last executing test programs:

1m5.976628747s ago: executing program 2 (id=535):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000"])
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000080)=0x4, 0x4)
setsockopt$inet_int(r4, 0x0, 0x33, 0x0, 0x0)

1m3.69956342s ago: executing program 2 (id=529):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getpid()
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x100)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$udf(&(0x7f0000000a00), &(0x7f0000000440)='./file1\x00', 0x280c2c8, &(0x7f0000000000)=ANY=[], 0x1, 0x4b7, &(0x7f0000000a40)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000000)='./file\x00', 0x0)
mkdir(&(0x7f0000000100)='./file/file0\x00', 0x0)
chdir(&(0x7f0000000080)='./file/file0/..//file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x800}}, 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x2c00)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
creat(&(0x7f0000000080)='./file0\x00', 0x0)

1m1.762043634s ago: executing program 2 (id=532):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDENABIO(r0, 0x4b36)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000007000000050000000000000700000000000000000000000402000000000000000000000a01000000000000000100000d000000000000000003000000000000000061"], 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
write$uinput_user_dev(r4, 0x0, 0x0)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000100)={0x3, 0x1, 0x3, 0x6, 0x9})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0)
write$binfmt_misc(r5, &(0x7f0000001280), 0x6)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c)

58.808175814s ago: executing program 2 (id=536):
epoll_create1(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
gettid()
timer_settime(0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r5 = syz_pidfd_open(r2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x4, 0x4)
setns(r5, 0x10000000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000180))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0)
recvmmsg(r6, &(0x7f0000000100), 0x0, 0x0, 0x0)

55.333294958s ago: executing program 2 (id=539):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x360044, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6)
write$cgroup_subtree(r5, &(0x7f00000061c0)=ANY=[@ANYBLOB='+pids'], 0x6)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x7}, @void, @void}}}, 0x1c}}, 0x0)
syz_clone(0x2000e000, 0x0, 0x0, 0x0, 0x0, 0x0)

42.239005496s ago: executing program 0 (id=551):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r6, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0)

40.358234705s ago: executing program 0 (id=554):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2d2, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x810, &(0x7f0000000080)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '&.-'}}]}, 0x1, 0x52f, &(0x7f0000000d00)="$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")
syz_open_procfs(0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x800048, &(0x7f00000001c0)=ANY=[], 0x1, 0x4b1, &(0x7f0000000740)="$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")
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
fsopen(0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00'], 0x0)

38.40733226s ago: executing program 0 (id=564):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000580), 0x1, 0x24f, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000040), 0x12)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c00000012009702000000000000000007"], 0x2c}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x0, 0x80, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x8}})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x107})
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000015000100000000000000001f01"], 0x1c}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00'})

36.196378917s ago: executing program 0 (id=568):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x800714, &(0x7f0000000480)={[{@orlov}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@debug}, {@grpquota}, {@errors_continue}, {@test_dummy_encryption}, {@auto_da_alloc}, {@nodiscard}]}, 0xfe, 0x449, &(0x7f0000000840)="$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")
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000003011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)

31.711999747s ago: executing program 0 (id=562):
r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r2, 0x6, 0x19, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
move_pages(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_io_uring_setup(0x213d, &(0x7f0000000200), 0x0, 0x0)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0x4161, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0)
syz_emit_ethernet(0xba, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x24, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@generic={0x0, 0xa, "ee0dd9de36ed4bcc"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xb, 0x0, [@broadcast, @broadcast]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080))
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r5, 0x0)
socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(r0, &(0x7f0000000100)='status\x00')

17.709721302s ago: executing program 4 (id=582):
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000950000000000000018cd77143251"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
fsopen(&(0x7f0000000340)='zonefs\x00', 0x0)
syz_usbip_server_init(0x5)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000140)=""/197, &(0x7f0000000000)=0xc5)

17.707704562s ago: executing program 3 (id=590):
setresgid(0xee01, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x3, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x4, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x6, 0x8, 0x2, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x1, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x9, 0x5, 0xcff, 0x0, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x7, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x1fffc000, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x7, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0xa, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x9, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0x1, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x100, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x9, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x4, 0x3, 0x2, 0x80000001, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x6, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x0, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x4, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x5, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x9, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x1, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x6, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0x5, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0xffffff12, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x9, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]})
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80440c1)
r5 = syz_pidfd_open(r3, 0x0)
process_madvise(r5, 0x0, 0x0, 0x19, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x5142000, 0x0, 0x11, 0x0, 0x0, 0x0)

15.628670008s ago: executing program 3 (id=584):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
socket$l2tp6(0xa, 0x2, 0x73)
socket$inet6(0xa, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000380)="650f01ca0f2042baf80c66b87cacac8166efbafc0c66ed66b80500000066b91e32c3710f01c10fae9f010036ff1c260f3802e866b8b50000000f23d00f21f86635100000050f23f8baf80c66b868321d8c66efbafc0cb80000ef66b80500000066b9008000000f01c1", 0x69}], 0x1, 0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2)
fsopen(&(0x7f0000000080)='overlay\x00', 0x1)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/3\x00')
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x2, 0x6, 0x303, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x4004000)
preadv(r6, &(0x7f0000000840)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000100)=@overlay={0x4, 0x9, 0x4, 0x10000, 0x5, {0x0, 0xea60}, {0x1, 0x9, 0x5, 0x8, 0x3, 0xc, "e51f1a03"}, 0x940, 0x3, {}, 0x0, 0x0, <r7=>0xffffffffffffffff})
close_range(r0, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x2000, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r8 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_UNIMAP(r8, 0x4b41, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r7, 0xf505, 0x0)

15.387812038s ago: executing program 1 (id=585):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
open(&(0x7f0000000080)='./bus\x00', 0x50d942, 0xe8)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0)
sendmsg$key(r6, 0x0, 0x40044)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000780)=0x3)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x241a01, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)

14.244539045s ago: executing program 1 (id=586):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10144d4, &(0x7f0000000280)={[{@nostrict}, {@mode={'mode', 0x3d, 0x6}}, {@fileset={'fileset', 0x3d, 0x7e}}, {@gid_forget}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@gid_forget}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)

13.755228936s ago: executing program 4 (id=587):
r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6)
r1 = getpid()
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x9, 0x100, 0x79015688, 0x10c, r3, 0x2, '\x00', 0x0, r5, 0x2, 0x2, 0x0, 0x9, @void, @value, @void, @value}, 0x48)
recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)=""/245, 0xf5}], 0x1}, 0x0)
sendmsg$inet(r6, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f00000001c0)={0x0, "be3ff4f2d3b71ad35cbc5ad31906b40f70ea0177f7f3f12a503b7e8e589e845a", 0x5})
socket$nl_route(0x10, 0x3, 0x0)

12.964319853s ago: executing program 1 (id=588):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2(0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d0000001bae0000000200000000000000"], &(0x7f0000000840)=""/253, 0x3a, 0xfd, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
accept$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000440)=0x1c)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x210100, 0x91)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x7, {0x7, 0x0, "a05e19f8a1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io$uac1(r4, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x8, 0x75, {0x75, 0x0, "eeed2d77287b0030c873e68059b7a6b22f8d921b65ce3408e63e368a890601911e8795be368f0e7da1e2b5c2a32adccba5986fd7aa07564056bb051ec545859d9efa99db12f56ccbcb8d7ef70399e8c5f4c6c0c60d178d72cd6b0f817626090e1418cecb4a7e63e4ce459e5b66fbb653124dcf"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0xc, 0x67, "f4476dad3ef742e6865bf22c538b8d7f8b944442300c6dcecfa372e1386be01ad7daff4fae8ebfb026c17f19d079812609796306f38052f35ca155810f5bc2163a3ccb84ad0432eb2960a5b6435adebb773db81e2c6543c8c1d88f43252765676d3f81476df002"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000340)={0x20, 0x82, 0x2, "80eb"}, &(0x7f0000000380)={0x20, 0x83, 0x1, 'z'}, 0x0, &(0x7f0000000400)={0x20, 0x85, 0x3, "06cf85"}})

12.676554528s ago: executing program 4 (id=589):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x101}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}]}, 0xfe, 0x451, &(0x7f00000016c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x4, 0x241, &(0x7f00000002c0)="$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")
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0xa, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '*\x00'}]}, 0x4c}}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x428}}}, 0x7)
open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$UHID_INPUT(r5, &(0x7f0000001080)={0xd, {"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", 0x1000}}, 0x1006)
r6 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86b", 0xf)
accept4$alg(r6, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)

10.431947037s ago: executing program 3 (id=591):
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, 0x0}, 0xff03}], 0x2, 0x8000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes256, 0x0, @desc3})
socket$inet6(0xa, 0x2, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

10.429541318s ago: executing program 4 (id=599):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x10)
unshare(0x64000600)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

7.778646852s ago: executing program 3 (id=592):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x3, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x2}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000fff000/0x1000)=nil)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ac38f5bd6e0630e369c7b35d21ff1f4d7ed79c31e2b0f1da"}, 0x3c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000180)={@private, @multicast2, 0x0, "941621a61c5815f4678d8fd4a8e14b0447113c694d1fd55708018620fd419884"}, 0x3c)

7.775360763s ago: executing program 1 (id=601):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(0x0, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x10, 0x0, 0x7aa003343bfbbf81)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000040), 0xc)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r5, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getpeername(r5, 0x0, &(0x7f0000001ac0))
ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0)
connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)

7.768176083s ago: executing program 4 (id=602):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000"])
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000080)=0x4, 0x4)
setsockopt$inet_int(r4, 0x0, 0x33, 0x0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0x12, &(0x7f00000000c0), 0x4)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0)

2.461858632s ago: executing program 2 (id=548):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
syz_usb_connect$cdc_ecm(0x6, 0x4d, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r6, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
close(r5)

2.460934793s ago: executing program 1 (id=604):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0xf, 0x3, 0x2)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
r2 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xfe3a, 0x0, 0x3, 0x20000, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r5 = socket$alg(0x26, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
accept$alg(r5, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, 0x0, 0x0}, 0x20)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0})
io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0)

2.450239673s ago: executing program 3 (id=605):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f00000013c0)={0x198, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x13}}}}, [@key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "dcfadafeb21b12eda82f69fa6f"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3a9f15d3e0855c1eb00ece6fd8"}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "4df69a"}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "978a166a4de4"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e311f7ab50"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4172cbf1e6"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}], @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "715b7a842d45c53eb6efc84641"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "ae3686fed84842c42ed5cd6fedeca371"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "475b1c149da706faf6190caac9"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cdd841f16419f8dd9e1242a382"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d4ff36306f37379f8fe56284b5"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "7ab9ef"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]]}, 0x198}, 0x1, 0x0, 0x0, 0x4000000}, 0x10040041)
r5 = socket$kcm(0x10, 0x2, 0x4)
close(r5)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x4, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190002000200060007000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00010000000000002c0012800b00010062726964676500001c0002800600170000000000050019"], 0x4c}}, 0x0)

