}], 0x1}, 0x4c00c)

kernel console output (not intermixed with test programs):

5][T21256] BTRFS error (device loop5: state EMA): Remounting read-write after error is not allowed
[  770.541014][    T7] usb 7-1: Manufacturer: syz
[  770.551568][    T7] usb 7-1: SerialNumber: syz
[  770.568052][    T7] usb 7-1: config 0 descriptor??
[  770.575116][T21251] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  770.592468][T21251] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  770.609573][    T7] usb 7-1: ucan: probing device on interface #0
[  770.632597][    T7] usb 7-1: ucan: invalid EP count (1)
[  770.638074][    T7] usb 7-1: ucan: probe failed; try to update the device firmware
[  770.669967][T21265] device syzkaller0 entered promiscuous mode
[  770.745065][T19262] BTRFS info (device loop5: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  770.817316][ T8034] usb 7-1: USB disconnect, device number 26
[  771.081254][T21268] wlan1 speed is unknown, defaulting to 1000
[  771.088061][T21274] netlink: 'syz.1.4701': attribute type 1 has an invalid length.
[  772.286365][T20354] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.378795][T21301] device syzkaller0 entered promiscuous mode
[  772.573793][T20354] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.610479][T21304] device syzkaller0 entered promiscuous mode
[  772.645253][T21304] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  772.951401][T21310] loop2: detected capacity change from 0 to 2048
[  772.971564][T21310] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  772.982377][T21310] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  772.998790][T21310] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  773.040513][T21310] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  773.160225][T20354] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.585263][T20354] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.684945][T21297] loop1: detected capacity change from 0 to 40427
[  773.693629][T21314] netlink: 'syz.2.4715': attribute type 1 has an invalid length.
[  773.721175][T21297] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  773.733651][T21297] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  773.745769][T21314] qfq: no options
[  773.750548][T21317] device syzkaller0 entered promiscuous mode
[  773.764302][T21297] F2FS-fs (loop1): invalid crc value
[  773.814359][T21297] F2FS-fs (loop1): Found nat_bits in checkpoint
[  774.100263][T20354] tipc: Left network mode
[  774.224545][T21327] fuse: Bad value for 'fd'
[  774.332017][T21297] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  774.374379][T21297] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  775.205178][ T4273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  775.216616][ T4273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  775.227233][ T4273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  775.235292][ T4273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  775.247791][ T4273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  775.256793][ T4273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  775.400898][T21351] device syzkaller0 entered promiscuous mode
[  775.405020][T21350] overlayfs: failed to resolve './file1/file0': -2
[  775.749081][T21356] loop6: detected capacity change from 0 to 2048
[  775.775111][T21356] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  775.785799][T21356] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  775.802986][T21356] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  775.828611][T21356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  776.504427][T21358] netlink: 'syz.2.4728': attribute type 1 has an invalid length.
[  776.544262][T21338] wlan1 speed is unknown, defaulting to 1000
[  776.656460][T21369] qfq: no options
[  776.715950][    T7] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  776.734131][T21362] device syzkaller0 entered promiscuous mode
[  777.196970][ T4273] Bluetooth: hci2: command 0x0409 tx timeout
[  777.344093][ T4273] Bluetooth: hci3: command 0x0409 tx timeout
[  777.583524][    T7] usb 2-1: config 0 has an invalid interface number: 100 but max is 0
[  777.602309][    T7] usb 2-1: config 0 has no interface number 0
[  777.608492][    T7] usb 2-1: config 0 interface 100 has no altsetting 0
[  777.641562][    T7] usb 2-1: New USB device found, idVendor=0bda, idProduct=c82b, bcdDevice=2b.28
[  777.666177][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.675594][    T7] usb 2-1: Product: syz
[  777.680350][    T7] usb 2-1: Manufacturer: syz
[  777.685572][    T7] usb 2-1: SerialNumber: syz
[  777.693073][    T7] usb 2-1: config 0 descriptor??
[  777.928838][    T7] usb 2-1: USB disconnect, device number 40
[  779.423983][ T4278] Bluetooth: hci3: command 0x041b tx timeout
[  779.902080][ T4278] Bluetooth: hci5: command 0x0409 tx timeout
[  780.180524][T21408] overlayfs: failed to resolve './file1/file0': -2
[  780.315169][T21411] loop2: detected capacity change from 0 to 164
[  780.410364][T21411] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  781.502173][ T4273] Bluetooth: hci3: command 0x040f tx timeout
[  781.652845][T21338] chnl_net:caif_netlink_parms(): no params data found
[  782.489434][T21440] device syzkaller0 entered promiscuous mode
[  782.824086][T21338] bridge0: port 1(bridge_slave_0) entered blocking state
[  782.889891][T21338] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.935275][T21338] device bridge_slave_0 entered promiscuous mode
[  783.053847][T21464] netlink: 1216 bytes leftover after parsing attributes in process `syz.6.4749'.
[  783.088382][T21464] netlink: 4436 bytes leftover after parsing attributes in process `syz.6.4749'.
[  783.168797][T21338] bridge0: port 2(bridge_slave_1) entered blocking state
[  783.181171][T21338] bridge0: port 2(bridge_slave_1) entered disabled state
[  783.228371][T21338] device bridge_slave_1 entered promiscuous mode
[  783.419281][T21480] loop6: detected capacity change from 0 to 128
[  783.429943][T20354] device hsr_slave_0 left promiscuous mode
[  783.479251][T21480] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  783.487986][T20354] device hsr_slave_1 left promiscuous mode
[  783.497442][T21480] ext4 filesystem being mounted at /291/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  783.582190][ T4278] Bluetooth: hci3: command 0x0419 tx timeout
[  783.607056][T15813] EXT4-fs (loop6): unmounting filesystem.
[  783.613495][T20354] device veth1_macvtap left promiscuous mode
[  783.630638][T20354] device veth0_macvtap left promiscuous mode
[  783.648521][T20354] device veth1_vlan left promiscuous mode
[  783.657022][T20354] device veth0_vlan left promiscuous mode
[  785.592707][T16405] smc: removing ib device syz2
[  785.972832][T21514] loop6: detected capacity change from 0 to 32768
[  785.995451][T21514] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.4757 (21514)
[  786.035489][T21514] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  786.047182][T21514] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  786.056545][T21514] BTRFS error (device loop6): unrecognized mount option 'lazytime'
[  786.071576][T21514] BTRFS error (device loop6): open_ctree failed: -22
[  786.214116][T20891] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by udevd (20891)
[  787.486355][T20354] bond0 (unregistering): Released all slaves
[  787.613253][T21467] device syzkaller0 entered promiscuous mode
[  789.672778][T21338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  789.725294][T21338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  789.835326][T21525] loop2: detected capacity change from 0 to 256
[  789.864189][T21525] FAT-fs (loop2): Directory bread(block 64) failed
[  789.871063][T21525] FAT-fs (loop2): Directory bread(block 65) failed
[  789.877677][T21525] FAT-fs (loop2): Directory bread(block 66) failed
[  789.884207][T21525] FAT-fs (loop2): Directory bread(block 67) failed
[  789.890759][T21525] FAT-fs (loop2): Directory bread(block 68) failed
[  789.897297][T21525] FAT-fs (loop2): Directory bread(block 69) failed
[  789.903910][T21525] FAT-fs (loop2): Directory bread(block 70) failed
[  789.910399][T21525] FAT-fs (loop2): Directory bread(block 71) failed
[  789.917051][T21525] FAT-fs (loop2): Directory bread(block 72) failed
[  789.923569][T21525] FAT-fs (loop2): Directory bread(block 73) failed
[  790.044061][T21338] team0: Port device team_slave_0 added
[  790.074796][T21338] team0: Port device team_slave_1 added
[  790.168937][T21338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  790.240534][T21338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  790.322536][T21338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  790.516968][T21539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  790.529095][T21539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  790.536798][T21539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  790.556657][T21543] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  791.000845][T21338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  791.023625][T21338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  791.058017][T21338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  791.290600][T21338] device hsr_slave_0 entered promiscuous mode
[  791.332261][T21338] device hsr_slave_1 entered promiscuous mode
[  791.349086][T21338] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  791.356865][T21338] Cannot create hsr debugfs directory
[  791.617294][T21562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  792.595125][T21554] device syzkaller0 entered promiscuous mode
[  792.821630][T21562] tipc: Resetting bearer <eth:syzkaller0>
[  793.060401][T21553] tipc: Resetting bearer <eth:syzkaller0>
[  793.149270][T21579] loop1: detected capacity change from 0 to 256
[  793.180472][T21553] tipc: Disabling bearer <eth:syzkaller0>
[  793.310249][T21577] device syzkaller0 entered promiscuous mode
[  793.318731][T21579] FAT-fs (loop1): Directory bread(block 64) failed
[  793.342075][T21579] FAT-fs (loop1): Directory bread(block 65) failed
[  793.348951][T21579] FAT-fs (loop1): Directory bread(block 66) failed
[  793.449812][T21579] FAT-fs (loop1): Directory bread(block 67) failed
[  793.483646][T21579] FAT-fs (loop1): Directory bread(block 68) failed
[  793.525051][T21579] FAT-fs (loop1): Directory bread(block 69) failed
[  793.564888][T21579] FAT-fs (loop1): Directory bread(block 70) failed
[  793.581463][T21579] FAT-fs (loop1): Directory bread(block 71) failed
[  793.630463][T21579] FAT-fs (loop1): Directory bread(block 72) failed
[  793.658508][T21579] FAT-fs (loop1): Directory bread(block 73) failed
[  793.868823][T21338] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  793.920204][T21338] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  793.962509][T21338] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  794.009621][T21338] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  794.970012][T21613] device syzkaller0 entered promiscuous mode
[  795.072901][T21613] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  795.176296][T21623] device syzkaller0 entered promiscuous mode
[  795.186149][T21621] ieee802154 phy0 wpan0: encryption failed: -22
[  795.204015][T21338] 8021q: adding VLAN 0 to HW filter on device bond0
[  795.349303][T21338] 8021q: adding VLAN 0 to HW filter on device team0
[  795.418428][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  795.430716][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  795.469916][T21632] netlink: 'syz.1.4789': attribute type 1 has an invalid length.
[  795.541743][T21632] device bond2 entered promiscuous mode
[  795.573340][T21632] 8021q: adding VLAN 0 to HW filter on device bond2
[  795.607506][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  795.634197][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  795.706946][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  795.714176][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  795.722993][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  796.935307][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  796.964871][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  797.032496][ T4758] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.039674][ T4758] bridge0: port 2(bridge_slave_1) entered forwarding state
[  797.090439][T21657] loop1: detected capacity change from 0 to 164
[  797.133149][ T4278] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260
[  797.141738][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  797.177535][T21657] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  797.222919][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  797.231723][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  797.295019][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  797.345908][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  797.493672][T21338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  797.576598][T21338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  797.618267][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  797.637795][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  797.684217][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  797.721253][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  797.748074][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  797.778970][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  797.807132][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  797.950803][T21673] device syzkaller0 entered promiscuous mode
[  798.031391][T21689] loop2: detected capacity change from 0 to 256
[  798.049596][T21676] device syzkaller0 entered promiscuous mode
[  798.074508][T21689] exfat: Deprecated parameter 'namecase'
[  798.120728][T21687] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  798.349837][T21689] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  801.374719][T21712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  801.407127][T21713] device syzkaller0 entered promiscuous mode
[  801.447416][T21719] tipc: Resetting bearer <eth:syzkaller0>
[  801.483994][T21709] tipc: Resetting bearer <eth:syzkaller0>
[  801.567411][T21709] tipc: Disabling bearer <eth:syzkaller0>
[  801.648932][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  801.657321][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  801.709590][T21338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  801.809326][T21731] loop6: detected capacity change from 0 to 512
[  801.873425][T21731] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  801.882642][T21731] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  801.905127][   T26] audit: type=1800 audit(1771449225.878:8): pid=21731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4808" name="file1" dev="loop6" ino=15 res=0 errno=0
[  802.010914][ T4278] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  802.494371][T15813] EXT4-fs (loop6): unmounting filesystem.