2.449265233s ago: executing program 4 (id=606):
openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000064000000060a010400000000000000000100000008000b40000000003c000480240001800b0001007470726f787900001400028008000140000000020800034000000016140001800b0001006578746864720000040002800900010073797a30"], 0xd8}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="041817aaaaaaaaaa10ea"], 0x1a)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe3006b", @ANYRES32=r3, @ANYRESHEX=r1], 0x44}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8], 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000200000071000040"])
ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000040))
getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r10], 0x4c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0)

2.71799ms ago: executing program 0 (id=578):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, 0x0, 0x0)
listen(r4, 0x9)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r5, &(0x7f0000002c00)=[{{&(0x7f0000000240)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000480)}}], 0x1, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0)
mount(&(0x7f0000000180)=@filename='\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080), 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

1.0269ms ago: executing program 1 (id=608):
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = fsopen(&(0x7f0000000340)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#/::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<+\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[\a\x00\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce5<\x0e\xd25\fo\x8f^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<L\x19K\xbf\xf7\x9c\xe7 \x12+4.\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x9e\x92\x8a\xf7\xdb\xe7f\xdeo\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\x82\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6', 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x71d99600f910ca29}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x0)
connect$netrom(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x3, {0xa, 0x0, 0x0, @remote}}}, 0x32)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)

0s ago: executing program 3 (id=609):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2d2, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x810, &(0x7f0000000080)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '&.-'}}]}, 0x1, 0x52f, &(0x7f0000000d00)="$eJzs3e9rI2kdAPDvpE2vu9uzORVZD7w7vJPdQzdpr95dFbk9QdQ3B+r5vtY2LaVpU5r03JZFu/gHCCIq6Pt9I/gHCMuC/4AIgr4XFUVkV1/KjiQz0f5I2tCmmzX9fGCa55lnZr7PMzST+fHwTACX1isR8W5EjEXE6xExnc8v5NNCK7OfLff40d2l1pREmr7/jySSfF5nW638eERcy1aJyYj4xlcivp0cj9vY3VtfrNWq23m+0tzYqjR2926tbSyuVlerm3Nzs2/Nvz3/5vxMmssW3D9bO0sR8c6X/vLjH9z/8jsPPvOdPy787eZ3W9X6wseyekfE0tm2fLJs28X2vuho7aPtiwg2JK32FMeGXQsAAPrROsf/cER8sn3+Px1j7bM5AAAAYJSkt6fi30lECgAAAIysQkRMRVIo530BpqJQKJezPrwfjauFWr3R/PRKfWdzuVUWUYpiYWWtVp3J+wqXopi08rN5H9tO/o0j+bmIeCEifjR9pZ0vL9Vry8O++QEAAACXxLWXD1///2u60E4DAAAAI6bUMwMAAACMCpf8AAAAMPpc/wMAAMBI+9p777WmtPMe7+UPdnfW6x/cWq421ssbO0vlpfr2Vnm1Xl9tj9m3cdr2avX61mdjc+dOpVltNCuN3b2FjfrOZnNh7dArsAEAAICn6IWXH/4hiYj9z19pT5GPAwhwyJ+HXQFgkMaGXQFgaMaHXQFgaIqnLuEIAaMuOaX8eOed7F5h/OZi6gMAAAzejY8ff/4/kZedfm8A+H+mrw8AXD6e7sHlVTxrD8Drg64JMCwfyj6e61Xec/COHs//f34gnd1jSNMzVw4AABiIqfaUFMr5efpUFArlcsTz7dcCFJOVtVp1Jr8++P108blWfra9ZnJqn2EAAAAAAAAAAAAAAAAAAAAAAAAAIJOmSaQAAADASIso/DVpj+YfcWP6tanDdweOvPXrZ+//5M5is7k9GzHx1eytXhMR0fxpPv+N1CsBAAAA4BmQXafnn7PDrg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bxo7tLnelpxv37FyOiFPF4Io7EH4/J9udkFCPi6j+TGD+wXhIRYwOIv38vIq53a38ST9I0LeW16Bb/ygXHL7V3Tff4hYi4NoD4cJk9bB1/3u32/SvEK+3P7t+/8Xw6r/8e/7rE7xz/xnocf54/ku/lxd/9stIz/r2IF8e7H3868ZMs/qEQrcyrfbbxW9/c2+tacGCT3eIfjFVpbmxVGrt7t9Y2Flerq9XNubnZt+bfnn9zfqayslar5n+7hvnhJ3715KT2X+0Rv3S4/cf2/2v9NX8/4s6jj2TpYrf4N1/t/vt7vUf8Qv7b96k83Sq/0UnvZ+mDXvrFb186qf3LPdo/eUr7b/bX/s+9/vXv/6lrybG9AQA8DY3dvfXFWq26fUJiso9lLjxx+9Cc20Ovz6AT8WxUY1iJ9HvZ/+P5tnPO1Y8l0vOsPh4DqMbEse/pWJyy1v1eRUn7WiSiz39IAABgxPzvpP+kJ0gAAAAAAAAAAAAAAAAAAADARepjELIHv47OkGP3OkWTEdH3GGZHY+4Pp6kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6TwAAAP//Sl3N1A==")
syz_open_procfs(0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x800048, &(0x7f00000001c0)=ANY=[], 0x1, 0x4b1, &(0x7f0000000740)="$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")
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
fsopen(0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00'], 0x0)

kernel console output (not intermixed with test programs):

exists on: batadv_slave_1
[  327.671296][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.691390][ T5473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.761861][ T5718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.340'.
[  327.815672][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  327.837448][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  327.840779][   T26] audit: type=1326 audit(1729057741.262:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a97b7dff9 code=0x7ffc0000
[  327.895756][ T5473] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.930817][ T5473] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.932921][   T26] audit: type=1326 audit(1729057741.262:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a97b7dff9 code=0x7ffc0000
[  327.950190][ T5473] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.015216][   T26] audit: type=1326 audit(1729057741.262:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f6a97b7dff9 code=0x7ffc0000
[  328.032315][ T5473] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.059408][ T5718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.340'.
[  328.104114][ T3682] usb 2-1: USB disconnect, device number 8
[  328.117204][ T3686] usb 3-1: 0:2 : does not exist
[  328.131267][ T3686] usb 3-1: unit 5 not found!
[  328.168783][   T26] audit: type=1326 audit(1729057741.262:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a97b7dff9 code=0x7ffc0000
[  328.231182][ T3686] usb 3-1: USB disconnect, device number 3
[  328.273656][ T4807] udevd[4807]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  328.287982][   T26] audit: type=1326 audit(1729057741.262:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a97b7dff9 code=0x7ffc0000
[  328.323802][ T5327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.350984][ T5327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.385245][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  328.407875][   T26] audit: type=1326 audit(1729057741.262:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a97b7c990 code=0x7ffc0000
[  328.430995][ T5327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.457532][ T5327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.476370][   T26] audit: type=1326 audit(1729057741.302:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6a97b7f827 code=0x7ffc0000
[  328.486430][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  328.557298][   T26] audit: type=1326 audit(1729057741.302:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a97b7dff9 code=0x7ffc0000
[  328.650987][ T5757] loop3: detected capacity change from 0 to 16
[  328.690186][ T5757] erofs: (device loop3): mounted with root inode @ nid 36.
[  328.986612][ T5762] netlink: 36 bytes leftover after parsing attributes in process `syz.1.352'.
[  329.095221][ T5766] overlayfs: './file1' not a directory
[  329.205368][ T5767] overlayfs: failed to resolve './file1': -2
[  329.763203][ T5773] loop2: detected capacity change from 0 to 1024
[  329.935996][ T5776] loop3: detected capacity change from 0 to 512
[  330.032603][   T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  330.061896][ T5776] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.343: casefold flag without casefold feature
[  330.093819][ T5776] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.343: couldn't read orphan inode 15 (err -117)
[  330.135189][ T5776] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  330.538641][ T4748] EXT4-fs (loop4): unmounting filesystem.
[  330.642701][   T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.736315][   T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  331.395736][ T5785] hfsplus: xattr searching failed
[  331.552770][   T14] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  331.561855][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  331.616577][   T14] usb 2-1: SerialNumber: syz
[  331.779074][ T5776] 9pnet_fd: p9_fd_create_unix (5776): problem connecting socket: ./file0: -111
[  331.873904][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  331.931589][ T5768] netlink: 32 bytes leftover after parsing attributes in process `syz.1.352'.
[  331.944896][ T5768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.352'.
[  332.045578][   T14] usb 2-1: 0:2 : does not exist
[  332.068056][   T14] usb 2-1: unit 5 not found!
[  332.142765][ T3645] Bluetooth: hci3: command 0x0406 tx timeout
[  332.159922][   T14] usb 2-1: USB disconnect, device number 9
[  333.110974][ T5812] loop3: detected capacity change from 0 to 512
[  333.149842][ T5812] EXT4-fs (loop3): unable to read superblock
[  333.253627][ T5815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'.
[  334.990796][ T3640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  335.902756][ T3640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  335.912109][ T3640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  335.921451][ T3640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  335.929192][ T3646] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  335.936949][ T3640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  336.067469][ T5846] loop2: detected capacity change from 0 to 256
[  336.080422][ T5843] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  336.504052][ T5833] chnl_net:caif_netlink_parms(): no params data found
[  336.572554][   T22] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  336.588873][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.596450][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.605086][ T5833] device bridge_slave_0 entered promiscuous mode
[  336.615027][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.625020][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.639873][ T5833] device bridge_slave_1 entered promiscuous mode
[  337.494459][   T22] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  337.532545][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.590346][   T22] usb 5-1: config 0 descriptor??
[  337.600055][ T5862] loop2: detected capacity change from 0 to 256
[  337.610892][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.691395][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'.
[  338.003033][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.014103][ T3640] Bluetooth: hci4: command tx timeout
[  338.368621][ T5865] loop3: detected capacity change from 0 to 1024
[  338.496001][ T5865] hfsplus: extend alloc file! (8192,65536,366)
[  338.638931][ T5833] team0: Port device team_slave_0 added
[  338.660309][ T5833] team0: Port device team_slave_1 added
[  338.671289][ T5872] netlink: 36 bytes leftover after parsing attributes in process `syz.1.360'.
[  338.702942][ T4949] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  338.951744][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.972932][   T22] pegasus: probe of 5-1:0.0 failed with error -71
[  338.988322][ T5878] loop3: detected capacity change from 0 to 128
[  339.002544][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.036036][   T22] usb 5-1: USB disconnect, device number 5
[  339.078295][ T5878] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  339.109805][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.130459][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.138796][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.174348][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.197239][ T5878] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  339.241558][ T5878] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.359: Directory block failed checksum
[  339.262534][ T3683] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  339.348792][ T5870] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns
[  339.365147][ T5833] device hsr_slave_0 entered promiscuous mode
[  339.375757][ T5882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'.
[  339.388010][ T5833] device hsr_slave_1 entered promiscuous mode
[  339.394759][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  339.402367][ T5833] Cannot create hsr debugfs directory
[  339.411415][ T5870] kvm: pic: non byte write
[  339.535515][ T5884] loop2: detected capacity change from 0 to 1024
[  339.591871][ T5884] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  339.643103][ T3683] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  339.878991][ T3683] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  339.973295][ T3683] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  339.983028][ T3683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  339.991241][ T3683] usb 2-1: SerialNumber: syz
[  340.052637][ T3645] Bluetooth: hci4: command tx timeout
[  340.873277][ T5334] EXT4-fs (loop2): unmounting filesystem.
[  341.168745][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  341.219982][ T5876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.360'.
[  341.237579][ T5876] netlink: 36 bytes leftover after parsing attributes in process `syz.1.360'.
[  341.485723][ T3683] usb 2-1: 0:2 : does not exist
[  341.501949][ T3683] usb 2-1: unit 5 not found!
[  342.507986][ T5905] loop2: detected capacity change from 0 to 16
[  342.690928][ T5905] erofs: (device loop2): mounted with root inode @ nid 36.
[  343.430948][ T3645] Bluetooth: hci4: command tx timeout
[  343.441059][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  343.441070][   T26] audit: type=1326 audit(1729057756.852:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64617dff9 code=0x7ffc0000
[  343.497599][ T3683] usb 2-1: USB disconnect, device number 10
[  343.515720][   T26] audit: type=1326 audit(1729057756.852:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64617dff9 code=0x7ffc0000
[  343.580188][ T5898] netlink: 76 bytes leftover after parsing attributes in process `syz.4.367'.
[  343.629092][   T26] audit: type=1326 audit(1729057756.852:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fa64617dff9 code=0x7ffc0000
[  343.642291][ T4807] udevd[4807]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  343.656273][   T26] audit: type=1326 audit(1729057756.852:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64617dff9 code=0x7ffc0000
[  343.708351][   T26] audit: type=1326 audit(1729057756.852:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64617dff9 code=0x7ffc0000
[  343.802644][  T152] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  344.767448][ T5833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.798780][ T5917] loop4: detected capacity change from 0 to 256
[  344.838601][ T5919] loop2: detected capacity change from 0 to 256
[  345.516835][ T3640] Bluetooth: hci4: command tx timeout
[  345.533017][  T152] usb 5-1: device not accepting address 6, error -71
[  345.543723][ T5917] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  348.759252][ T5944] loop2: detected capacity change from 0 to 2048
[  348.799748][ T3645] Bluetooth: hci5: Unknown advertising packet type: 0x14
[  348.799846][ T3645] Bluetooth: hci5: Unknown advertising packet type: 0x20
[  348.811575][ T5944] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  348.829438][ T5944] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  348.841811][ T5944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  349.064182][ T5833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.120733][ T5946] netlink: 'syz.4.378': attribute type 25 has an invalid length.
[  349.142811][ T5946] netlink: 'syz.4.378': attribute type 7 has an invalid length.
[  349.162041][ T5945] netlink: 'syz.4.378': attribute type 23 has an invalid length.
[  349.173821][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'.
[  349.230253][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.237801][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.256600][ T5945] device bridge0 entered promiscuous mode
[  349.385247][ T5956] process 'syz.3.375' launched '/dev/fd/5' with NULL argv: empty string added
[  349.693586][ T3681] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  352.132860][ T3681] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  352.144711][ T5969] loop4: detected capacity change from 0 to 256
[  352.165120][ T3681] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  352.299026][ T5833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.331375][ T5949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.379'.
[  352.851769][ T3756] device hsr_slave_0 left promiscuous mode
[  353.032768][ T3681] usb 2-1: string descriptor 0 read error: -71
[  353.039012][ T3681] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  353.082146][ T3681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  353.282614][ T3681] usb 2-1: can't set config #1, error -71
[  353.288547][ T3756] device hsr_slave_1 left promiscuous mode
[  353.301865][ T3681] usb 2-1: USB disconnect, device number 11
[  353.310935][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  353.320512][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.353644][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.361076][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_1
[  354.061544][ T3756] device bridge_slave_1 left promiscuous mode
[  354.099646][ T3756] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.138265][ T5979] loop4: detected capacity change from 0 to 2048
[  354.156002][ T3756] device bridge_slave_0 left promiscuous mode
[  354.162289][ T3756] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.373428][ T5987] loop2: detected capacity change from 0 to 1024
[  354.413355][ T5979] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  354.428471][ T5987] hfsplus: invalid btree flag
[  354.437465][ T3756] device veth1_macvtap left promiscuous mode
[  354.444254][ T5987] hfsplus: failed to load catalog file
[  354.451271][ T3756] device veth0_macvtap left promiscuous mode
[  354.664385][ T5990] loop3: detected capacity change from 0 to 1024
[  354.671622][ T5990] EXT4-fs: Ignoring removed orlov option
[  355.023818][ T5990] EXT4-fs (loop3): Test dummy encryption mode enabled
[  355.289137][ T3756] device veth1_vlan left promiscuous mode
[  355.308584][ T3756] device veth0_vlan left promiscuous mode
[  355.331343][ T5990] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  355.456420][ T5987] loop2: detected capacity change from 0 to 2048
[  355.585215][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  355.592103][ T4748] EXT4-fs (loop4): unmounting filesystem.
[  355.602566][ T5987] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  358.416944][ T6019] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12)
[  358.423598][ T6019] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  358.431576][ T6019] vhci_hcd vhci_hcd.0: Device attached
[  358.441649][ T6021] vhci_hcd: connection closed
[  358.443990][   T47] vhci_hcd: stop threads
[  358.650734][   T47] vhci_hcd: release socket
[  358.747400][   T47] vhci_hcd: disconnect device
[  358.772667][ T3682] usb 16-1: enqueue for inactive port 0
[  358.984887][ T6033] loop4: detected capacity change from 0 to 256
[  359.053036][ T3645] Bluetooth: hci1: Unknown advertising packet type: 0x14
[  359.053109][ T3645] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  360.424014][ T3682] usb usb16-port1: attempt power cycle
[  360.881383][ T3756] team0 (unregistering): Port device team_slave_1 removed
[  360.921376][ T3756] team0 (unregistering): Port device team_slave_0 removed
[  360.964991][ T3756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  361.010577][ T3756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  361.019643][ T3745] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  361.180267][ T3682] usb usb16-port1: unable to enumerate USB device
[  361.385560][ T3745] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  361.396912][ T3745] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  361.482986][ T3745] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  361.499045][ T3745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  361.515069][ T3745] usb 5-1: SerialNumber: syz
[  361.522353][ T3756] bond0 (unregistering): Released all slaves
[  361.643710][ T5833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.664717][ T6031] netlink: 'syz.3.393': attribute type 25 has an invalid length.
[  361.682554][ T6031] netlink: 'syz.3.393': attribute type 7 has an invalid length.
[  361.698342][ T6038] netlink: 'syz.3.393': attribute type 23 has an invalid length.
[  361.706261][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'.
[  361.754876][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.762403][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.770905][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'.
[  361.782177][ T6038] device bridge0 entered promiscuous mode
[  361.853887][ T6049] netlink: 36 bytes leftover after parsing attributes in process `syz.4.396'.
[  361.901620][ T6055] netlink: 32 bytes leftover after parsing attributes in process `syz.4.396'.
[  362.072022][ T6061] netlink: 'syz.2.398': attribute type 27 has an invalid length.
[  362.500146][ T6065] loop3: detected capacity change from 0 to 256
[  363.552187][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.559572][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.615171][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.674207][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.258135][ T6061] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.287654][ T6061] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.316220][ T6061] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.329048][ T6061] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.435293][ T6097] loop3: detected capacity change from 0 to 512