[  803.487148][T21760] device syzkaller0 entered promiscuous mode
[  803.694306][T21768] device syzkaller0 entered promiscuous mode
[  803.724206][T21764] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  803.882006][T21772] loop6: detected capacity change from 0 to 2048
[  804.007702][T21772] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  804.018480][T21772] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  804.041025][T21772] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  804.056813][T21772] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  806.672752][T21811] loop6: detected capacity change from 0 to 512
[  806.690779][T21811] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  806.756478][T21811] EXT4-fs (loop6): orphan cleanup on readonly fs
[  806.774709][T21811] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:511: comm syz.6.4825: Block bitmap for bg 0 marked uninitialized
[  806.827579][T21811] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6181: Corrupt filesystem
[  806.838209][T21811] EXT4-fs (loop6): 1 orphan inode deleted
[  806.844341][T21811] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  806.868042][T21811] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  806.932371][T21814] loop2: detected capacity change from 0 to 512
[  807.177445][T21811] EXT4-fs (loop6): re-mounted. Quota mode: none.
[  807.194528][T21814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  807.204932][T21814] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  807.227749][   T26] audit: type=1800 audit(1771449231.208:9): pid=21813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4824" name="file1" dev="loop2" ino=15 res=0 errno=0
[  807.305775][T15813] EXT4-fs (loop6): unmounting filesystem.
[  807.583899][T13316] EXT4-fs (loop2): unmounting filesystem.
[  808.079797][ T4278] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  808.471208][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  808.487814][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  810.566955][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  810.588356][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  810.661106][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  810.700858][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  810.763214][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  810.771142][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  810.805999][T21338] device veth0_vlan entered promiscuous mode
[  810.836908][T21338] device veth1_vlan entered promiscuous mode
[  811.014631][T21338] device veth0_macvtap entered promiscuous mode
[  811.067178][T20122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  811.075622][T20122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  811.088272][T20122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  811.099883][T20122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  811.520442][T20122] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  811.820040][T21338] device veth1_macvtap entered promiscuous mode
[  811.864290][T20122] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  812.116982][T21871] loop2: detected capacity change from 0 to 512
[  812.400193][T21338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  812.968020][T21871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  812.977207][T21871] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  812.994414][   T26] audit: type=1800 audit(1771449236.968:10): pid=21868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4836" name="file1" dev="loop2" ino=15 res=0 errno=0
[  813.045594][T21338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.217778][T21338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  813.339403][T21880] siw: device registration error -23
[  813.440908][T21881] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  813.977956][T13316] EXT4-fs (loop2): unmounting filesystem.
[  814.055455][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  814.073395][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  814.180072][T21338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  814.261958][T21338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.399911][T21338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  814.438643][T21338] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  814.504755][T21338] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  814.558290][T21338] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  814.640070][T21338] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  814.721028][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  814.753850][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  815.135464][ T4590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  815.181944][ T4590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  815.224517][T14758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  815.317644][T20354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  815.356152][T20354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  815.408644][T20354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  817.818539][T21950] loop6: detected capacity change from 0 to 512
[  818.037468][T21950] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  818.046701][T21950] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  818.067954][   T26] audit: type=1800 audit(1771449242.038:11): pid=21943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4847" name="file1" dev="loop6" ino=15 res=0 errno=0
[  818.580912][T15813] EXT4-fs (loop6): unmounting filesystem.
[  821.340576][T21946] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  821.571421][T21980] device syzkaller0 entered promiscuous mode
[  822.615323][T21993] xt_connbytes: Forcing CT accounting to be enabled
[  822.634141][T21993] Cannot find set identified by id 0 to match
[  822.647447][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4857'.
[  822.933686][T22010] loop6: detected capacity change from 0 to 8
[  824.034562][T22017] SQUASHFS error: lzo decompression failed, data probably corrupt
[  824.043005][T22017] SQUASHFS error: Failed to read block 0x0: -5
[  824.050246][T22017] SQUASHFS error: Failed to read block 0xff: -5
[  824.072013][T22017] SQUASHFS error: lzo decompression failed, data probably corrupt
[  824.079923][T22017] SQUASHFS error: Failed to read block 0x0: -5
[  824.092006][   T26] audit: type=1800 audit(1771449248.058:12): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4860" name="file2" dev="loop6" ino=3 res=0 errno=0
[  824.329695][T22024] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  824.407342][T22030] device syzkaller0 entered promiscuous mode
[  824.505227][T22030] tipc: Resetting bearer <eth:syzkaller0>
[  824.513812][T22023] tipc: Resetting bearer <eth:syzkaller0>
[  824.577927][T22023] tipc: Disabling bearer <eth:syzkaller0>
[  824.680244][T22039] device syzkaller0 entered promiscuous mode
[  825.271024][T22048] device syzkaller0 entered promiscuous mode
[  825.298111][T22050] wlan1 speed is unknown, defaulting to 1000
[  827.798896][T22075] loop6: detected capacity change from 0 to 4096
[  827.818951][T22075] EXT4-fs: inline encryption not supported
[  827.830312][T22075] EXT4-fs (loop6): Test dummy encryption mode enabled
[  827.858316][T22075] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  827.872225][T22075] System zones: 0-5
[  827.925865][T22075] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  828.085152][T22075] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  828.787326][T15813] EXT4-fs (loop6): unmounting filesystem.
[  829.210278][T22090] loop6: detected capacity change from 0 to 2048
[  829.279906][T22090] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  829.291280][T22090] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  829.343944][T22090] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  829.361955][T22090] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  831.224281][ T4278] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  831.360132][T22118] overlayfs: missing 'lowerdir'
[  831.657321][T22127] device syzkaller0 entered promiscuous mode
[  831.891038][T22127] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  832.770891][T22147] siw: device registration error -23
[  833.595961][T22159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  833.603355][T22159] IPv6: NLM_F_CREATE should be set when creating new route
[  833.610611][T22159] IPv6: NLM_F_CREATE should be set when creating new route
[  833.883260][T22166] device syzkaller0 entered promiscuous mode
[  834.012806][T22125] loop1: detected capacity change from 0 to 40427
[  834.066878][T22125] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  834.103217][T22125] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  834.157926][T22125] F2FS-fs (loop1): invalid crc value
[  834.199589][T22125] F2FS-fs (loop1): Found nat_bits in checkpoint
[  834.333301][T22173] wlan1 speed is unknown, defaulting to 1000
[  834.348662][T22176] overlayfs: missing 'lowerdir'
[  834.386869][T22125] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  834.417055][T22125] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  834.580504][T22180] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  834.848872][T22186] loop2: detected capacity change from 0 to 256
[  834.887924][T22186] exfat: Deprecated parameter 'namecase'
[  834.947239][T22186] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  835.356466][T22152] loop7: detected capacity change from 0 to 65536
[  835.406611][T22200] device syzkaller0 entered promiscuous mode
[  835.526609][T22152] XFS (loop7): Mounting V5 Filesystem
[  835.789105][T22152] XFS (loop7): Ending clean mount
[  836.272043][T22218] siw: device registration error -23
[  836.939461][T22221] wlan1 speed is unknown, defaulting to 1000
[  837.039583][T22224] loop1: detected capacity change from 0 to 256
[  838.533585][T22224] FAT-fs (loop1): Directory bread(block 64) failed
[  838.540184][T22224] FAT-fs (loop1): Directory bread(block 65) failed
[  838.568997][T22224] FAT-fs (loop1): Directory bread(block 66) failed
[  838.583519][T22224] FAT-fs (loop1): Directory bread(block 67) failed
[  838.603911][T21338] XFS (loop7): Unmounting Filesystem
[  838.643315][T22224] FAT-fs (loop1): Directory bread(block 68) failed
[  838.649912][T22224] FAT-fs (loop1): Directory bread(block 69) failed
[  838.702262][T22224] FAT-fs (loop1): Directory bread(block 70) failed
[  838.709085][T22224] FAT-fs (loop1): Directory bread(block 71) failed
[  838.748332][T22224] FAT-fs (loop1): Directory bread(block 72) failed
[  838.768578][T22224] FAT-fs (loop1): Directory bread(block 73) failed
[  839.231260][T22238] loop0: detected capacity change from 0 to 2048
[  839.854553][T22238] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  839.865207][T22238] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  839.907091][T22238] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  839.918942][T22238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  842.581549][T22266] device syzkaller0 entered promiscuous mode
[  842.597014][T22265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  842.642411][T22265] device syzkaller0 entered promiscuous mode
[  842.665997][T22265] tipc: Resetting bearer <eth:syzkaller0>
[  842.680043][T22263] tipc: Resetting bearer <eth:syzkaller0>
[  842.708076][T22263] tipc: Disabling bearer <eth:syzkaller0>
[  842.920494][T22271] loop2: detected capacity change from 0 to 64
[  843.041191][T22273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4923'.
[  843.653206][T22288] loop6: detected capacity change from 0 to 2048
[  843.689627][T22288] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  843.700384][T22288] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  843.741403][T22288] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  843.761192][T22288] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  844.581465][T22302] device syzkaller0 entered promiscuous mode
[  844.768819][T22280] loop0: detected capacity change from 0 to 40427
[  844.812884][T22280] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  844.838020][T22280] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  844.886953][T22280] F2FS-fs (loop0): invalid crc value
[  844.911550][T22280] F2FS-fs (loop0): Found nat_bits in checkpoint
[  844.963335][T22313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4936'.
[  845.037186][T22280] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  845.050586][T22280] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  845.651204][T22324] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  845.682739][T22324] device syzkaller0 entered promiscuous mode
[  845.704954][T22324] tipc: Resetting bearer <eth:syzkaller0>
[  845.724394][T22323] tipc: Resetting bearer <eth:syzkaller0>
[  845.764446][T22323] tipc: Disabling bearer <eth:syzkaller0>
[  845.820076][T22326] wlan1 speed is unknown, defaulting to 1000
[  845.829411][T22329] loop0: detected capacity change from 0 to 256
[  845.857637][T22329] exfat: Deprecated parameter 'namecase'
[  846.614421][T22329] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  846.970729][T22342] device syzkaller0 entered promiscuous mode
[  847.092985][T22357] rdma_rxe: rxe_register_device failed with error -23
[  847.099893][T22357] rdma_rxe: failed to add bond0
[  847.243560][T22361] loop1: detected capacity change from 0 to 2048
[  847.253880][T22361] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  847.264516][T22361] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  847.285978][T22361] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  847.299755][T22361] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  847.687292][T22351] 8021q: adding VLAN 0 to HW filter on device bond1
[  847.767795][T22354] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  847.876081][T22354] bond1: (slave macvlan2): Enslaving as an active interface with a down link
[  847.902459][T22360] netlink: 'syz.2.4948': attribute type 1 has an invalid length.
[  848.300459][T22386] loop1: detected capacity change from 0 to 256
[  848.338289][T22386] exfat: Deprecated parameter 'namecase'
[  848.397540][T22386] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  848.524096][T22389] wlan1 speed is unknown, defaulting to 1000
[  849.102931][T22404] loop6: detected capacity change from 0 to 2048
[  849.118811][T22404] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  849.129459][T22404] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  849.141549][T22404] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  849.158347][T22404] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  849.192655][T22410] device syzkaller0 entered promiscuous mode
[  849.316139][T22409] netlink: 'syz.0.4966': attribute type 1 has an invalid length.
[  849.747097][T22428] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4968'.