[  366.454901][ T6097] EXT4-fs: Ignoring removed orlov option
[  366.481458][ T6097] EXT4-fs (loop3): Test dummy encryption mode enabled
[  366.499105][ T6097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002]
[  366.510370][ T6097] System zones: 1-12
[  366.520718][ T6097] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.405: casefold flag without casefold feature
[  366.539455][ T6055] netlink: 36 bytes leftover after parsing attributes in process `syz.4.396'.
[  366.541807][ T6097] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.405: couldn't read orphan inode 15 (err -117)
[  366.560531][ T6097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  366.830987][ T3745] usb 5-1: 0:2 : does not exist
[  366.836041][ T3745] usb 5-1: unit 5 not found!
[  366.851206][ T3745] usb 5-1: USB disconnect, device number 8
[  367.089422][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  367.131348][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  367.162003][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  367.586061][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  367.801166][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  367.908547][ T6120] netlink: 'syz.1.410': attribute type 25 has an invalid length.
[  367.941049][ T6120] netlink: 'syz.1.410': attribute type 7 has an invalid length.
[  368.110265][ T6123] netlink: 'syz.1.410': attribute type 23 has an invalid length.
[  368.252910][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'.
[  368.323253][ T6126] loop3: detected capacity change from 0 to 256
[  368.616288][ T6126] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  368.916080][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.923376][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.104320][ T6123] device bridge0 entered promiscuous mode
[  369.285672][ T6132] loop2: detected capacity change from 0 to 1024
[  369.296655][ T6132] EXT4-fs: Ignoring removed orlov option
[  369.744371][ T6132] EXT4-fs (loop2): Test dummy encryption mode enabled
[  369.789077][ T6132] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  369.848365][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.888444][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  369.908944][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  369.943050][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[  369.966536][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  369.984654][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  369.995806][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.002960][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.039919][ T5334] EXT4-fs (loop2): unmounting filesystem.
[  370.143363][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  370.723990][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  370.907723][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  370.917738][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.924898][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.933269][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  371.099762][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  371.128399][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  371.139279][ T6150] loop4: detected capacity change from 0 to 128
[  371.166696][ T6150] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  371.175819][ T6150] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038 (0x7fffffff)
[  371.371694][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  371.763863][ T6155] syz.4.417 (pid 6155) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  371.881463][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  371.903211][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  371.917564][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  371.929923][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  372.100714][ T6160] loop3: detected capacity change from 0 to 512
[  372.175575][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  372.305202][ T6160] EXT4-fs: Ignoring removed orlov option
[  372.333894][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  372.355298][ T4748] EXT4-fs (loop4): unmounting filesystem.
[  372.361618][ T6160] EXT4-fs (loop3): Test dummy encryption mode enabled
[  372.379295][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  372.390656][ T6160] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002]
[  372.412598][ T6160] System zones: 1-12
[  372.420399][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  372.486827][ T6160] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.420: casefold flag without casefold feature
[  372.508034][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  372.516838][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  372.538837][ T6160] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.420: couldn't read orphan inode 15 (err -117)
[  372.561459][ T6160] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  372.888881][ T6179] netlink: 'syz.1.424': attribute type 21 has an invalid length.
[  372.927294][ T6179] netlink: 128 bytes leftover after parsing attributes in process `syz.1.424'.
[  372.958128][ T6179] netlink: 'syz.1.424': attribute type 4 has an invalid length.
[  372.973164][ T6179] netlink: 'syz.1.424': attribute type 3 has an invalid length.
[  372.991036][ T6179] netlink: 3 bytes leftover after parsing attributes in process `syz.1.424'.
[  373.014563][ T6181] netlink: 'syz.1.424': attribute type 21 has an invalid length.
[  373.031400][ T6181] netlink: 128 bytes leftover after parsing attributes in process `syz.1.424'.
[  373.049863][ T6181] netlink: 'syz.1.424': attribute type 4 has an invalid length.
[  373.059221][ T6181] netlink: 'syz.1.424': attribute type 5 has an invalid length.
[  373.075246][ T6181] netlink: 3 bytes leftover after parsing attributes in process `syz.1.424'.
[  373.105010][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  373.113046][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  373.127229][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.147302][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  373.156313][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  373.182277][ T5833] device veth0_vlan entered promiscuous mode
[  373.190317][ T6181] netlink: 14 bytes leftover after parsing attributes in process `syz.1.424'.
[  373.199889][ T6181] device bridge0 left promiscuous mode
[  373.207608][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  373.218597][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  373.227196][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  373.235430][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  373.251163][ T5833] device veth1_vlan entered promiscuous mode
[  373.271128][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  373.279452][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  373.290064][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  373.299054][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  373.309765][ T5833] device veth0_macvtap entered promiscuous mode
[  373.321354][ T5833] device veth1_macvtap entered promiscuous mode
[  373.336916][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.349268][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.365085][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.379301][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.392092][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.409909][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.430798][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.443868][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.456960][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  373.457088][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.477842][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  373.487111][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  373.495962][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  373.515704][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  373.527441][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.542901][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.564644][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.578800][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.590334][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.600928][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.610914][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.621366][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.633963][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.645642][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  373.659776][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  373.677056][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.686165][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.695115][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.704328][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.770658][ T3902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.788280][ T3902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.800342][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  373.817895][ T4105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.829027][ T4105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.839719][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  373.946776][ T6185] loop3: detected capacity change from 0 to 512
[  373.963405][ T6185] EXT4-fs: Ignoring removed orlov option
[  374.018062][ T6187] loop4: detected capacity change from 0 to 1024
[  374.025315][ T6187] hfsplus: unable to parse mount options
[  374.062324][ T6185] EXT4-fs (loop3): Test dummy encryption mode enabled
[  374.122102][   T26] audit: type=1326 audit(1729057787.542:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.0.347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27aad7dff9 code=0x0
[  374.125590][ T6185] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002]
[  374.154119][ T6185] System zones: 1-12
[  376.635450][ T6185] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.436: casefold flag without casefold feature
[  376.705641][ T6185] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.436: couldn't read orphan inode 15 (err -117)
[  376.717910][ T6185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  378.604283][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  378.611025][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  379.006151][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  379.090600][ T6216] netlink: 36 bytes leftover after parsing attributes in process `syz.2.430'.
[  379.228497][ T6222] loop3: detected capacity change from 0 to 512
[  379.273457][ T6222] EXT4-fs: Ignoring removed bh option
[  379.318948][ T6222] EXT4-fs error (device loop3): __ext4_iget:5055: inode #15: block 1803188595: comm syz.3.431: invalid block
[  379.341527][ T6222] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.431: couldn't read orphan inode 15 (err -117)
[  379.360835][ T6222] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  379.443110][ T3680] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  380.468030][ T3680] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  380.697485][ T3680] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  380.840022][ T3680] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  380.886610][ T3680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  380.908111][ T3680] usb 3-1: SerialNumber: syz
[  381.762653][ T6237] netlink: 32 bytes leftover after parsing attributes in process `syz.2.430'.
[  381.884985][ T6237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.430'.
[  381.927812][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  382.739918][ T3680] usb 3-1: 0:2 : does not exist
[  382.748973][ T3680] usb 3-1: unit 5 not found!
[  382.813399][ T3680] usb 3-1: USB disconnect, device number 4
[  382.882608][ T6241] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  382.889165][ T6241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  382.896856][ T6241] vhci_hcd vhci_hcd.0: Device attached
[  382.902894][ T6243] vhci_hcd: connection closed
[  382.903472][ T3899] vhci_hcd: stop threads
[  382.912402][ T3899] vhci_hcd: release socket
[  383.019846][ T3899] vhci_hcd: disconnect device
[  383.058591][ T6247] Bluetooth: MGMT ver 1.22
[  384.080201][ T6257] loop2: detected capacity change from 0 to 1024
[  384.087499][ T6257] hfsplus: unable to parse mount options
[  384.171414][ T6259] xt_TPROXY: Can be used only with -p tcp or -p udp
[  385.375258][ T6250] xt_hashlimit: size too large, truncated to 1048576
[  385.382934][ T6250] xt_hashlimit: overflow, try lower: 0/0
[  387.242263][ T6268] loop4: detected capacity change from 0 to 256
[  397.879131][ T6304] loop3: detected capacity change from 0 to 512
[  397.925639][ T6304] EXT4-fs (loop3): unsupported inode size: 264
[  397.931839][ T6304] EXT4-fs (loop3): blocksize: 1024
[  398.028797][ T4807] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  398.272608][ T6298] loop2: detected capacity change from 0 to 4096
[  399.579567][ T6305] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  400.277589][ T6322] loop3: detected capacity change from 0 to 256
[  400.377880][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.339896][ T3640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  402.349071][ T3640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  402.357230][ T3640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  402.370228][ T6331] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  402.376764][ T6331] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  402.384525][ T6331] vhci_hcd vhci_hcd.0: Device attached
[  402.390998][ T6334] vhci_hcd: connection closed
[  402.410592][    T9] vhci_hcd: stop threads
[  402.440082][    T9] vhci_hcd: release socket
[  402.454254][ T3640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  402.463661][ T3646] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  402.471339][ T3640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  402.479989][    T9] vhci_hcd: disconnect device
[  402.696324][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.573075][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.939805][ T6350] loop2: detected capacity change from 0 to 128
[  403.960663][ T6352] loop3: detected capacity change from 0 to 512
[  403.968465][ T6352] EXT4-fs: Ignoring removed orlov option
[  404.017921][ T6352] EXT4-fs (loop3): Test dummy encryption mode enabled
[  404.102039][   T11] bond0: (slave netdevsim0): Releasing backup interface
[  404.127659][ T6350] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  404.136579][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.153424][ T6350] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  404.157280][ T6352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002]
[  404.217361][ T6352] System zones: 1-12
[  404.229657][ T6324] chnl_net:caif_netlink_parms(): no params data found
[  404.234723][ T6352] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.462: casefold flag without casefold feature
[  404.270525][ T6352] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.462: couldn't read orphan inode 15 (err -117)
[  404.285400][ T6352] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  404.588512][ T3640] Bluetooth: hci2: command tx timeout
[  406.492756][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.621697][ T3640] Bluetooth: hci2: command tx timeout
[  406.640232][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.573464][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  407.763073][ T6324] device bridge_slave_0 entered promiscuous mode
[  407.921287][ T6383] loop4: detected capacity change from 0 to 1024
[  407.930621][ T6383] EXT4-fs: Ignoring removed orlov option
[  408.645097][ T6383] EXT4-fs (loop4): Test dummy encryption mode enabled
[  408.652198][ T6383] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  408.663192][ T6383] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  408.675030][ T6383] EXT4-fs (loop4): invalid journal inode
[  408.680778][ T6383] EXT4-fs (loop4): can't get journal size
[  408.693879][ T3640] Bluetooth: hci2: command tx timeout
[  408.709066][ T6383] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  408.903129][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.918300][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.641162][ T6390] loop3: detected capacity change from 0 to 2048
[  409.731375][ T6390] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  409.748744][ T6390] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  409.768083][ T6390] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  409.973947][ T4748] EXT4-fs (loop4): unmounting filesystem.
[  410.013104][ T6324] device bridge_slave_1 entered promiscuous mode
[  410.086341][   T11] tipc: Left network mode
[  410.091357][ T6392] loop4: detected capacity change from 0 to 128
[  410.176229][ T6392] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  410.197605][ T6392] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038 (0x7fffffff)
[  410.273176][ T6324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  410.392065][ T6324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  410.457893][ T4748] EXT4-fs (loop4): unmounting filesystem.
[  410.782537][ T3640] Bluetooth: hci2: command tx timeout
[  411.645923][ T6407] loop3: detected capacity change from 0 to 2048
[  411.832149][ T6412] loop4: detected capacity change from 0 to 128
[  412.019370][ T6412] VFS: Found a Xenix FS (block size = 512) on device loop4
[  412.086284][ T6412] syz.4.469: attempt to access beyond end of device
[  412.086284][ T6412] loop4: rw=0, sector=8767744, nr_sectors = 1 limit=128
[  412.100111][ T6412] Buffer I/O error on dev loop4, logical block 8767744, async page read
[  412.108795][ T6412] syz.4.469: attempt to access beyond end of device
[  412.108795][ T6412] loop4: rw=0, sector=13269809, nr_sectors = 1 limit=128
[  412.122353][ T6412] Buffer I/O error on dev loop4, logical block 13269809, async page read
[  412.131051][ T6412] syz.4.469: attempt to access beyond end of device
[  412.131051][ T6412] loop4: rw=0, sector=1157, nr_sectors = 1 limit=128
[  412.144238][ T6412] Buffer I/O error on dev loop4, logical block 1157, async page read
[  412.180730][ T6412] syz.4.469: attempt to access beyond end of device
[  412.180730][ T6412] loop4: rw=0, sector=3211264, nr_sectors = 1 limit=128
[  412.194214][ T6412] Buffer I/O error on dev loop4, logical block 3211264, async page read
[  412.202832][ T6412] syz.4.469: attempt to access beyond end of device
[  412.202832][ T6412] loop4: rw=0, sector=8768635, nr_sectors = 1 limit=128
[  412.216291][ T6412] Buffer I/O error on dev loop4, logical block 8768635, async page read
[  412.224878][ T6412] syz.4.469: attempt to access beyond end of device
[  412.224878][ T6412] loop4: rw=0, sector=13466417, nr_sectors = 1 limit=128
[  412.238418][ T6412] Buffer I/O error on dev loop4, logical block 13466417, async page read
[  412.247096][ T6412] syz.4.469: attempt to access beyond end of device
[  412.247096][ T6412] loop4: rw=0, sector=209285, nr_sectors = 1 limit=128
[  412.260511][ T6412] Buffer I/O error on dev loop4, logical block 209285, async page read
[  412.268550][ T6407] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  412.270283][ T6412] syz.4.469: attempt to access beyond end of device
[  412.270283][ T6412] loop4: rw=0, sector=8767744, nr_sectors = 1 limit=128
[  412.290924][ T6412] Buffer I/O error on dev loop4, logical block 8767744, async page read
[  412.299325][ T6412] syz.4.469: attempt to access beyond end of device
[  412.299325][ T6412] loop4: rw=0, sector=13269809, nr_sectors = 1 limit=128
[  412.312839][ T6412] Buffer I/O error on dev loop4, logical block 13269809, async page read
[  412.321288][ T6412] syz.4.469: attempt to access beyond end of device
[  412.321288][ T6412] loop4: rw=0, sector=1157, nr_sectors = 1 limit=128
[  412.334459][ T6412] Buffer I/O error on dev loop4, logical block 1157, async page read
[  412.342807][   T26] audit: type=1800 audit(1729057825.772:237): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.469" name="/" dev="loop4" ino=2 res=0 errno=0
[  412.477000][ T4748] sysv_free_block: trying to free block not in datazone
[  412.525163][ T6324] team0: Port device team_slave_0 added
[  412.551445][ T4748] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  412.588931][ T6324] team0: Port device team_slave_1 added
[  412.824809][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.843436][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.919861][ T6324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  413.011505][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_1
[  413.020726][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  413.192946][ T6324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  414.098632][ T6433] loop4: detected capacity change from 0 to 512
[  414.108653][ T6433] EXT4-fs: Ignoring removed orlov option
[  414.116063][ T6433] EXT4-fs (loop4): Test dummy encryption mode enabled
[  414.138282][ T6433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002]
[  414.147819][ T6433] System zones: 1-12
[  414.169477][ T6426] loop3: detected capacity change from 0 to 4096
[  414.189483][ T6433] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.476: casefold flag without casefold feature
[  414.242861][ T6433] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.476: couldn't read orphan inode 15 (err -117)
[  414.287923][ T6433] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  415.668762][ T6437] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  415.675287][ T6437] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  415.682940][ T6437] vhci_hcd vhci_hcd.0: Device attached
[  416.608426][ T6441] vhci_hcd: connection closed
[  416.617914][ T3899] vhci_hcd: stop threads
[  416.627724][ T3899] vhci_hcd: release socket
[  416.633219][ T3899] vhci_hcd: disconnect device
[  416.688298][ T3680] vhci_hcd: vhci_device speed not set
[  416.771969][ T6324] device hsr_slave_0 entered promiscuous mode
[  416.784853][ T6324] device hsr_slave_1 entered promiscuous mode
[  417.053298][ T3640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  417.063029][ T3640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  417.155114][ T4748] EXT4-fs (loop4): unmounting filesystem.
[  417.286254][ T3640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  417.301867][ T3640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  417.311356][ T3640] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  417.318914][ T3640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  419.697536][ T3640] Bluetooth: hci6: command tx timeout
[  420.732568][ T6479] loop3: detected capacity change from 0 to 1024
[  420.739637][ T6479] EXT4-fs: Ignoring removed orlov option
[  420.798450][ T6479] EXT4-fs (loop3): Test dummy encryption mode enabled
[  420.806456][ T6479] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  420.817414][ T6479] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  420.830236][ T6479] EXT4-fs (loop3): invalid journal inode
[  420.836339][ T6479] EXT4-fs (loop3): can't get journal size
[  420.865467][ T6479] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  421.732539][ T3640] Bluetooth: hci6: command tx timeout
[  422.025289][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  422.034079][   T11] device hsr_slave_0 left promiscuous mode
[  422.211241][   T11] device hsr_slave_1 left promiscuous mode
[  423.123379][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  423.160179][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  423.178581][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  423.197969][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  423.201331][ T6494] loop3: detected capacity change from 0 to 128
[  423.232892][   T11] device bridge_slave_1 left promiscuous mode
[  423.246194][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.269205][   T11] device bridge_slave_0 left promiscuous mode
[  423.278863][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.306762][ T6494] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  423.316253][ T6494] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038 (0x7fffffff)
[  423.351760][   T11] device veth1_macvtap left promiscuous mode
[  423.361617][   T11] device veth0_macvtap left promiscuous mode
[  423.367779][   T11] device veth1_vlan left promiscuous mode
[  423.374334][   T11] device veth0_vlan left promiscuous mode
[  423.454563][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  423.601414][ T6503] random: crng reseeded on system resumption
[  426.517693][ T6507] loop3: detected capacity change from 0 to 2048
[  426.805020][ T3640] Bluetooth: hci6: command tx timeout
[  427.314406][ T6507] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  427.325504][ T6507] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  427.337225][ T6507] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  427.780011][   T11] team0 (unregistering): Port device team_slave_1 removed
[  427.829714][   T11] team0 (unregistering): Port device team_slave_0 removed
[  427.872230][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  427.917419][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.451775][   T11] bond0 (unregistering): Released all slaves
[  428.723830][ T6510] loop3: detected capacity change from 0 to 512
[  428.731041][ T6510] EXT4-fs: Ignoring removed orlov option
[  428.740360][ T6350] EXT4-fs (loop2): unmounting filesystem.
[  428.780567][ T6510] EXT4-fs (loop3): Test dummy encryption mode enabled
[  428.795191][ T6510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002]
[  428.809082][ T6513] netlink: 36 bytes leftover after parsing attributes in process `syz.0.498'.
[  428.852731][ T3642] Bluetooth: hci6: command tx timeout
[  428.858255][ T3642] Bluetooth: hci1: command 0x0406 tx timeout
[  428.932977][ T6510] System zones: 1-12
[  428.941631][ T6515] loop4: detected capacity change from 0 to 2048
[  428.982967][ T6510] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.491: casefold flag without casefold feature
[  429.019497][ T6510] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.491: couldn't read orphan inode 15 (err -117)
[  429.064884][ T6446] chnl_net:caif_netlink_parms(): no params data found
[  429.070256][ T6510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  429.207765][ T6515] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  429.343434][ T6080] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  429.605442][ T6534] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  429.620537][ T6534] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  429.632970][ T6534] EXT4-fs (loop4): This should not happen!! Data will be lost
[  429.632970][ T6534] 
[  429.642817][ T6534] EXT4-fs (loop4): Total free blocks count 0
[  429.648946][ T6534] EXT4-fs (loop4): Free/Dirty block details
[  429.655032][ T6534] EXT4-fs (loop4): free_blocks=2415919104
[  429.660855][ T6534] EXT4-fs (loop4): dirty_blocks=16
[  429.666417][ T6534] EXT4-fs (loop4): Block reservation details
[  429.672859][ T6534] EXT4-fs (loop4): i_reserved_data_blocks=1
[  429.724609][ T6534] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28
[  429.992786][ T6080] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  430.010461][ T6080] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  430.113301][ T6080] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  430.135887][ T6080] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  430.145249][ T6080] usb 1-1: SerialNumber: syz
[  430.376482][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.409629][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.435493][ T6446] device bridge_slave_0 entered promiscuous mode
[  430.459661][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.471307][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.479762][ T6446] device bridge_slave_1 entered promiscuous mode
[  431.281987][ T6546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.498'.
[  431.356548][ T6446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.369675][ T6546] netlink: 36 bytes leftover after parsing attributes in process `syz.0.498'.
[  431.381875][ T6446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.427179][ T6080] usb 1-1: 0:2 : does not exist
[  431.441690][ T6080] usb 1-1: unit 5 not found!
[  431.471292][ T6080] usb 1-1: USB disconnect, device number 5
[  431.541139][ T6446] team0: Port device team_slave_0 added
[  431.593574][ T6446] team0: Port device team_slave_1 added
[  431.605588][ T6324] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  431.642736][ T6324] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  431.682557][ T6324] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  431.700310][ T6324] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  431.804370][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.823155][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  431.832382][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.931929][ T6446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.972578][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.982056][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.040530][ T6446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.071392][ T6571] rdma_op ffff888058b631f0 conn xmit_rdma 0000000000000000
[  433.091735][ T6446] device hsr_slave_0 entered promiscuous mode
[  433.117944][ T6446] device hsr_slave_1 entered promiscuous mode
[  433.150649][ T6569] loop4: detected capacity change from 0 to 512
[  433.157962][ T6446] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  433.183231][ T6569] EXT4-fs: Ignoring removed oldalloc option
[  433.199501][ T6446] Cannot create hsr debugfs directory
[  433.244188][ T6324] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.269174][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  433.283434][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  433.326291][ T6569] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.496: Parent and EA inode have the same ino 15
[  433.358402][   T32] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  433.631765][ T6324] 8021q: adding VLAN 0 to HW filter on device team0
[  433.800724][ T6569] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.496: Parent and EA inode have the same ino 15
[  434.003176][ T6569] EXT4-fs (loop4): 1 orphan inode deleted
[  434.009414][ T6569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  434.144553][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  434.155696][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  434.199504][ T3899] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.206726][ T3899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.362814][   T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  434.510573][   T32] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  434.694529][   T32] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  434.702519][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  434.716140][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.730186][   T32] usb 1-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎
[  434.743213][   T32] usb 1-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚†
[  434.763650][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  434.777408][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  434.805393][ T3899] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.806353][ T4748] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  434.812545][ T3899] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.840331][   T32] usb 1-1: SerialNumber: syz
[  434.851651][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  434.864988][ T4748] EXT4-fs error (device loop4): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15
[  434.876674][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  434.885319][ T4748] EXT4-fs error (device loop4): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15
[  434.901539][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  434.913229][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  434.940909][ T3640] Bluetooth: hci4: command 0x0406 tx timeout
[  435.072626][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  435.250276][   T32] usb 1-1: 0:2 : does not exist
[  435.268318][ T6324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  435.283757][ T6324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  435.318225][   T32] usb 1-1: USB disconnect, device number 6
[  435.489525][ T4748] EXT4-fs (loop4): unmounting filesystem.
[  435.554444][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  435.657412][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  435.799461][ T4807] udevd[4807]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  435.881267][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  436.017768][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  436.041790][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  436.074631][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  436.212939][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  436.565000][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  436.580787][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  436.606114][ T6324] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.673801][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  436.683906][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  436.698958][ T6324] device veth0_vlan entered promiscuous mode
[  436.707114][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  436.717700][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  436.737659][ T6324] device veth1_vlan entered promiscuous mode
[  436.770174][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  436.798805][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  436.826621][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  436.951841][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  436.961588][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  436.979934][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  436.993059][ T6324] device veth0_macvtap entered promiscuous mode
[  437.010378][ T6324] device veth1_macvtap entered promiscuous mode