[  849.964337][T22431] loop7: detected capacity change from 0 to 512
[  850.058755][T22431] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  850.068097][T22431] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  850.222305][   T26] audit: type=1800 audit(1771449274.058:13): pid=22431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4967" name="file1" dev="loop7" ino=15 res=0 errno=0
[  851.647403][T22445] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  851.648667][T22443] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.656352][T22445] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  851.820878][T22443] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.905598][T22443] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.055624][T22443] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.115563][T22450] wlan1 speed is unknown, defaulting to 1000
[  852.155685][T22443] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  852.169682][T22443] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  852.202677][T22443] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  852.243135][T22443] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  853.550071][T22468] netlink: 1216 bytes leftover after parsing attributes in process `syz.6.4975'.
[  853.575177][T22469] device syzkaller0 entered promiscuous mode
[  853.590042][T22468] netlink: 4436 bytes leftover after parsing attributes in process `syz.6.4975'.
[  854.027226][T21338] EXT4-fs (loop7): unmounting filesystem.
[  854.183340][T22484] netlink: 'syz.7.4980': attribute type 1 has an invalid length.
[  854.405298][T22491] overlayfs: missing 'lowerdir'
[  854.727420][T22498] wlan1 speed is unknown, defaulting to 1000
[  854.799284][T22503] device syzkaller0 entered promiscuous mode
[  855.120947][T22510] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.4988'.
[  855.140430][T22487] loop6: detected capacity change from 0 to 32768
[  855.147101][T22510] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.4988'.
[  855.190673][T22487] XFS: ikeep mount option is deprecated.
[  855.221710][T22487] XFS: ikeep mount option is deprecated.
[  855.496142][T22487] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  855.515517][T22487] XFS (loop6): Mounting V5 Filesystem
[  855.585224][T22532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4989'.
[  855.599491][T22487] XFS (loop6): Ending clean mount
[  855.615587][T22534] loop7: detected capacity change from 0 to 512
[  855.645071][T22487] XFS (loop6): Quotacheck needed: Please wait.
[  855.669286][T22534] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  855.678480][T22534] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  855.698358][   T26] audit: type=1800 audit(1771449279.668:14): pid=22534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4990" name="file1" dev="loop7" ino=15 res=0 errno=0
[  855.739337][T22487] XFS (loop6): Quotacheck: Done.
[  856.000228][   T26] audit: type=1800 audit(1771449279.968:15): pid=22487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4982" name="file2" dev="loop6" ino=4423 res=0 errno=0
[  856.147962][T15813] XFS (loop6): Unmounting Filesystem
[  856.908054][T22559] overlayfs: missing 'lowerdir'
[  857.236558][T22568] wlan1 speed is unknown, defaulting to 1000
[  857.423926][T21338] EXT4-fs (loop7): unmounting filesystem.
[  857.599853][T22576] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.5001'.
[  857.639959][T22576] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.5001'.
[  858.380449][T22601] zonefs (nullb0) ERROR: Not a zoned block device
[  859.060460][T22604] overlayfs: missing 'lowerdir'
[  859.224617][T22578] loop7: detected capacity change from 0 to 40427
[  859.283532][T22578] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  859.330263][T22578] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  859.365545][T22578] F2FS-fs (loop7): invalid crc value
[  859.710237][T22578] F2FS-fs (loop7): Found nat_bits in checkpoint
[  860.262431][T22578] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  860.291306][T22578] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  860.421029][T22622] loop6: detected capacity change from 0 to 512
[  860.509446][T22622] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  860.514889][T22627] wlan1 speed is unknown, defaulting to 1000
[  860.518572][T22622] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  860.550942][T22630] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.5013'.
[  860.574688][   T26] audit: type=1800 audit(1771449284.548:16): pid=22622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5010" name="file1" dev="loop6" ino=15 res=0 errno=0
[  860.635193][T22630] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.5013'.
[  861.332031][T22659] loop1: detected capacity change from 0 to 256
[  861.418461][T22659] exfat: Deprecated parameter 'namecase'
[  861.521788][T22659] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  861.557125][T22663] overlayfs: missing 'workdir'
[  862.574848][T22674] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  862.583069][T22674] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  862.596422][T22674] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  862.603858][T22674] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  862.841750][T22674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  863.226731][T22683] wlan1 speed is unknown, defaulting to 1000
[  863.441612][T22688] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.5026'.
[  863.472184][T22688] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.5026'.
[  863.831708][T15813] EXT4-fs (loop6): unmounting filesystem.
[  864.121373][T22703] overlayfs: missing 'workdir'
[  864.546197][T22715] loop0: detected capacity change from 0 to 128
[  864.753764][T20891] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  865.020392][T22727] wlan1 speed is unknown, defaulting to 1000
[  865.044622][T22733] netlink: 1216 bytes leftover after parsing attributes in process `syz.7.5040'.
[  865.068493][T22733] netlink: 4436 bytes leftover after parsing attributes in process `syz.7.5040'.
[  865.596888][T22752] loop2: detected capacity change from 0 to 512
[  865.598648][T22753] overlayfs: missing 'workdir'
[  865.661335][T22752] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  865.670498][T22752] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  865.699098][   T26] audit: type=1800 audit(1771449289.668:17): pid=22752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5042" name="file1" dev="loop2" ino=15 res=0 errno=0
[  866.024268][T22770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  866.054168][T22770] device syzkaller0 entered promiscuous mode
[  866.177392][T22770] tipc: Resetting bearer <eth:syzkaller0>
[  866.211542][T22769] tipc: Resetting bearer <eth:syzkaller0>
[  866.269837][T22776] loop0: detected capacity change from 0 to 256
[  866.293445][T22769] tipc: Disabling bearer <eth:syzkaller0>
[  866.306732][T22776] exfat: Deprecated parameter 'namecase'
[  866.349678][T22776] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  866.760588][T22782] loop1: detected capacity change from 0 to 2048
[  866.795123][T22782] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  866.805755][T22782] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  866.823004][T22782] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  866.842503][T22782] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  867.440715][T22765] loop7: detected capacity change from 0 to 32768
[  867.488520][T22765] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  867.573306][T22765] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  867.583604][ T4278] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[  867.612968][T22765] BTRFS info (device loop7): using free space tree
[  867.975943][T22819] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5058'.
[  868.022074][T22765] BTRFS info (device loop7): enabling ssd optimizations
[  868.092447][ T4278] Bluetooth: hci3: unknown advertising packet type: 0x65
[  868.092529][ T4278] Bluetooth: hci3: Dropping invalid advertising data
[  868.109262][ T4278] Bluetooth: hci3: Malformed LE Event: 0x02
[  868.258412][T13316] EXT4-fs (loop2): unmounting filesystem.
[  868.344557][T21338] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  868.640548][T22832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5063'.
[  868.705235][T22835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  868.775338][T22836] device syzkaller0 entered promiscuous mode
[  868.864423][T22835] tipc: Resetting bearer <eth:syzkaller0>
[  869.043557][T22834] tipc: Resetting bearer <eth:syzkaller0>
[  869.119134][T22834] tipc: Disabling bearer <eth:syzkaller0>
[  869.189107][T22853] loop0: detected capacity change from 0 to 2048
[  869.615383][T22853] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  869.626122][T22853] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  869.683922][T22853] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  869.698224][T22853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  869.905302][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  869.911704][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  869.941041][T22860] loop1: detected capacity change from 0 to 256
[  869.984939][T22860] exfat: Deprecated parameter 'namecase'
[  870.032948][ T4278] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  870.120504][T22860] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  870.403603][T22869] loop6: detected capacity change from 0 to 512
[  870.459763][T22869] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  870.469143][T22869] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  870.483500][   T26] audit: type=1800 audit(1771449294.458:18): pid=22869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5071" name="file1" dev="loop6" ino=15 res=0 errno=0
[  870.511582][T22874] loop7: detected capacity change from 0 to 64
[  870.793926][T22881] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5076'.
[  871.161405][T22893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  871.185187][T22893] device syzkaller0 entered promiscuous mode
[  871.206447][T22894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  871.252718][T22894] device syzkaller0 entered promiscuous mode
[  871.271302][T22893] tipc: Resetting bearer <eth:syzkaller0>
[  871.296091][T22891] tipc: Resetting bearer <eth:syzkaller0>
[  871.340051][T22891] tipc: Disabling bearer <eth:syzkaller0>
[  871.360002][T22895] tipc: Resetting bearer <eth:syzkaller0>
[  871.380949][T22892] tipc: Resetting bearer <eth:syzkaller0>
[  871.494034][T22892] tipc: Disabling bearer <eth:syzkaller0>
[  871.500421][ T4278] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[  871.749297][T22901] loop2: detected capacity change from 0 to 64
[  871.849310][T22904] loop1: detected capacity change from 0 to 256
[  871.909632][T22904] exfat: Deprecated parameter 'namecase'
[  872.028250][T22904] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  872.489304][T15813] EXT4-fs (loop6): unmounting filesystem.
[  872.879487][T22925] wlan1 speed is unknown, defaulting to 1000
[  872.891418][T22927] loop7: detected capacity change from 0 to 1024
[  872.907126][T22927] EXT4-fs: Ignoring removed nomblk_io_submit option
[  872.958866][T22927] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  873.003245][T21279] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  873.053040][   T26] audit: type=1800 audit(1771449297.028:19): pid=22927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5095" name="file1" dev="loop7" ino=15 res=0 errno=0
[  873.197743][T21279] usb 2-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  873.228028][T21279] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  873.288136][T21279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.346003][T22921] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  873.364173][T21279] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1
[  873.469397][T21338] EXT4-fs (loop7): unmounting filesystem.
[  874.920874][T22961] device syzkaller0 entered promiscuous mode
[  875.186470][T22966] loop2: detected capacity change from 0 to 512
[  875.390522][T22965] wlan1 speed is unknown, defaulting to 1000
[  875.399905][T22966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  875.408917][T22966] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  875.427105][   T26] audit: type=1800 audit(1771449299.398:20): pid=22963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5101" name="file1" dev="loop2" ino=15 res=0 errno=0
[  875.722198][T22976] device syzkaller0 entered promiscuous mode
[  875.843679][ T8034] usb 2-1: USB disconnect, device number 41
[  875.861246][T13316] EXT4-fs (loop2): unmounting filesystem.
[  877.362082][T22995] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  877.443863][T22991] netlink: 27 bytes leftover after parsing attributes in process `syz.6.5113'.
[  877.856183][T23008] tipc: Started in network mode
[  877.923838][T23008] tipc: Node identity 6edf5a698ab5, cluster identity 4711
[  877.996368][T23011] loop6: detected capacity change from 0 to 256
[  878.013034][T23008] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  878.040476][T23011] exfat: Deprecated parameter 'namecase'
[  878.046998][T23010] device syzkaller0 entered promiscuous mode
[  878.126224][T23011] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  878.270367][T23006] tipc: Resetting bearer <eth:syzkaller0>
[  878.653398][T23006] tipc: Disabling bearer <eth:syzkaller0>
[  878.729498][T23021] loop1: detected capacity change from 0 to 512
[  878.980013][T23021] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  878.989102][T23021] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  879.005825][   T26] audit: type=1800 audit(1771449302.978:21): pid=23020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5120" name="file1" dev="loop1" ino=15 res=0 errno=0
[  879.531511][T15208] EXT4-fs (loop1): unmounting filesystem.
[  879.588172][T23030] zonefs (nullb0) ERROR: Not a zoned block device
[  880.422038][T23039] siw: device registration error -23
[  880.702152][T23040] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  881.183660][T23043] qfq: no options
[  882.270405][T23055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  882.454298][T23058] device syzkaller0 entered promiscuous mode
[  882.989424][T23059] tipc: Resetting bearer <eth:syzkaller0>
[  883.212274][T23054] tipc: Resetting bearer <eth:syzkaller0>
[  883.311187][T23054] tipc: Disabling bearer <eth:syzkaller0>
[  883.433940][T23047] loop7: detected capacity change from 0 to 40427
[  883.727289][T23047] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  883.866429][T23047] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  883.982452][T23047] F2FS-fs (loop7): invalid crc value
[  884.078252][T23047] F2FS-fs (loop7): Found nat_bits in checkpoint
[  884.377042][T23085] loop2: detected capacity change from 0 to 512
[  884.393277][T23076] siw: device registration error -23
[  884.400529][T23076] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  884.513550][T23085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  884.522670][T23085] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  884.539333][   T26] audit: type=1800 audit(1771449308.508:22): pid=23082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5135" name="file1" dev="loop2" ino=15 res=0 errno=0
[  885.077465][T23099] siw: device registration error -23
[  885.607260][T13316] EXT4-fs (loop2): unmounting filesystem.