[  437.099870][ T6446] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  437.110190][ T6446] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  437.121498][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.142510][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.162438][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.180036][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.198097][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.211025][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.229095][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.240749][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.254874][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_0
[  437.262208][ T6446] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  437.286918][ T6446] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  437.305817][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  437.314117][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  437.322263][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  437.331884][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  437.355135][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  437.367468][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.385494][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  437.400606][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.420843][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  437.439027][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.450358][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  437.468461][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.483154][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_1
[  437.519759][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  437.535201][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  437.551951][ T6324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.570321][ T6324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.579351][ T6324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.589706][ T6324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.758698][   T11] device hsr_slave_0 left promiscuous mode
[  437.765567][   T11] device hsr_slave_1 left promiscuous mode
[  437.771834][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  437.779994][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.787656][   T11] device bridge_slave_1 left promiscuous mode
[  437.794180][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.802137][   T11] device bridge_slave_0 left promiscuous mode
[  437.808450][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.179352][   T11] team0 (unregistering): Port device team_slave_1 removed
[  438.227282][   T11] team0 (unregistering): Port device team_slave_0 removed
[  438.268656][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  438.309121][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  438.741254][   T11] bond0 (unregistering): Released all slaves
[  438.860979][ T6446] 8021q: adding VLAN 0 to HW filter on device bond0
[  438.897230][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  438.906118][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  438.916683][ T6446] 8021q: adding VLAN 0 to HW filter on device team0
[  438.934223][ T4094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.942276][ T4094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.947941][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  438.968456][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  438.977197][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.984326][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  438.996473][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  439.004625][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  439.037732][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  439.046421][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  439.056841][ T4094] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.063985][ T4094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.071928][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  439.081536][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  439.129061][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  439.137160][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.139668][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  439.146131][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.161559][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  439.170496][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  439.200773][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  439.209037][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  439.219582][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  439.231299][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  439.245021][ T6446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  439.265386][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  439.325355][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  439.343801][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  439.402460][ T6636] loop1: detected capacity change from 0 to 2048
[  440.644696][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  440.651036][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  441.158810][ T6636] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  441.858856][ T3646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  441.868742][ T3646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  441.878788][ T3640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  441.889740][ T3640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  441.899366][ T3646] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  441.907144][ T3640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  442.047295][ T6324] EXT4-fs (loop1): unmounting filesystem.
[  442.131697][ T6662] loop3: detected capacity change from 0 to 512
[  442.175184][ T6662] EXT4-fs: Ignoring removed orlov option
[  442.229511][ T6662] EXT4-fs (loop3): Test dummy encryption mode enabled
[  442.256289][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.456835][ T6662] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002]
[  442.685420][ T6662] System zones: 1-12
[  442.909165][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.948806][ T6662] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.502: casefold flag without casefold feature
[  442.991408][ T6662] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.502: couldn't read orphan inode 15 (err -117)
[  443.048207][ T6662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  443.077599][ T6669] loop1: detected capacity change from 0 to 128
[  443.147539][ T6669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  443.190328][ T6669] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff)
[  443.212119][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.289901][ T6324] EXT4-fs (loop1): unmounting filesystem.
[  443.368581][   T11] bond0: (slave netdevsim0): Releasing backup interface
[  443.410335][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.450982][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  443.465106][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  443.497633][ T6446] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.528591][ T6656] chnl_net:caif_netlink_parms(): no params data found
[  443.547946][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  443.557347][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  443.907983][ T6446] device veth0_vlan entered promiscuous mode
[  443.984954][ T3642] Bluetooth: hci3: command tx timeout
[  444.053313][ T6446] device veth1_vlan entered promiscuous mode
[  444.440234][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  444.467593][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  444.507824][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  444.537489][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  444.537993][ T6686] loop1: detected capacity change from 0 to 2048
[  444.545943][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  444.560809][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  444.570236][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.586758][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.604307][ T6656] device bridge_slave_0 entered promiscuous mode
[  444.720391][ T6688] hub 9-0:1.0: USB hub found
[  444.726806][ T6688] hub 9-0:1.0: 8 ports detected
[  445.364004][ T6686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  445.461555][ T6446] device veth0_macvtap entered promiscuous mode
[  445.483520][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  445.522261][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.551404][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.813594][ T6656] device bridge_slave_1 entered promiscuous mode
[  445.820507][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  445.842434][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  445.930722][ T6699] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  445.946344][ T6699] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  445.959240][ T6699] EXT4-fs (loop1): This should not happen!! Data will be lost
[  445.959240][ T6699] 
[  445.969191][ T6699] EXT4-fs (loop1): Total free blocks count 0
[  445.975321][ T6699] EXT4-fs (loop1): Free/Dirty block details
[  445.981334][ T6699] EXT4-fs (loop1): free_blocks=2415919104
[  445.987174][ T6699] EXT4-fs (loop1): dirty_blocks=16
[  445.992435][ T6699] EXT4-fs (loop1): Block reservation details
[  445.998499][ T6699] EXT4-fs (loop1): i_reserved_data_blocks=1
[  446.045416][ T6699] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28
[  446.079192][ T3642] Bluetooth: hci3: command tx timeout
[  446.132534][ T6698] netlink: 36 bytes leftover after parsing attributes in process `syz.3.505'.
[  446.484970][ T6656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.556887][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  446.585365][ T6446] device veth1_macvtap entered promiscuous mode
[  446.597885][ T6656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.713319][ T3745] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  446.857583][ T6656] team0: Port device team_slave_0 added
[  446.878893][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.922509][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.932362][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.962447][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.998808][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  447.023579][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.058763][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  447.082669][ T3745] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  447.093503][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.098287][ T3745] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  447.113585][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  447.135055][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.155087][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.178955][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  447.189085][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  447.198858][ T3745] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  447.207447][ T6656] team0: Port device team_slave_1 added
[  447.210331][ T3745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  447.234472][ T3745] usb 4-1: SerialNumber: syz
[  447.288956][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  447.301019][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.323269][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  447.341400][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.351502][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  447.365489][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.375594][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  447.386865][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.396985][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  447.407552][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.418779][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.441064][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.449926][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.477383][ T6656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.501773][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  447.514218][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  447.526017][ T6446] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.536021][ T6446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.544788][ T6446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.555046][ T6446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.566094][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.573639][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.603338][ T6656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.639001][ T6698] netlink: 32 bytes leftover after parsing attributes in process `syz.3.505'.
[  447.650707][ T6698] netlink: 36 bytes leftover after parsing attributes in process `syz.3.505'.
[  447.745268][ T3745] usb 4-1: 0:2 : does not exist
[  447.755438][ T3745] usb 4-1: unit 5 not found!
[  447.817868][ T3745] usb 4-1: USB disconnect, device number 2
[  447.861598][ T6656] device hsr_slave_0 entered promiscuous mode
[  447.882140][ T6656] device hsr_slave_1 entered promiscuous mode
[  447.902376][ T6656] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  447.911371][ T6656] Cannot create hsr debugfs directory
[  448.027217][ T5192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.050883][ T5192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.117352][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  448.140368][ T3642] Bluetooth: hci3: command tx timeout
[  448.192934][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.207076][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.229581][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  448.848475][ T6738] vxfs: WRONG superblock magic 00000000 at 1
[  448.855210][ T6738] vxfs: WRONG superblock magic 00000000 at 8
[  448.861377][ T6738] vxfs: can't find superblock.
[  449.917202][ T6739] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  450.192571][ T3683] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  450.252654][ T3642] Bluetooth: hci3: command tx timeout
[  450.917879][   T11] device hsr_slave_0 left promiscuous mode
[  450.969749][   T11] device hsr_slave_1 left promiscuous mode
[  450.990999][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.039518][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.083341][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.090787][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.127238][   T11] device bridge_slave_1 left promiscuous mode
[  451.155841][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.182952][   T11] device bridge_slave_0 left promiscuous mode
[  451.207616][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.024201][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'.
[  452.577653][ T6769] loop2: detected capacity change from 0 to 256
[  453.243177][   T11] device veth1_macvtap left promiscuous mode
[  453.250453][   T11] device veth0_macvtap left promiscuous mode
[  453.264886][   T11] device veth1_vlan left promiscuous mode
[  453.526431][ T6774] loop3: detected capacity change from 0 to 1024
[  454.071901][ T6776] nfs4: Unknown parameter '
d'
[  454.703661][ T6774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  454.875338][   T11] device veth0_vlan left promiscuous mode
[  455.150166][ T6781] random: crng reseeded on system resumption
[  455.485339][ T6783] loop3: detected capacity change from 0 to 128
[  455.502107][ T6783] omfs: Invalid superblock (7b3184f9)
[  455.781483][ T6783] loop3: detected capacity change from 0 to 2048
[  455.812935][ T6783] NILFS (loop3): invalid segment: Checksum error in segment payload
[  455.821190][ T6783] NILFS (loop3): trying rollback from an earlier position
[  455.842850][ T6783] NILFS (loop3): recovery complete
[  455.901429][ T6784] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  456.354513][ T3683] usb 2-1: unable to read config index 0 descriptor/start: -110
[  456.362227][ T3683] usb 2-1: can't read configurations, error -110
[  456.528021][ T3683] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  456.679288][   T11] team0 (unregistering): Port device team_slave_1 removed
[  456.718376][ T3683] usb 2-1: device descriptor read/64, error -32
[  456.761800][   T11] team0 (unregistering): Port device team_slave_0 removed
[  456.848120][ T3683] usb usb2-port1: attempt power cycle
[  456.861240][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.949335][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  457.274420][ T3683] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  457.357408][ T3683] usb 2-1: device descriptor read/8, error -32
[  457.679061][   T11] bond0 (unregistering): Released all slaves
[  457.841533][ T6767] IPVS: Error joining to the multicast group
[  458.120665][ T6791] loop3: detected capacity change from 0 to 512
[  458.213381][ T6791] EXT4-fs: Ignoring removed orlov option
[  458.230127][ T6791] EXT4-fs (loop3): Test dummy encryption mode enabled
[  458.740510][ T6792] loop2: detected capacity change from 0 to 2048
[  458.766058][ T6791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002]
[  459.013318][ T6791] System zones: 1-12