[  885.839222][T23079] loop6: detected capacity change from 0 to 32768
[  885.860358][T23079] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.5139 (23079)
[  886.140732][T23079] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  886.171800][T23079] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  886.205583][T23111] loop0: detected capacity change from 0 to 2048
[  886.229418][T23079] BTRFS info (device loop6): force clearing of disk cache
[  886.243068][T23111] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  886.255175][T23111] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  886.273305][T23079] BTRFS info (device loop6): setting nodatacow, compression disabled
[  886.273297][T23111] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  886.281420][T23079] BTRFS info (device loop6): setting datacow
[  886.319148][T23111] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  886.392039][T23079] BTRFS info (device loop6): turning on flush-on-commit
[  886.399046][T23079] BTRFS info (device loop6): using free space tree
[  886.723841][T21561] BTRFS warning (device loop6): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0xb394a10a level 0
[  886.762225][T23079] BTRFS warning (device loop6): failed to read fs tree: -5
[  886.951132][T23079] BTRFS error (device loop6): open_ctree failed: -5
[  886.958248][T18153] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (18153)
[  888.782783][T23174] loop7: detected capacity change from 0 to 40427
[  888.818412][T23174] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  888.826708][T23174] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  888.879440][T23174] F2FS-fs (loop7): invalid crc value
[  888.905409][T23174] F2FS-fs (loop7): Found nat_bits in checkpoint
[  888.985993][T23174] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  888.994476][T23174] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  890.857866][T23148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  890.865400][T23153] device syzkaller0 entered promiscuous mode
[  891.009461][T23153] tipc: Resetting bearer <eth:syzkaller0>
[  891.073918][T23153] tipc: Disabling bearer <eth:syzkaller0>
[  891.121979][T23200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  891.130082][T23205] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  891.141137][T23200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  891.172600][T23200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  891.202595][T23198] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  891.220642][T23198] device syzkaller0 entered promiscuous mode
[  891.238987][T23197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  891.258587][T23198] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  891.305338][T23197] device syzkaller0 entered promiscuous mode
[  891.340889][T23195] tipc: Resetting bearer <eth:syzkaller0>
[  891.464724][T23195] tipc: Disabling bearer <eth:syzkaller0>
[  891.658978][T23216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5159'.
[  892.050536][T23222] siw: device registration error -23
[  893.020614][T23223] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  893.471496][T23218] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5161'.
[  893.964830][T23234] qfq: no options
[  893.972498][T23227] loop7: detected capacity change from 0 to 40427
[  894.002145][T23165] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  894.012156][T23227] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  894.026041][T23227] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  894.044316][T23227] F2FS-fs (loop7): invalid crc value
[  894.063602][T23227] F2FS-fs (loop7): Found nat_bits in checkpoint
[  894.101177][T23238] netlink: 'syz.0.5167': attribute type 1 has an invalid length.
[  894.151167][T23227] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  894.172094][T23227] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  894.203486][T23165] usb 2-1: config 7 has an invalid interface number: 101 but max is 0
[  894.223809][T23244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  894.232000][T23165] usb 2-1: config 7 has no interface number 0
[  894.246482][T23244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  894.254573][T23165] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  894.283337][T23244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  894.291972][T23165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.299996][T23165] usb 2-1: Product: syz
[  894.321902][T23165] usb 2-1: Manufacturer: syz
[  894.326557][T23165] usb 2-1: SerialNumber: syz
[  894.419010][T23246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  894.443043][T23248] device syzkaller0 entered promiscuous mode
[  894.565637][T23245] tipc: Resetting bearer <eth:syzkaller0>
[  894.696795][T23242] tipc: Resetting bearer <eth:syzkaller0>
[  894.938167][T23165] as10x_usb: device has been detected
[  895.074736][T23165] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  895.361052][T23165] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  895.564809][T23165] as10x_usb: error during firmware upload part1
[  895.594368][T23165] Registered device Elgato EyeTV DTT Deluxe
[  895.596742][T23165] usb 2-1: USB disconnect, device number 42
[  895.667903][T23242] tipc: Disabling bearer <eth:syzkaller0>
[  896.190413][T23165] Unregistered device Elgato EyeTV DTT Deluxe
[  896.296375][T23165] as10x_usb: device has been disconnected
[  896.387706][T23266] loop6: detected capacity change from 0 to 4096
[  896.549642][T23266] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512)
[  896.674463][T23284] zonefs (nullb0) ERROR: Not a zoned block device
[  897.391432][T23279] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  897.582090][ T4273] Bluetooth: hci3: command 0x0406 tx timeout
[  897.693130][T15813] ntfs3: loop6: ntfs_evict_inode r=1e failed, -22.
[  897.700178][T15813] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  897.745020][T23267] tipc: Disabling bearer <eth:syzkaller0>
[  898.073319][T23309] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.211324][T23306] netlink: 'syz.0.5182': attribute type 1 has an invalid length.
[  898.228840][T23316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  898.240218][T23316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  898.250276][T23316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  898.308899][T23318] siw: device registration error -23
[  899.081365][T23309] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  899.138915][T23324] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  899.147279][T23324] device syzkaller0 entered promiscuous mode
[  899.255008][T23309] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  899.404856][T23334] tipc: Resetting bearer <eth:syzkaller0>
[  900.108353][T23309] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.129617][T23323] tipc: Resetting bearer <eth:syzkaller0>
[  900.159782][T23323] tipc: Disabling bearer <eth:syzkaller0>
[  900.180524][T23345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  900.268765][T23309] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  900.292552][T23344] device syzkaller0 entered promiscuous mode
[  900.370648][T23309] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  900.406044][T23309] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  900.470847][T23309] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  900.493156][T23351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  900.501246][T23344] tipc: Resetting bearer <eth:syzkaller0>
[  900.519089][T23351] device syzkaller0 entered promiscuous mode
[  900.530040][T23343] tipc: Resetting bearer <eth:syzkaller0>
[  901.027474][T23343] tipc: Disabling bearer <eth:syzkaller0>
[  901.168420][T23349] tipc: Resetting bearer <eth:syzkaller0>
[  901.353057][T23349] tipc: Disabling bearer <eth:syzkaller0>
[  901.449239][T23362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  901.478324][T23362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  901.514353][T23362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  901.696557][T23368] siw: device registration error -23
[  903.024565][T23358] loop6: detected capacity change from 0 to 32768
[  903.248812][T23358] XFS (loop6): Mounting V5 Filesystem
[  903.380985][T23386] loop0: detected capacity change from 0 to 32768
[  903.394326][T23386] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.5205 (23386)
[  903.424906][T23386] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  903.435475][T23386] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  903.444212][T23386] BTRFS info (device loop0): using free space tree
[  903.675464][T23395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  903.709186][T23395] device syzkaller0 entered promiscuous mode
[  904.390111][T23375] loop2: detected capacity change from 0 to 32768
[  904.402871][T23358] XFS (loop6): Ending clean mount
[  904.437837][T23395] tipc: Resetting bearer <eth:syzkaller0>
[  904.447932][T23358] XFS (loop6): Quotacheck needed: Please wait.
[  904.533008][T23389] tipc: Resetting bearer <eth:syzkaller0>
[  904.612508][T23389] tipc: Disabling bearer <eth:syzkaller0>
[  904.620126][T23375] jfs_lookup: dtSearch returned -5
[  904.658540][T23358] XFS (loop6): Quotacheck: Done.
[  904.689607][T23386] BTRFS info (device loop0): enabling ssd optimizations
[  904.866933][T23417] loop1: detected capacity change from 0 to 512
[  904.878946][T15813] XFS (loop6): Unmounting Filesystem
[  905.407071][T23417] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.5208: inode #1: comm syz.1.5208: iget: illegal inode #
[  905.488568][T23417] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.5208: error while reading EA inode 1 err=-117
[  905.691167][T23417] EXT4-fs (loop1): 1 orphan inode deleted
[  905.765962][T23431] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0)
[  906.352442][T23417] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  906.508065][T23433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  906.549506][T23433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  906.592330][T23433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  906.657829][T23433] device bridge_slave_0 left promiscuous mode
[  906.696266][T23433] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.776773][T23433] device bridge_slave_1 left promiscuous mode
[  906.804248][T14879] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  906.821214][T23433] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.890527][T23439] siw: device registration error -23
[  907.590203][T23433] bond0: (slave bond_slave_0): Releasing backup interface
[  907.645505][T23433] bond0: (slave bond_slave_1): Releasing backup interface
[  907.707613][T23433] team0: Port device team_slave_0 removed
[  907.733305][T23433] team0: Port device team_slave_1 removed
[  907.741045][T23433] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  907.749622][T23433] batman_adv: batadv0: Removing interface: batadv_slave_0
[  907.765065][T23433] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  907.777072][T23433] batman_adv: batadv0: Removing interface: batadv_slave_1
[  907.829009][T23443] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  907.973972][T23443] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.057255][T23443] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.268088][T23454] zonefs (nullb0) ERROR: Not a zoned block device
[  908.710160][T23456] siw: device registration error -23
[  908.719589][T23456] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  908.933790][T23443] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.197689][T23458] loop7: detected capacity change from 0 to 4096
[  909.244521][T23458] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  909.289762][T23458] NILFS (loop7): mounting unchecked fs
[  909.328542][T23458] NILFS (loop7): invalid segment: Checksum error in segment payload
[  909.372218][T23458] NILFS (loop7): unable to fall back to spare super block
[  909.399916][T23458] NILFS (loop7): error -22 while searching super root
[  909.409177][T20891] udevd[20891]: incorrect nilfs2 checksum on /dev/loop7
[  910.368071][T15208] EXT4-fs (loop1): unmounting filesystem.
[  910.516363][T23473] loop2: detected capacity change from 0 to 512
[  910.689240][T23473] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  910.763948][T23473] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  910.843536][T23484] device syzkaller0 entered promiscuous mode
[  910.958615][T23488] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  910.971987][   T26] audit: type=1800 audit(1771449334.938:23): pid=23473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5220" name="file1" dev="loop2" ino=15 res=0 errno=0
[  911.019781][T23488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  911.054014][T23493] zonefs (nullb0) ERROR: Not a zoned block device
[  911.195599][T23488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  912.246724][T23512] loop0: detected capacity change from 0 to 256
[  912.299366][T23512] exfat: Deprecated parameter 'namecase'
[  912.347275][T23512] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  912.409719][T13316] EXT4-fs (loop2): unmounting filesystem.
[  913.414865][T23524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  913.423477][T23524] device syzkaller0 entered promiscuous mode
[  913.462926][T23524] tipc: Resetting bearer <eth:syzkaller0>
[  913.508019][T23523] tipc: Resetting bearer <eth:syzkaller0>
[  913.607952][T23523] tipc: Disabling bearer <eth:syzkaller0>
[  913.635806][T23526] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  913.658675][T23526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  913.708400][T23526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  913.773996][T23526] device bridge_slave_0 left promiscuous mode
[  913.793348][T23526] bridge0: port 1(bridge_slave_0) entered disabled state
[  913.833855][T23526] device bridge_slave_1 left promiscuous mode
[  913.859416][T23526] bridge0: port 2(bridge_slave_1) entered disabled state
[  913.902579][T23526] bond0: (slave bond_slave_0): Releasing backup interface
[  913.962819][T23526] bond0: (slave bond_slave_1): Releasing backup interface
[  914.104136][T23526] team0: Port device team_slave_0 removed
[  914.133324][T23521] loop2: detected capacity change from 0 to 32768
[  914.146910][T23526] team0: Port device team_slave_1 removed
[  914.174357][T23526] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  914.185744][T23526] batman_adv: batadv0: Removing interface: batadv_slave_0
[  914.210145][T23526] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  914.218680][T23526] batman_adv: batadv0: Removing interface: batadv_slave_1
[  914.240551][T23521] XFS (loop2): Mounting V5 Filesystem
[  914.380452][T23521] XFS (loop2): Ending clean mount
[  914.392453][T23443] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  914.408306][T23443] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  914.426840][T23521] XFS (loop2): Quotacheck needed: Please wait.
[  914.503880][T23443] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  914.545964][T23521] XFS (loop2): Quotacheck: Done.
[  914.569580][T23443] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  914.772180][T13316] XFS (loop2): Unmounting Filesystem
[  914.891512][T23547] device syzkaller0 entered promiscuous mode
[  915.222045][T23556] loop0: detected capacity change from 0 to 512
[  915.279536][T23551] loop1: detected capacity change from 0 to 2048
[  915.356029][T23551] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  915.366782][T23551] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  915.393685][T23551] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  915.421057][T23551] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  915.894832][T23564] loop7: detected capacity change from 0 to 4096
[  915.912038][T23556] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  915.921718][T23556] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  915.949021][   T26] audit: type=1800 audit(1771449339.918:24): pid=23553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5247" name="file1" dev="loop0" ino=15 res=0 errno=0
[  916.082649][T23564] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512)
[  916.711957][   T26] audit: type=1800 audit(1771449340.678:25): pid=23564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5251" name="file1" dev="loop7" ino=30 res=0 errno=0
[  916.821642][T23564] ntfs3: loop7: ntfs_sync_inode r=1e failed, -22.
[  916.864925][T14879] EXT4-fs (loop0): unmounting filesystem.
[  916.905261][T23564] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  917.013544][T23568] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  917.025543][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260
[  917.039853][T23568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  917.082502][   T11] ntfs3: loop7: ntfs3_write_inode r=1e failed, -22.
[  917.096366][T23568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  917.118754][T21338] ntfs3: loop7: ntfs_evict_inode r=1e failed, -22.
[  917.409198][T23581] loop3: detected capacity change from 0 to 7
[  917.429126][T23581] Dev loop3: unable to read RDB block 7
[  917.435348][T23581]  loop3: unable to read partition table
[  917.441937][T23581] loop3: partition table beyond EOD, truncated
[  917.448187][T23581] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü�¾SêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5)
[  918.622719][T23590] loop2: detected capacity change from 0 to 256
[  918.657417][T23590] exfat: Deprecated parameter 'namecase'
[  918.696639][T23594] device syzkaller0 entered promiscuous mode
[  918.740216][T23594] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  918.840848][T23590] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  919.320111][T23609] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  919.584797][T23617] loop0: detected capacity change from 0 to 256
[  919.677733][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  921.313429][T23636] netlink: 4988 bytes leftover after parsing attributes in process `syz.7.5276'.
[  921.750916][T23638] device syzkaller0 entered promiscuous mode
[  921.796183][T23638] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  922.005233][T23643] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5279'.
[  922.257700][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260
[  922.849425][T23660] loop1: detected capacity change from 0 to 512
[  923.523032][T23660] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  923.532203][T23660] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  923.585197][   T26] audit: type=1800 audit(1771449347.558:26): pid=23658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5283" name="file1" dev="loop1" ino=15 res=0 errno=0
[  923.824944][T15208] EXT4-fs (loop1): unmounting filesystem.
[  924.103723][T23674] zonefs (nullb0) ERROR: Not a zoned block device
[  924.610845][T23687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5295'.
[  924.910515][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  924.920788][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:3 Not tainted syzkaller #0
[  924.928364][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  924.938438][ T4273] Workqueue: hci1 hci_rx_work
[  924.943167][ T4273] Call Trace:
[  924.946460][ T4273]  <TASK>
[  924.949399][ T4273]  dump_stack_lvl+0x188/0x24e
[  924.954096][ T4273]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  924.959836][ T4273]  ? show_regs_print_info+0x12/0x12
[  924.965054][ T4273]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  924.970716][ T4273]  sysfs_create_dir_ns+0x26a/0x290
[  924.975848][ T4273]  ? sysfs_warn_dup+0xa0/0xa0
[  924.980540][ T4273]  ? preempt_schedule_thunk+0x16/0x18
[  924.985940][ T4273]  kobject_add_internal+0x61c/0xcc0
[  924.991158][ T4273]  kobject_add+0x160/0x230
[  924.995580][ T4273]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  925.001232][ T4273]  ? kobject_init+0x1d0/0x1d0
[  925.005941][ T4273]  ? get_device_parent+0x121/0x3f0
[  925.011075][ T4273]  device_add+0x483/0xfb0
[  925.015425][ T4273]  ? kmem_cache_free+0xf7/0x290
[  925.020293][ T4273]  hci_conn_add_sysfs+0xd1/0x1e0
[  925.025251][ T4273]  le_conn_complete_evt+0x105f/0x1670
[  925.030651][ T4273]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  925.036917][ T4273]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  925.042577][ T4273]  ? lockdep_hardirqs_on+0x94/0x140
[  925.047801][ T4273]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  925.053472][ T4273]  hci_le_enh_conn_complete_evt+0x185/0x460
[  925.059397][ T4273]  ? hci_remote_host_features_evt+0x270/0x270
[  925.065491][ T4273]  hci_event_packet+0x7b6/0x1280
[  925.070462][ T4273]  ? bis_list+0x280/0x280
[  925.074819][ T4273]  ? kcov_remote_start+0x27/0x7e0
[  925.079861][ T4273]  ? hci_send_to_monitor+0x9c/0x4a0
[  925.085076][ T4273]  hci_rx_work+0x3eb/0xd40
[  925.089516][ T4273]  ? process_one_work+0x7b0/0x1160
[  925.094647][ T4273]  process_one_work+0x8a2/0x1160
[  925.099609][ T4273]  ? worker_detach_from_pool+0x240/0x240
[  925.105262][ T4273]  ? _raw_spin_lock_irq+0xb7/0xf0
[  925.110293][ T4273]  ? _raw_spin_lock_irqsave+0x100/0x100
[  925.115851][ T4273]  ? kthread_data+0x4b/0xc0
[  925.120392][ T4273]  worker_thread+0xaa2/0x1270
[  925.125128][ T4273]  kthread+0x29d/0x330
[  925.129222][ T4273]  ? worker_clr_flags+0x1a0/0x1a0
[  925.134269][ T4273]  ? kthread_blkcg+0xd0/0xd0
[  925.138881][ T4273]  ret_from_fork+0x1f/0x30
[  925.143348][ T4273]  </TASK>
[  925.159214][ T4273] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  925.173165][ T4273] Bluetooth: hci1: failed to register connection device
[  925.182746][T23685] orangefs_mount: mount request failed with -4
[  925.192761][ T8035] libceph: connect (1)[c::]:6789 error -13
[  925.200292][ T8035] libceph: mon0 (1)[c::]:6789 connect error
[  925.414608][T23691] ceph: No mds server is up or the cluster is laggy
[  925.430599][ T4278] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[  925.878357][T23706] loop2: detected capacity change from 0 to 512
[  925.916880][T23150] libceph: connect (1)[c::]:6789 error -13
[  925.923505][T23150] libceph: mon0 (1)[c::]:6789 connect error
[  926.308518][T23706] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  926.317629][T23706] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  926.353856][   T26] audit: type=1800 audit(1771449350.308:27): pid=23705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5299" name="file1" dev="loop2" ino=15 res=0 errno=0
[  926.491416][T23711] device syzkaller0 entered promiscuous mode
[  926.694723][T13316] EXT4-fs (loop2): unmounting filesystem.
[  927.318145][T23721] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0)
[  928.509355][T23733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5306'.
[  928.772764][T23739] zonefs (nullb0) ERROR: Not a zoned block device
[  928.977835][ T4278] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  929.274606][T23757] loop6: detected capacity change from 0 to 512
[  929.908213][T23761] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0)
[  929.922441][T23757] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  929.931425][T23757] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  929.952682][   T26] audit: type=1800 audit(1771449353.928:28): pid=23756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5312" name="file1" dev="loop6" ino=15 res=0 errno=0
[  929.986979][T23763] device syzkaller0 entered promiscuous mode
[  930.059201][T23766] loop2: detected capacity change from 0 to 4096
[  930.212724][T23766] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  930.249725][T23766] NILFS (loop2): mounting unchecked fs
[  930.262595][T15813] EXT4-fs (loop6): unmounting filesystem.
[  930.507941][T20891] udevd[20891]: incorrect nilfs2 checksum on /dev/loop2
[  930.663885][T23766] NILFS (loop2): recovery complete
[  930.957178][T23773] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  931.852031][T23776] siw: device registration error -23
[  932.115610][T23776] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  932.128844][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  932.146662][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  932.380719][T23780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5321'.
[  932.939238][T23792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  932.957336][T23795] zonefs (nullb0) ERROR: Not a zoned block device
[  932.969867][ T4278] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[  932.976288][T23792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  933.002861][T23792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  933.009337][T23766] syz.2.5316 (23766) used greatest stack depth: 19536 bytes left
[  933.038211][T23800] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  933.051413][T23800] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  933.070851][T23800] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  933.097279][T23800] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  933.420485][T23806] loop2: detected capacity change from 0 to 512
[  934.074135][T23806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  934.083305][T23806] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  934.106829][   T26] audit: type=1800 audit(1771449358.078:29): pid=23805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5329" name="file1" dev="loop2" ino=15 res=0 errno=0
[  935.245263][T13316] EXT4-fs (loop2): unmounting filesystem.
[  935.629303][T23813] device syzkaller0 entered promiscuous mode
[  935.966241][T23821] siw: device registration error -23
[  936.062750][T23822] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  936.814845][T23825] loop2: detected capacity change from 0 to 256
[  936.830691][T23825] FAT-fs (loop2): Directory bread(block 64) failed
[  936.837339][T23825] FAT-fs (loop2): Directory bread(block 65) failed
[  936.843997][T23825] FAT-fs (loop2): Directory bread(block 66) failed
[  936.850492][T23825] FAT-fs (loop2): Directory bread(block 67) failed
[  936.857162][T23825] FAT-fs (loop2): Directory bread(block 68) failed
[  936.863738][T23825] FAT-fs (loop2): Directory bread(block 69) failed
[  936.870290][T23825] FAT-fs (loop2): Directory bread(block 70) failed
[  936.876828][T23825] FAT-fs (loop2): Directory bread(block 71) failed
[  936.883397][T23825] FAT-fs (loop2): Directory bread(block 72) failed
[  936.889923][T23825] FAT-fs (loop2): Directory bread(block 73) failed
[  937.814854][T23840] loop6: detected capacity change from 0 to 1024
[  938.230678][ T4278] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  938.319908][T23847] loop1: detected capacity change from 0 to 512
[  939.176686][T23847] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  939.185870][T23847] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  939.208996][   T26] audit: type=1800 audit(1771449363.178:30): pid=23844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5342" name="file1" dev="loop1" ino=15 res=0 errno=0
[  939.478611][T15208] EXT4-fs (loop1): unmounting filesystem.