[  459.142564][ T6792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  459.189213][ T6791] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.523: casefold flag without casefold feature
[  459.263735][ T6791] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.523: couldn't read orphan inode 15 (err -117)
[  459.538549][ T6791] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  459.618576][ T6805] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  459.633892][ T6805] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  459.646407][ T6805] EXT4-fs (loop2): This should not happen!! Data will be lost
[  459.646407][ T6805] 
[  459.656258][ T6805] EXT4-fs (loop2): Total free blocks count 0
[  459.662479][ T6805] EXT4-fs (loop2): Free/Dirty block details
[  459.668583][ T6805] EXT4-fs (loop2): free_blocks=2415919104
[  459.674529][ T6805] EXT4-fs (loop2): dirty_blocks=16
[  459.679816][ T6805] EXT4-fs (loop2): Block reservation details
[  459.686018][ T6805] EXT4-fs (loop2): i_reserved_data_blocks=1
[  459.706944][ T6805] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28
[  460.693582][ T6656] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  461.074968][ T6656] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  461.223835][ T6656] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  461.391517][ T6656] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  461.566947][ T6656] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.588624][ T6656] 8021q: adding VLAN 0 to HW filter on device team0
[  461.630446][ T6656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  461.640982][ T6656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  461.700216][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  462.589501][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  462.643230][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  462.702921][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  462.763704][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  462.821388][ T3812] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.828590][ T3812] bridge0: port 1(bridge_slave_0) entered forwarding state
[  462.876151][ T6826] loop2: detected capacity change from 0 to 128
[  462.895500][ T6826] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  463.050233][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  463.067184][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  463.087343][ T3812] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.094546][ T3812] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.100684][ T6828] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  464.138426][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  464.159237][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  464.177604][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  464.205941][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  464.242084][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  464.259891][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  464.268868][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  464.309247][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  464.370783][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  464.400407][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  464.581071][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  464.692984][ T6849] hub 9-0:1.0: USB hub found
[  464.698430][ T6849] hub 9-0:1.0: 8 ports detected
[  464.849163][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  465.932014][ T6852] loop1: detected capacity change from 0 to 2048
[  466.122763][ T6852] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  466.133592][ T6852] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  466.145746][ T6852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  466.170591][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  467.222627][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'.
[  467.506975][ T6863] loop3: detected capacity change from 0 to 256
[  467.992158][ T6862] IPVS: Error joining to the multicast group
[  468.136157][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  470.438654][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  471.086230][ T6656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  474.617429][ T6916] loop1: detected capacity change from 0 to 136
[  475.340985][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  475.381873][ T6921] loop3: detected capacity change from 0 to 1024
[  475.389336][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  475.486825][ T6921] hfsplus: unable to parse mount options
[  476.139722][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  476.151686][ T4807] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  476.170292][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  482.361801][ T3646] Bluetooth: hci2: command 0x0406 tx timeout
[  482.393494][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  482.419662][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  482.574579][ T6656] device veth0_vlan entered promiscuous mode
[  482.628756][ T6942] input: syz0 as /devices/virtual/input/input16
[  482.745921][ T6942] input: failed to attach handler leds to device input16, error: -6
[  482.766911][ T6656] device veth1_vlan entered promiscuous mode
[  482.968658][ T6951] loop1: detected capacity change from 0 to 2048
[  483.049028][ T6951] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  483.061287][ T6951] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  483.079619][ T6951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  483.702947][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  483.745120][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  483.825123][ T6656] device veth0_macvtap entered promiscuous mode
[  484.028108][ T6656] device veth1_macvtap entered promiscuous mode
[  484.200694][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  484.248337][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.273176][ T3642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  484.448667][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  484.470192][ T3642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  484.479301][ T3642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  484.486636][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.288205][ T3642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  485.299127][ T3642] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  485.320982][ T3642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  485.684438][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.810218][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.846663][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.858959][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.877335][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.895193][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.042243][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  486.187354][ T6978] binder: 6971:6978 ioctl c0403d08 20000100 returned -22
[  486.494518][ T5327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.808883][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  486.825313][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  486.834347][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  486.847188][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.907196][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.918475][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.932415][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.945292][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.968612][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.978489][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.995450][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.008463][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  487.026828][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.040745][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  487.102209][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  487.116212][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  487.144645][ T5327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.159132][ T6656] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  487.225822][ T6656] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  487.269977][ T6656] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  487.333063][ T6656] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  487.422728][ T3642] Bluetooth: hci5: command tx timeout
[  487.489240][ T5327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.723598][ T3756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.732295][ T3756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.757567][ T5327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.790450][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  487.813633][ T3812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.821782][ T3812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.891581][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  488.011395][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'.
[  488.041700][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'.
[  489.363335][ T7005] loop4: detected capacity change from 0 to 2048
[  489.388279][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'.
[  489.399115][ T7005] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  489.409727][ T7005] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  489.439623][ T7005] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  489.492498][ T3646] Bluetooth: hci5: command tx timeout
[  489.697472][ T7008] xt_hashlimit: invalid rate
[  489.803892][ T6956] chnl_net:caif_netlink_parms(): no params data found
[  489.994747][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.013597][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.021471][ T6956] device bridge_slave_0 entered promiscuous mode
[  490.059589][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.071119][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.143536][ T6956] device bridge_slave_1 entered promiscuous mode
[  492.031872][ T3646] Bluetooth: hci5: command tx timeout
[  492.292995][ T6956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  492.338885][ T6956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  492.565802][ T6956] team0: Port device team_slave_0 added
[  492.607709][ T6956] team0: Port device team_slave_1 added
[  494.128574][ T7039] input: syz0 as /devices/virtual/input/input17
[  494.486474][ T3646] Bluetooth: hci5: command tx timeout
[  494.675079][ T7047] loop3: detected capacity change from 0 to 512
[  494.737829][ T7047] EXT4-fs (loop3): Test dummy encryption mode enabled
[  494.773686][ T7047] EXT4-fs error (device loop3): __ext4_fill_super:5399: inode #2: comm syz.3.561: casefold flag without casefold feature
[  494.807309][ T7047] EXT4-fs (loop3): get root inode failed
[  494.827165][ T7047] EXT4-fs (loop3): mount failed
[  495.382143][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_0
[  495.465419][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.493162][ T7065] loop1: detected capacity change from 0 to 512
[  495.898627][ T6956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  498.171318][ T7065] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  498.184199][ T7078] loop4: detected capacity change from 0 to 256
[  498.218875][ T7065] exFAT-fs (loop1): unable to read boot sector
[  498.226252][ T7065] exFAT-fs (loop1): failed to read boot sector
[  498.233061][ T7065] exFAT-fs (loop1): failed to recognize exfat type
[  498.487911][ T7081] loop3: detected capacity change from 0 to 2048
[  501.305076][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  501.311426][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  501.340281][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_1
[  501.353481][ T7081] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  501.367590][ T7081] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  501.382212][ T7081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  501.432615][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  501.535657][ T6956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  502.514444][ T7087] loop1: detected capacity change from 0 to 1024
[  502.538921][ T7087] hfsplus: invalid btree flag
[  502.565761][ T7087] hfsplus: failed to load catalog file
[  502.649478][ T6956] device hsr_slave_0 entered promiscuous mode
[  502.685165][ T4949] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  502.843077][ T6956] device hsr_slave_1 entered promiscuous mode
[  503.284521][ T7087] loop1: detected capacity change from 0 to 2048
[  503.294780][ T7097] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000'
[  503.304653][ T6956] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  503.312971][ T6956] Cannot create hsr debugfs directory
[  503.376021][ T7087] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  503.709715][ T7105] loop3: detected capacity change from 0 to 512
[  503.796051][ T7105] EXT4-fs: Ignoring removed orlov option
[  503.848557][ T7105] EXT4-fs (loop3): Test dummy encryption mode enabled
[  503.894309][ T7105] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002]
[  503.923388][ T7105] System zones: 1-12
[  503.972935][ T7105] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.575: casefold flag without casefold feature
[  504.022840][ T7105] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.575: couldn't read orphan inode 15 (err -117)
[  504.037376][ T7105] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  505.987380][ T3642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  505.998574][ T3642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  506.006938][ T3642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  506.014743][ T3642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  506.082672][ T3642] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  506.092350][ T3642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  506.106300][ T7132] loop1: detected capacity change from 0 to 1024
[  506.116436][ T7132] hfsplus: unable to parse mount options
[  506.289285][ T7136] loop1: detected capacity change from 0 to 2048
[  506.306420][ T7136] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  506.348308][ T7136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  508.133906][ T3646] Bluetooth: hci6: command tx timeout
[  508.346734][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  509.609046][ T7157] loop1: detected capacity change from 0 to 2048
[  510.144983][ T3646] Bluetooth: hci3: command 0x0406 tx timeout
[  510.182516][ T7157] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  510.193872][ T7157] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  510.207660][ T7157] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  510.216768][ T3646] Bluetooth: hci6: command tx timeout
[  510.255246][ T5327] device hsr_slave_0 left promiscuous mode
[  510.265260][ T5327] device hsr_slave_1 left promiscuous mode
[  510.291033][ T5327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  510.347578][ T5327] batman_adv: batadv0: Removing interface: batadv_slave_0
[  510.481501][ T5327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  510.512572][ T5327] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.589608][ T5327] device bridge_slave_1 left promiscuous mode
[  510.606435][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.662949][ T5327] device bridge_slave_0 left promiscuous mode
[  510.682714][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.816628][ T7158] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12)
[  510.823285][ T7158] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  510.831068][ T7158] vhci_hcd vhci_hcd.0: Device attached
[  510.964248][ T7159] vhci_hcd: connection closed
[  510.965945][ T4094] vhci_hcd: stop threads
[  511.012553][ T4094] vhci_hcd: release socket
[  511.022667][ T4094] vhci_hcd: disconnect device
[  511.076285][ T5327] device veth1_macvtap left promiscuous mode
[  511.082999][ T5327] device veth0_macvtap left promiscuous mode
[  511.099346][ T5327] device veth1_vlan left promiscuous mode
[  511.109210][ T5327] device veth0_vlan left promiscuous mode
[  511.767526][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'.
[  512.292623][ T3640] Bluetooth: hci6: command tx timeout
[  512.350166][ T7173] loop1: detected capacity change from 0 to 2048
[  512.382287][ T7173] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  512.398897][ T7173] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  512.413256][ T7173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  513.543893][ T5327] team0 (unregistering): Port device team_slave_1 removed
[  513.744742][ T7183] loop4: detected capacity change from 0 to 512
[  513.763203][ T5327] team0 (unregistering): Port device team_slave_0 removed
[  513.825189][ T7183] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  513.866291][ T5327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  513.871889][ T7183] EXT4-fs (loop4): 1 truncate cleaned up
[  513.971398][ T7183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  514.091661][ T5327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  514.384342][ T3640] Bluetooth: hci6: command tx timeout
[  514.945763][ T7189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.589'.