[  941.170622][ T4363] hfsplus: b-tree write err: -5, ino 4
[  941.195871][T23865] loop7: detected capacity change from 0 to 256
[  941.216651][T23865] FAT-fs (loop7): Directory bread(block 64) failed
[  941.223358][T23865] FAT-fs (loop7): Directory bread(block 65) failed
[  941.230017][T23865] FAT-fs (loop7): Directory bread(block 66) failed
[  941.236643][T23865] FAT-fs (loop7): Directory bread(block 67) failed
[  941.243312][T23865] FAT-fs (loop7): Directory bread(block 68) failed
[  941.249910][T23865] FAT-fs (loop7): Directory bread(block 69) failed
[  941.256586][T23865] FAT-fs (loop7): Directory bread(block 70) failed
[  941.307682][T23865] FAT-fs (loop7): Directory bread(block 71) failed
[  941.314318][T23865] FAT-fs (loop7): Directory bread(block 72) failed
[  941.321212][T23865] FAT-fs (loop7): Directory bread(block 73) failed
[  941.565962][T23869] device syzkaller0 entered promiscuous mode
[  942.401462][T23872] loop6: detected capacity change from 0 to 32768
[  942.498795][T23872] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  942.526001][T23872] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  942.656151][T23872] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  942.695733][    T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  942.712224][    T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  942.752101][T23881] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  942.818755][    T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 106ms
[  942.837290][    T7] gfs2: fsid=syz:syz.0: jid=0: Done
[  942.849802][T23872] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  943.215744][ T4278] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  943.534709][T23892] loop1: detected capacity change from 0 to 512
[  944.208389][T23891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5356'.
[  944.257589][T23892] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  944.266942][T23892] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  944.286643][   T26] audit: type=1800 audit(1771449368.258:31): pid=23888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5355" name="file1" dev="loop1" ino=15 res=0 errno=0
[  944.405466][T23896] device syzkaller0 entered promiscuous mode
[  944.593662][T15208] EXT4-fs (loop1): unmounting filesystem.
[  944.860534][T23907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5360'.
[  945.681387][T23913] device syzkaller0 entered promiscuous mode
[  945.907561][T23913] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  946.050581][T23918] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5364'.
[  946.576877][T23926] loop1: detected capacity change from 0 to 256
[  946.589651][ T4278] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  946.627250][T23926] FAT-fs (loop1): Directory bread(block 64) failed
[  946.641395][T23926] FAT-fs (loop1): Directory bread(block 65) failed
[  946.648029][T23926] FAT-fs (loop1): Directory bread(block 66) failed
[  946.654708][T23926] FAT-fs (loop1): Directory bread(block 67) failed
[  946.661269][T23926] FAT-fs (loop1): Directory bread(block 68) failed
[  946.667836][T23926] FAT-fs (loop1): Directory bread(block 69) failed
[  946.674529][T23926] FAT-fs (loop1): Directory bread(block 70) failed
[  946.681033][T23926] FAT-fs (loop1): Directory bread(block 71) failed
[  946.687654][T23926] FAT-fs (loop1): Directory bread(block 72) failed
[  946.694228][T23926] FAT-fs (loop1): Directory bread(block 73) failed
[  946.784162][T23934] wlan1 speed is unknown, defaulting to 1000
[  947.085811][T23938] loop7: detected capacity change from 0 to 512
[  947.408843][T23938] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  947.418241][T23938] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  947.451384][   T26] audit: type=1800 audit(1771449371.418:32): pid=23938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5369" name="file1" dev="loop7" ino=15 res=0 errno=0
[  947.568384][T23940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5372'.
[  947.721185][T21338] EXT4-fs (loop7): unmounting filesystem.
[  947.776791][T23947] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5373'.
[  947.798394][T23947] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5373'.
[  947.829594][T23948] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5373'.
[  947.910562][T23947] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5373'.
[  948.258893][T23959] zonefs (nullb0) ERROR: Not a zoned block device
[  948.355146][T23963] device syzkaller0 entered promiscuous mode
[  948.410406][T23961] loop0: detected capacity change from 0 to 256
[  948.435080][T23961] exfat: Deprecated parameter 'namecase'
[  948.464326][T23961] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  948.734440][T23969] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  949.731744][T23971] wlan1 speed is unknown, defaulting to 1000
[  950.014324][T23981] loop2: detected capacity change from 0 to 512
[  950.754281][T23981] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  950.763560][T23981] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  950.787656][   T26] audit: type=1800 audit(1771449374.758:33): pid=23978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5385" name="file1" dev="loop2" ino=15 res=0 errno=0
[  951.501642][ T4278] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  951.704807][T13316] EXT4-fs (loop2): unmounting filesystem.
[  952.249246][T23997] loop1: detected capacity change from 0 to 2048
[  952.277996][T23997] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  952.288690][T23997] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  952.304633][T23997] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  952.316129][T23997] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  952.670378][T24001] zonefs (nullb0) ERROR: Not a zoned block device
[  953.633025][T24012] device syzkaller0 entered promiscuous mode
[  954.104232][T24016] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  954.668590][T24021] loop2: detected capacity change from 0 to 512
[  955.415961][T24021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  955.425026][T24021] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  955.445516][   T26] audit: type=1800 audit(1771449379.418:34): pid=24020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5397" name="file1" dev="loop2" ino=15 res=0 errno=0
[  955.644996][T24024] wlan1 speed is unknown, defaulting to 1000
[  955.696347][T13316] EXT4-fs (loop2): unmounting filesystem.
[  956.831393][T24056] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5409'.
[  956.978824][T24059] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5409'.
[  957.053419][T24060] device syzkaller0 entered promiscuous mode
[  959.125925][T24077] zonefs (nullb0) ERROR: Not a zoned block device
[  959.603195][T24086] loop2: detected capacity change from 0 to 512
[  960.290573][T24086] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  960.299946][T24086] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  960.312474][T24085] wlan1 speed is unknown, defaulting to 1000
[  960.320564][   T26] audit: type=1800 audit(1771449384.288:35): pid=24081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5412" name="file1" dev="loop2" ino=15 res=0 errno=0
[  960.545796][T13316] EXT4-fs (loop2): unmounting filesystem.
[  962.578394][T24160] loop6: detected capacity change from 0 to 2048
[  962.586476][T24160] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  962.597191][T24160] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  962.610696][T24160] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  962.624254][T24160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  962.679659][T24162] device syzkaller0 entered promiscuous mode
[  963.617808][T24179] loop2: detected capacity change from 0 to 512
[  963.808414][T24175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5430'.
[  963.929874][T24179] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  963.939409][T24179] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  963.972600][   T26] audit: type=1800 audit(1771449387.948:36): pid=24179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5429" name="file1" dev="loop2" ino=15 res=0 errno=0
[  964.205757][T13316] EXT4-fs (loop2): unmounting filesystem.
[  964.441129][T24193] loop0: detected capacity change from 0 to 256
[  964.498659][T24193] exfat: Deprecated parameter 'namecase'
[  964.611309][T24193] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  964.860477][T24200] device syzkaller0 entered promiscuous mode
[  965.367219][T24211] IPv6: Can't replace route, no match found
[  965.762218][T24219] loop7: detected capacity change from 0 to 512
[  965.934456][T24219] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  965.943607][T24219] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  965.961925][   T26] audit: type=1800 audit(1771449389.938:37): pid=24219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5443" name="file1" dev="loop7" ino=15 res=0 errno=0
[  966.002562][T24224] zonefs (nullb0) ERROR: Not a zoned block device
[  967.014106][T24240] loop6: detected capacity change from 0 to 2048
[  967.024030][T24240] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  967.034864][T24240] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  967.056933][T24240] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  967.068969][T24240] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  967.317604][T24244] device syzkaller0 entered promiscuous mode
[  967.639992][T21338] EXT4-fs (loop7): unmounting filesystem.
[  967.721251][ T4273] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[  967.752480][T24249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  967.802459][T24249] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  967.826376][T24249] tipc: Resetting bearer <eth:syzkaller0>
[  967.880128][T24255] loop7: detected capacity change from 0 to 256
[  967.887836][T24248] tipc: Disabling bearer <eth:syzkaller0>
[  967.927368][T24255] exfat: Deprecated parameter 'namecase'
[  968.018171][T24255] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  968.207298][T24258] loop0: detected capacity change from 0 to 256
[  969.844857][T24258] FAT-fs (loop0): Directory bread(block 64) failed
[  969.863201][T24258] FAT-fs (loop0): Directory bread(block 65) failed
[  969.886621][T24258] FAT-fs (loop0): Directory bread(block 66) failed
[  969.952307][T24258] FAT-fs (loop0): Directory bread(block 67) failed
[  969.997077][T24258] FAT-fs (loop0): Directory bread(block 68) failed
[  970.116795][T24258] FAT-fs (loop0): Directory bread(block 69) failed
[  970.124466][T24258] FAT-fs (loop0): Directory bread(block 70) failed
[  970.135790][T24258] FAT-fs (loop0): Directory bread(block 71) failed
[  970.157327][T24258] FAT-fs (loop0): Directory bread(block 72) failed
[  970.183905][T24265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5459'.
[  970.200279][T24258] FAT-fs (loop0): Directory bread(block 73) failed
[  970.659489][T24274] device syzkaller0 entered promiscuous mode
[  970.973146][T24278] loop0: detected capacity change from 0 to 512
[  971.624114][T24278] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  971.633755][T24278] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  971.654180][   T26] audit: type=1800 audit(1771449395.628:38): pid=24277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5463" name="file1" dev="loop0" ino=15 res=0 errno=0
[  971.693317][T24290] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  971.730298][T24290] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  971.751904][T24290] tipc: Resetting bearer <eth:syzkaller0>
[  971.876110][T14879] EXT4-fs (loop0): unmounting filesystem.
[  971.893163][T24289] tipc: Disabling bearer <eth:syzkaller0>
[  972.049915][T24296] loop0: detected capacity change from 0 to 256
[  972.116360][T24296] exfat: Deprecated parameter 'namecase'
[  972.198308][T24296] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  972.236345][T24303] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5472'.
[  972.353378][T24304] loop2: detected capacity change from 0 to 256
[  972.470393][T24304] FAT-fs (loop2): Directory bread(block 64) failed
[  972.477255][T24304] FAT-fs (loop2): Directory bread(block 65) failed
[  972.484748][T24304] FAT-fs (loop2): Directory bread(block 66) failed
[  972.491471][T24304] FAT-fs (loop2): Directory bread(block 67) failed
[  972.499017][T24304] FAT-fs (loop2): Directory bread(block 68) failed
[  972.505977][T24304] FAT-fs (loop2): Directory bread(block 69) failed
[  972.513215][T24304] FAT-fs (loop2): Directory bread(block 70) failed
[  972.519973][T24304] FAT-fs (loop2): Directory bread(block 71) failed
[  972.527119][T24304] FAT-fs (loop2): Directory bread(block 72) failed
[  972.534047][T24304] FAT-fs (loop2): Directory bread(block 73) failed
[  973.518645][T24313] device syzkaller0 entered promiscuous mode
[  973.605356][T24321] siw: device registration error -23
[  973.617506][T24321] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  974.616607][T24330] loop0: detected capacity change from 0 to 512
[  974.903959][T24330] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  974.913383][T24330] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  974.961970][   T26] audit: type=1800 audit(1771449398.918:39): pid=24330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5479" name="file1" dev="loop0" ino=15 res=0 errno=0
[  975.176686][T14879] EXT4-fs (loop0): unmounting filesystem.
[  975.498601][T24352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5487'.
[  976.710397][T24364] siw: device registration error -23
[  977.998019][T24375] device syzkaller0 entered promiscuous mode
[  978.494457][T24386] loop7: detected capacity change from 0 to 512
[  979.814545][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  979.825733][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:3 Not tainted syzkaller #0
[  979.833324][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  979.843482][ T4273] Workqueue: hci2 hci_rx_work
[  979.848192][ T4273] Call Trace:
[  979.851480][ T4273]  <TASK>
[  979.854428][ T4273]  dump_stack_lvl+0x188/0x24e
[  979.859132][ T4273]  ? show_regs_print_info+0x12/0x12
[  979.864352][ T4273]  ? load_image+0x400/0x400
[  979.868887][ T4273]  sysfs_create_dir_ns+0x26a/0x290
[  979.874028][ T4273]  ? sysfs_warn_dup+0xa0/0xa0
[  979.878722][ T4273]  ? do_raw_spin_unlock+0x11d/0x230
[  979.883942][ T4273]  kobject_add_internal+0x61c/0xcc0
[  979.889160][ T4273]  kobject_add+0x160/0x230
[  979.893596][ T4273]  ? kobject_init+0x1d0/0x1d0
[  979.898300][ T4273]  ? klist_children_get+0x50/0x50
[  979.903345][ T4273]  ? get_device_parent+0x121/0x3f0
[  979.908477][ T4273]  device_add+0x483/0xfb0
[  979.912826][ T4273]  ? kmem_cache_free+0xf7/0x290
[  979.917703][ T4273]  hci_conn_add_sysfs+0xd1/0x1e0
[  979.922668][ T4273]  le_conn_complete_evt+0x105f/0x1670
[  979.928073][ T4273]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  979.934335][ T4273]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  979.939993][ T4273]  ? skb_pull_data+0xf7/0x200
[  979.944695][ T4273]  hci_le_enh_conn_complete_evt+0x185/0x460
[  979.950603][ T4273]  ? hci_le_remote_conn_param_req_evt+0xd10/0xd10
[  979.957042][ T4273]  ? hci_remote_host_features_evt+0x270/0x270
[  979.963146][ T4273]  hci_event_packet+0x7b6/0x1280
[  979.968121][ T4273]  ? bis_list+0x280/0x280
[  979.972477][ T4273]  ? kcov_remote_start+0x27/0x7e0
[  979.977516][ T4273]  ? hci_send_to_monitor+0x9c/0x4a0
[  979.982737][ T4273]  hci_rx_work+0x3eb/0xd40
[  979.987184][ T4273]  ? process_one_work+0x7b0/0x1160
[  979.992314][ T4273]  process_one_work+0x8a2/0x1160
[  979.997286][ T4273]  ? worker_detach_from_pool+0x240/0x240
[  980.002939][ T4273]  ? _raw_spin_lock_irq+0xb7/0xf0
[  980.007976][ T4273]  ? _raw_spin_lock_irqsave+0x100/0x100
[  980.013529][ T4273]  ? kthread_data+0x4b/0xc0
[  980.018053][ T4273]  worker_thread+0xaa2/0x1270
[  980.022777][ T4273]  kthread+0x29d/0x330
[  980.026856][ T4273]  ? worker_clr_flags+0x1a0/0x1a0
[  980.031895][ T4273]  ? kthread_blkcg+0xd0/0xd0
[  980.036495][ T4273]  ret_from_fork+0x1f/0x30
[  980.040940][ T4273]  </TASK>
[  980.124575][ T4273] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  980.138612][ T4273] Bluetooth: hci2: failed to register connection device
[  980.151097][T24385] loop6: detected capacity change from 0 to 256
[  980.182501][T24385] exfat: Deprecated parameter 'namecase'
[  980.217939][T24386] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  980.227532][T24386] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  980.250046][T24385] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  980.258376][   T26] audit: type=1800 audit(1771449404.218:40): pid=24383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5496" name="file1" dev="loop7" ino=15 res=0 errno=0
[  980.294787][T24396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5499'.
[  981.166761][T21338] EXT4-fs (loop7): unmounting filesystem.
[  981.545662][T24419] siw: device registration error -23
[  983.554947][T24438] loop6: detected capacity change from 0 to 512
[  983.642297][ T4273] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  983.989088][T24438] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  983.998135][T24438] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  984.019417][   T26] audit: type=1800 audit(1771449407.988:41): pid=24435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5512" name="file1" dev="loop6" ino=15 res=0 errno=0
[  984.282641][T24453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5516'.
[  984.304455][T15813] EXT4-fs (loop6): unmounting filesystem.
[  985.177260][T24469] siw: device registration error -23
[  986.661332][T24491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5529'.
[  987.035167][T24498] loop2: detected capacity change from 0 to 512
[  987.045380][T23155] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  987.496168][ T4273] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  987.773722][T23155] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping
[  987.815153][T23155] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  987.879282][T23155] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  987.948435][T23155] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  987.964429][T24498] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  987.973540][T24498] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  987.994461][   T26] audit: type=1800 audit(1771449411.968:42): pid=24494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5528" name="file1" dev="loop2" ino=15 res=0 errno=0
[  988.003258][T23155] usb 8-1: Product: syz
[  988.047347][T23155] usb 8-1: Manufacturer: syz
[  988.058452][T23155] usb 8-1: SerialNumber: syz
[  988.074883][T23155] usb 8-1: config 0 descriptor??
[  988.258334][T13316] EXT4-fs (loop2): unmounting filesystem.
[  988.294331][T23167] usb 8-1: USB disconnect, device number 2
[  988.760477][T24524] siw: device registration error -23
[  989.738185][ T4273] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  989.941186][T23155] libceph: connect (1)[c::]:6789 error -13
[  989.991614][T23155] libceph: mon0 (1)[c::]:6789 connect error
[  990.252128][T24547] ceph: No mds server is up or the cluster is laggy
[  990.252373][T24544] loop0: detected capacity change from 0 to 2048
[  990.452478][T24544] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  990.619529][T24544] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  991.113381][T24544] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  991.302421][T24544] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  991.468874][T24564] loop6: detected capacity change from 0 to 512
[  991.806286][T24564] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  991.815781][T24564] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  991.857527][   T26] audit: type=1800 audit(1771449415.818:43): pid=24564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5545" name="file1" dev="loop6" ino=15 res=0 errno=0
[  992.084551][T15813] EXT4-fs (loop6): unmounting filesystem.
[  992.141966][T23446] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  992.215321][T24570] device syzkaller0 entered promiscuous mode
[  992.321950][T23446] usb 8-1: Using ep0 maxpacket: 8
[  992.329193][T23446] usb 8-1: config 0 interface 0 altsetting 35 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  992.367422][T23446] usb 8-1: config 0 interface 0 has no altsetting 0
[  992.382358][T23446] usb 8-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  992.402566][T23446] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  992.433429][T23446] usb 8-1: config 0 descriptor??
[  992.669359][T24576] device syzkaller1 entered promiscuous mode
[  992.784505][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  992.790911][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  992.850661][T23446] samsung 0003:0419:0001.000B: hidraw0: USB HID v10.00 Device [HID 0419:0001] on usb-dummy_hcd.7-1/input0
[  993.050076][T23446] usb 8-1: USB disconnect, device number 3
[  993.138786][T24582] fido_id[24582]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  993.363333][T24589] siw: device registration error -23
[  993.497565][T24592] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  993.517946][T24592] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  993.526993][T24592] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  993.535506][T24592] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  994.812589][T23155] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  995.040928][T24609] siw: device registration error -23
[  995.048484][T24609] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  995.161967][T23155] usb 7-1: Using ep0 maxpacket: 32
[  995.179911][T23155] usb 7-1: config 0 has an invalid interface number: 188 but max is 0
[  995.236636][T23155] usb 7-1: config 0 has no interface number 0
[  995.281171][T23155] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  995.406405][T23155] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  995.552816][T23155] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.701098][  T952] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  995.718509][T23155] usb 7-1: Product: syz
[  995.742107][T23155] usb 7-1: Manufacturer: syz
[  995.757284][T23155] usb 7-1: SerialNumber: syz
[  995.788999][T23155] usb 7-1: config 0 descriptor??
[  995.803697][T24601] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  995.812646][T24595] atomic_op ffff88805a3fb998 conn xmit_atomic 0000000000000000
[  995.956651][  T952] usb 2-1: Using ep0 maxpacket: 32
[  995.964250][  T952] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  996.023946][  T952] usb 2-1: config 0 has no interface number 0
[  996.051405][  T952] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  996.085341][T24601] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  996.100702][  T952] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  996.131600][  T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.161905][  T952] usb 2-1: Product: syz
[  996.166117][  T952] usb 2-1: Manufacturer: syz
[  996.191859][  T952] usb 2-1: SerialNumber: syz
[  996.216171][  T952] usb 2-1: config 0 descriptor??
[  996.222431][T24605] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  996.326944][T24613] zonefs (nullb0) ERROR: Not a zoned block device
[  996.449938][T24605] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  996.549375][T24615] device syzkaller0 entered promiscuous mode
[  997.762922][T23155] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  997.804244][T23155] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  997.841323][T23155] asix: probe of 7-1:0.188 failed with error -71
[  997.880064][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  997.899271][T23155] usb 7-1: USB disconnect, device number 27
[  997.922160][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  997.933586][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  997.957537][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  997.966269][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  997.977597][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  998.115610][T24621] wlan1 speed is unknown, defaulting to 1000
[  998.518042][  T952] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  998.559547][  T952] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  998.581682][  T952] asix: probe of 2-1:0.188 failed with error -71
[  998.636891][  T952] usb 2-1: USB disconnect, device number 43
[  998.708937][   T75] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  999.037603][T24631] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  999.049910][   T75] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  999.101558][T24631] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  999.117236][T24631] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  999.131551][T24631] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  999.366399][T24621] chnl_net:caif_netlink_parms(): no params data found
[  999.445975][T24648] siw: device registration error -23
[  999.510579][T24649] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[ 1000.100260][ T4273] Bluetooth: hci4: command 0x0409 tx timeout
[ 1000.347887][   T75] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.573407][T24654] device syzkaller0 entered promiscuous mode
[ 1001.530466][   T75] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1002.148581][ T4275] Bluetooth: hci4: command 0x041b tx timeout
[ 1004.226847][ T4275] Bluetooth: hci4: command 0x040f tx timeout
[ 1006.302439][ T4275] Bluetooth: hci4: command 0x0419 tx timeout
[ 1006.368379][T24621] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1006.384830][T24621] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1006.400490][T24621] device bridge_slave_0 entered promiscuous mode
[ 1006.460333][T24621] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1006.531730][T24621] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.601307][T24621] device bridge_slave_1 entered promiscuous mode
[ 1006.771039][T24621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1006.810986][T24621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1006.905782][T24621] team0: Port device team_slave_0 added
[ 1006.931597][T24621] team0: Port device team_slave_1 added
[ 1006.938639][   T75] tipc: Disabling bearer <eth:gre0>
[ 1006.944715][   T75] tipc: Left network mode
[ 1006.972686][T21283] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1006.983026][T24621] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1006.990022][T24621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1007.017073][T24621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1007.027942][  T952] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 1007.038439][T24621] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1007.045874][T24621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1007.076714][T24621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1007.161979][T21283] usb 1-1: Using ep0 maxpacket: 8
[ 1007.169150][T21283] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1007.178128][T21283] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1007.188802][T21283] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1007.199750][T21283] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1007.279946][T24621] device hsr_slave_0 entered promiscuous mode
[ 1007.293352][  T952] usb 7-1: Using ep0 maxpacket: 16
[ 1007.301189][T24621] device hsr_slave_1 entered promiscuous mode
[ 1007.306561][T21283] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1007.323548][  T952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1007.344792][  T952] usb 7-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00
[ 1007.354140][T21283] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1007.354531][T24621] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1007.364307][  T952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1007.387101][T21283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1007.400531][T24621] Cannot create hsr debugfs directory
[ 1007.439492][  T952] usb 7-1: config 0 descriptor??
[ 1007.658648][T21283] usb 1-1: GET_CAPABILITIES returned 0
[ 1007.664664][T21283] usbtmc 1-1:16.0: can't read capabilities
[ 1007.888056][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1007.926404][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1007.947879][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1007.971954][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1007.980191][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1008.031984][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1008.039457][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1008.116589][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1008.164849][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1008.180728][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1008.282753][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1008.316585][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1008.368535][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1008.486284][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1008.703807][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1008.851988][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1008.859457][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1008.971877][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.019643][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.046369][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.073957][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.089922][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.108356][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.132762][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.159082][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.179184][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.204350][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.229269][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.245773][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.253714][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.262154][ T8035] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1009.298324][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.313203][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.320767][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.338166][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.360538][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.378316][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.398549][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.408667][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.417738][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.426403][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.434057][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.441562][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.449087][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.458583][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.461909][ T8035] usb 2-1: Using ep0 maxpacket: 8
[ 1009.470329][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.478986][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.483597][ T8035] usb 2-1: config 0 interface 0 altsetting 35 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1009.486846][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.505837][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.514797][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.515967][ T8035] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1009.528071][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.536809][ T8035] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[ 1009.537711][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.555087][ T8035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.560595][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.570944][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.579673][ T8035] usb 2-1: config 0 descriptor??
[ 1009.585575][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.595318][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.602932][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.610340][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.619073][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.626590][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.634078][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.641491][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.649083][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.656586][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.664228][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.671657][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.679238][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.686754][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.694261][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.701682][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.712528][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.720692][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.728277][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.735827][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.743307][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.750746][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.758247][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.765718][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.773210][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.780628][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.788098][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.795597][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.803078][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.810492][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.818011][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.826618][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.834123][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.841526][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.849018][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.856508][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.863990][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.871396][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.878904][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.886454][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.893948][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.901539][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.909231][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.916734][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x2
[ 1009.925061][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.932565][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.939992][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.947500][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.955045][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.962528][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.969943][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.977431][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.984895][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1009.992352][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.000949][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.001091][ T8035] usbhid 2-1:0.0: can't add hid device: -71
[ 1010.008466][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.008497][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.008521][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.008545][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.008575][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.008598][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.008622][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.008645][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.008667][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.026532][ T8035] usbhid: probe of 2-1:0.0 failed with error -71
[ 1010.035969][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.048904][ T8035] usb 2-1: USB disconnect, device number 44
[ 1010.052503][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.114758][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.124433][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.132852][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.140267][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.147924][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.155425][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.162952][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.170445][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.177957][  T952] hid-generic 0003:0B05:1A30.000C: unknown main item tag 0x0
[ 1010.186605][  T952] hid-generic 0003:0B05:1A30.000C: hidraw0: USB HID v0.09 Device [HID 0b05:1a30] on usb-dummy_hcd.6-1/input0
[ 1010.202264][  T952] usb 7-1: USB disconnect, device number 28
[ 1010.213738][T21278] usb 1-1: USB disconnect, device number 34
[ 1010.368270][T24784] fido_id[24784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1010.387993][T24756] device syzkaller0 entered promiscuous mode
[ 1015.825944][T24854] loop0: detected capacity change from 0 to 2048
[ 1015.970155][T24854] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1015.980984][T24854] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1016.055429][T24854] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[ 1016.070309][T24854] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1016.119102][ T4275] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[ 1016.253353][T24847] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1016.269410][T24847] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 1016.288785][T24847] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1016.306063][T24847] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 1016.780198][T24863] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[ 1016.864721][T24866] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5615'.
[ 1017.868470][T24872] Can't find ip_set type hash:net,po
[ 1017.908780][ T4275] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[ 1018.789869][  T952] wlan1 speed is unknown, defaulting to 1000
[ 1018.881602][  T952] ==================================================================
[ 1018.891464][  T952] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450
[ 1018.898670][  T952] Read of size 4 at addr ffff888061f0c0e0 by task kworker/0:2/952
[ 1018.907093][  T952] 
[ 1018.909495][  T952] CPU: 0 PID: 952 Comm: kworker/0:2 Not tainted syzkaller #0
[ 1018.917161][  T952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1018.927222][  T952] Workqueue: infiniband ib_cache_event_task
[ 1018.933128][  T952] Call Trace:
[ 1018.936408][  T952]  <TASK>
[ 1018.939343][  T952]  dump_stack_lvl+0x188/0x24e
[ 1018.944024][  T952]  ? __lock_acquire+0x7d10/0x7d10
[ 1018.949067][  T952]  ? show_regs_print_info+0x12/0x12
[ 1018.954276][  T952]  ? load_image+0x400/0x400
[ 1018.958794][  T952]  ? __virt_addr_valid+0x465/0x540
[ 1018.963962][  T952]  ? siw_query_port+0x358/0x450
[ 1018.968901][  T952]  print_report+0xa8/0x210
[ 1018.973334][  T952]  kasan_report+0x10b/0x140
[ 1018.977914][  T952]  ? siw_query_port+0x358/0x450
[ 1018.982828][  T952]  siw_query_port+0x358/0x450
[ 1018.987517][  T952]  ib_cache_update+0x1bf/0x9c0
[ 1018.992300][  T952]  ? ib_cache_setup_one+0x5d0/0x5d0
[ 1018.997513][  T952]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1019.003496][  T952]  ? read_lock_is_recursive+0x10/0x10
[ 1019.008864][  T952]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1019.014765][  T952]  ? _raw_spin_unlock+0x40/0x40
[ 1019.019648][  T952]  ib_cache_event_task+0xd4/0x1c0
[ 1019.024792][  T952]  ? process_one_work+0x7b0/0x1160
[ 1019.029910][  T952]  process_one_work+0x8a2/0x1160
[ 1019.034864][  T952]  ? worker_detach_from_pool+0x240/0x240
[ 1019.040526][  T952]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1019.045567][  T952]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1019.051115][  T952]  ? kthread_data+0x4b/0xc0
[ 1019.055645][  T952]  worker_thread+0xaa2/0x1270
[ 1019.060376][  T952]  kthread+0x29d/0x330
[ 1019.064501][  T952]  ? worker_clr_flags+0x1a0/0x1a0
[ 1019.069536][  T952]  ? kthread_blkcg+0xd0/0xd0
[ 1019.074118][  T952]  ret_from_fork+0x1f/0x30
[ 1019.078553][  T952]  </TASK>
[ 1019.081564][  T952] 
[ 1019.083875][  T952] The buggy address belongs to the physical page:
[ 1019.090269][  T952] page:ffffea000187c300 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61f0c
[ 1019.100406][  T952] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1019.107518][  T952] raw: 00fff00000000000 ffffea000187a208 ffff8880b8e413f0 0000000000000000
[ 1019.116090][  T952] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 1019.124753][  T952] page dumped because: kasan: bad access detected
[ 1019.131167][  T952] page_owner tracks the page as freed
[ 1019.136527][  T952] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x546dc0(GFP_USER|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_ZERO|__GFP_ACCOUNT), pid 13316, tgid 13316 (syz-executor), ts 425210841000, free_ts 1018833536525
[ 1019.158937][  T952]  post_alloc_hook+0x173/0x1a0
[ 1019.163720][  T952]  get_page_from_freelist+0x1a1e/0x1ab0
[ 1019.169282][  T952]  __alloc_pages+0x1ec/0x4f0
[ 1019.173881][  T952]  __kmalloc_large_node+0x8c/0x1e0
[ 1019.179026][  T952]  __kmalloc_node+0x10e/0x240
[ 1019.183768][  T952]  kvmalloc_node+0x6c/0x180
[ 1019.188278][  T952]  alloc_netdev_mqs+0x84/0xf00
[ 1019.193037][  T952]  ieee80211_if_add+0xc07/0x1590
[ 1019.197977][  T952]  ieee80211_register_hw+0x2e34/0x39f0
[ 1019.203430][  T952]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[ 1019.209250][  T952]  hwsim_new_radio_nl+0xafa/0xce0
[ 1019.214282][  T952]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1019.219841][  T952]  genl_rcv_msg+0x604/0x790
[ 1019.224358][  T952]  netlink_rcv_skb+0x1fb/0x450
[ 1019.229132][  T952]  genl_rcv+0x24/0x40
[ 1019.233135][  T952]  netlink_unicast+0x74d/0x8d0
[ 1019.237910][  T952] page last free stack trace:
[ 1019.242678][  T952]  free_unref_page_prepare+0x8b4/0x9a0
[ 1019.248151][  T952]  free_unref_page+0x2e/0x3f0
[ 1019.252823][  T952]  free_large_kmalloc+0xfd/0x190
[ 1019.257754][  T952]  device_release+0x92/0x1c0
[ 1019.262425][  T952]  kobject_put+0x21d/0x460
[ 1019.266827][  T952]  netdev_run_todo+0xcb3/0xdb0
[ 1019.271600][  T952]  ieee80211_unregister_hw+0xfc/0x290
[ 1019.276992][  T952]  mac80211_hwsim_del_radio+0x285/0x480
[ 1019.282542][  T952]  hwsim_exit_net+0x589/0x650
[ 1019.287208][  T952]  cleanup_net+0x706/0xba0
[ 1019.291616][  T952]  process_one_work+0x8a2/0x1160
[ 1019.296550][  T952]  worker_thread+0xaa2/0x1270
[ 1019.301219][  T952]  kthread+0x29d/0x330
[ 1019.305277][  T952]  ret_from_fork+0x1f/0x30
[ 1019.309685][  T952] 
[ 1019.311996][  T952] Memory state around the buggy address:
[ 1019.317633][  T952]  ffff888061f0bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1019.325802][  T952]  ffff888061f0c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1019.333858][  T952] >ffff888061f0c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1019.341944][  T952]                                                        ^
[ 1019.349184][  T952]  ffff888061f0c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1019.357349][  T952]  ffff888061f0c180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1019.365408][  T952] ==================================================================
[ 1019.865916][  T952] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1019.873271][  T952] CPU: 0 PID: 952 Comm: kworker/0:2 Not tainted syzkaller #0
[ 1019.880688][  T952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1019.890860][  T952] Workqueue: infiniband ib_cache_event_task
[ 1019.896793][  T952] Call Trace:
[ 1019.900086][  T952]  <TASK>
[ 1019.903046][  T952]  dump_stack_lvl+0x188/0x24e
[ 1019.907745][  T952]  ? memcpy+0x3c/0x60
[ 1019.911741][  T952]  ? show_regs_print_info+0x12/0x12
[ 1019.916970][  T952]  ? load_image+0x400/0x400
[ 1019.921507][  T952]  panic+0x2e5/0x730
[ 1019.925454][  T952]  ? bpf_jit_dump+0xd0/0xd0
[ 1019.929988][  T952]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 1019.935992][  T952]  ? _raw_spin_unlock+0x40/0x40
[ 1019.940873][  T952]  ? print_memory_metadata+0x314/0x400
[ 1019.946351][  T952]  check_panic_on_warn+0x80/0xa0
[ 1019.951311][  T952]  ? siw_query_port+0x358/0x450
[ 1019.956196][  T952]  end_report+0x66/0x110
[ 1019.960485][  T952]  kasan_report+0x118/0x140
[ 1019.965094][  T952]  ? siw_query_port+0x358/0x450
[ 1019.970133][  T952]  siw_query_port+0x358/0x450
[ 1019.974822][  T952]  ib_cache_update+0x1bf/0x9c0
[ 1019.980200][  T952]  ? ib_cache_setup_one+0x5d0/0x5d0
[ 1019.985561][  T952]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1019.991711][  T952]  ? read_lock_is_recursive+0x10/0x10
[ 1019.997319][  T952]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1020.003234][  T952]  ? _raw_spin_unlock+0x40/0x40
[ 1020.008105][  T952]  ib_cache_event_task+0xd4/0x1c0
[ 1020.013154][  T952]  ? process_one_work+0x7b0/0x1160
[ 1020.018283][  T952]  process_one_work+0x8a2/0x1160
[ 1020.023238][  T952]  ? worker_detach_from_pool+0x240/0x240
[ 1020.028890][  T952]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1020.033931][  T952]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1020.039509][  T952]  ? kthread_data+0x4b/0xc0
[ 1020.044053][  T952]  worker_thread+0xaa2/0x1270
[ 1020.048757][  T952]  kthread+0x29d/0x330
[ 1020.052838][  T952]  ? worker_clr_flags+0x1a0/0x1a0
[ 1020.057894][  T952]  ? kthread_blkcg+0xd0/0xd0
[ 1020.062504][  T952]  ret_from_fork+0x1f/0x30
[ 1020.066938][  T952]  </TASK>
[ 1020.070379][  T952] Kernel Offset: disabled
[ 1020.074719][  T952] Rebooting in 86400 seconds..