[  515.053545][ T7189] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #2: block 4: comm syz.4.589: lblock 0 mapped to illegal pblock 4 (length 1)
[  515.503824][ T6656] EXT4-fs (loop4): unmounting filesystem.
[  515.709231][ T5327] bond0 (unregistering): Released all slaves
[  516.193645][ T7193] loop3: detected capacity change from 0 to 128
[  516.469086][ T7196] Illegal XDP return value 4294967274 on prog  (id 179) dev N/A, expect packet loss!
[  517.453729][ T7193] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  517.486111][ T7193] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038 (0x7fffffff)
[  518.397941][ T6956] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  518.491732][ T7128] chnl_net:caif_netlink_parms(): no params data found
[  518.509951][ T6956] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  518.615502][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  518.654060][ T6956] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  518.744299][ T6956] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  518.932998][ T7128] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.940094][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.088213][ T7128] device bridge_slave_0 entered promiscuous mode
[  519.839297][ T3640] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  519.847909][ T3640] Bluetooth: hci3: Injecting HCI hardware error event
[  519.857129][ T3646] Bluetooth: hci3: hardware error 0x00
[  519.990628][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.012259][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.025014][ T7128] device bridge_slave_1 entered promiscuous mode
[  520.175954][ T7128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.189144][ T7128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.228648][ T7128] team0: Port device team_slave_0 added
[  520.243596][ T7128] team0: Port device team_slave_1 added
[  520.317379][ T5327] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.345099][ T6956] 8021q: adding VLAN 0 to HW filter on device bond0
[  520.360802][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_0
[  520.368159][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.395453][ T7128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  520.425713][ T5327] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.438733][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.446669][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.473061][ T7128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  520.507604][ T6956] 8021q: adding VLAN 0 to HW filter on device team0
[  520.529507][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  520.538282][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  520.561179][ T5327] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.576791][ T7128] device hsr_slave_0 entered promiscuous mode
[  520.583639][ T7128] device hsr_slave_1 entered promiscuous mode
[  520.590510][ T7128] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  520.599554][ T7128] Cannot create hsr debugfs directory
[  520.617990][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  520.627874][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  520.638888][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.646040][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  520.655735][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  520.664166][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  520.673131][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  520.681644][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.688826][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  520.722065][ T5327] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.738040][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  520.780771][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  520.820182][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  520.829810][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  520.838612][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  520.869571][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  520.878939][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  520.887940][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  520.898058][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  520.929789][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  520.939684][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  520.950840][ T6956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  521.369813][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  521.381299][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  521.409252][ T6956] 8021q: adding VLAN 0 to HW filter on device batadv0
[  521.480313][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  521.497980][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  521.545536][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  521.554867][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  521.571211][ T6956] device veth0_vlan entered promiscuous mode
[  521.597936][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  521.606631][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  521.619088][ T6956] device veth1_vlan entered promiscuous mode
[  521.685772][ T6956] device veth0_macvtap entered promiscuous mode
[  521.697084][ T6956] device veth1_macvtap entered promiscuous mode
[  521.704390][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  521.712862][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  521.720814][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  521.731257][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  521.740071][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  521.774912][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  521.794444][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.806259][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.817585][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.828889][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.838775][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.849255][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.861119][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.871785][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.881631][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.892081][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.903681][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_0
[  521.942173][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  521.954084][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  521.974448][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.001106][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.011216][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.029157][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.040494][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.052724][ T3646] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  522.066202][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.081442][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.099536][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.109670][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.120631][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.132087][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_1
[  522.167893][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  522.177610][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  522.194979][ T6956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  522.205430][ T6956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  522.216069][ T6956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  522.225058][ T6956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  522.496641][ T7128] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  522.506829][ T3756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.520729][ T3756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.532718][ T7128] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  522.546216][ T7128] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  522.562332][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  522.586451][ T5327] device hsr_slave_0 left promiscuous mode
[  522.592945][ T5327] device hsr_slave_1 left promiscuous mode
[  522.599226][ T5327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  522.607800][ T5327] batman_adv: batadv0: Removing interface: batadv_slave_0
[  522.616489][ T5327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  522.625138][ T5327] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.633504][ T5327] device bridge_slave_1 left promiscuous mode
[  522.639706][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.650340][ T5327] device bridge_slave_0 left promiscuous mode
[  522.657354][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.684262][ T5327] device veth1_macvtap left promiscuous mode
[  522.690279][ T5327] device veth0_macvtap left promiscuous mode
[  522.696597][ T5327] device veth1_vlan left promiscuous mode
[  522.702475][ T5327] device veth0_vlan left promiscuous mode
[  523.144589][ T5327] team0 (unregistering): Port device team_slave_1 removed
[  523.187180][ T5327] team0 (unregistering): Port device team_slave_0 removed
[  523.232057][ T5327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  523.272849][ T5327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  523.701492][ T5327] bond0 (unregistering): Released all slaves
[  523.777508][ T7128] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  523.805730][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.821588][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.849889][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  523.990021][ T7128] 8021q: adding VLAN 0 to HW filter on device bond0
[  523.997266][ T7268] netlink: 36 bytes leftover after parsing attributes in process `syz.4.606'.
[  524.099469][ T3646] Bluetooth: hci1: Unknown advertising packet type: 0x14
[  524.099501][ T3646] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  524.137296][ T7128] 8021q: adding VLAN 0 to HW filter on device team0
[  524.191003][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  524.203103][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  524.210933][ T7273] netlink: 'syz.3.605': attribute type 25 has an invalid length.
[  524.238323][ T7273] netlink: 'syz.3.605': attribute type 7 has an invalid length.
[  525.007698][ T7276] netlink: 'syz.3.605': attribute type 23 has an invalid length.
[  525.015977][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'.
[  525.037095][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  525.046856][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  525.055691][ T3707] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.062507][ T3680] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  525.062926][ T3707] bridge0: port 1(bridge_slave_0) entered forwarding state
[  525.085979][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  525.101771][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  525.112225][ T3707] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.119352][ T3707] bridge0: port 2(bridge_slave_1) entered forwarding state
[  525.136852][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  525.145034][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  525.159141][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  525.169640][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  525.180539][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  525.189352][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  525.200640][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  525.211314][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  525.243095][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  525.251633][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  525.267065][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  525.277646][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  525.290463][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  525.422688][ T3680] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  525.438230][ T3680] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  525.456623][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  525.464961][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  525.477973][ T7128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.497817][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  525.507180][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  525.522799][ T3680] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  525.532032][ T3680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  525.538450][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  525.541249][ T3680] usb 5-1: SerialNumber: syz
[  525.550142][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  525.562934][ T7128] device veth0_vlan entered promiscuous mode
[  525.574661][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  525.586871][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  525.603872][ T7128] device veth1_vlan entered promiscuous mode
[  525.628874][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  525.638079][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  525.647608][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  525.656719][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  525.667384][ T7128] device veth0_macvtap entered promiscuous mode
[  525.678371][ T7128] device veth1_macvtap entered promiscuous mode
[  525.693603][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.705354][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.715840][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.727919][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.738101][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.748909][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.758814][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.769595][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.779455][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.789969][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.801485][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.809902][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  525.819246][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  525.835829][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  525.845319][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  525.864784][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.879568][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.890303][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.905929][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.916844][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.927905][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.937823][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.949719][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.959695][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.974838][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.993678][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_1
[  526.001240][ T7274] netlink: 32 bytes leftover after parsing attributes in process `syz.4.606'.
[  526.029771][ T7274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.606'.
[  526.047675][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  526.061311][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  526.077300][ T3680] usb 5-1: 0:2 : does not exist
[  526.085968][ T3680] usb 5-1: unit 5 not found!
[  526.101135][ T7128] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  526.111911][ T3680] usb 5-1: USB disconnect, device number 9
[  526.114905][ T7128] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  526.140830][ T7128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  526.148165][ T4807] udevd[4807]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  526.158063][ T7128] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  526.255494][ T3707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.283237][ T3707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.299539][ T5327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.302320][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  526.311124][ T5327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.326093][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  526.400042][ T7287] loop3: detected capacity change from 0 to 256
[  526.934725][ T7292] kAFS: unable to lookup cell '/'
[  527.152453][ T3646] ------------[ cut here ]------------
[  527.158280][ T3646] WARNING: CPU: 1 PID: 3646 at net/bluetooth/hci_conn.c:617 hci_conn_timeout+0xf8/0x1e0
[  527.168080][ T3646] Modules linked in:
[  527.171999][ T3646] CPU: 1 PID: 3646 Comm: kworker/u5:4 Not tainted 6.1.112-syzkaller #0
[  527.180354][ T3646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  527.190479][ T3646] Workqueue: hci2 hci_conn_timeout
[  527.195644][ T3646] RIP: 0010:hci_conn_timeout+0xf8/0x1e0
[  527.201205][ T3646] Code: 89 f7 e8 eb 3e 0a 00 eb 07 e8 a4 61 de f7 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d a3 ff ff e8 88 61 de f7 <0f> 0b eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 48 89
[  527.221012][ T3646] RSP: 0018:ffffc90003cbfc28 EFLAGS: 00010293
[  527.227131][ T3646] RAX: ffffffff89ac4db8 RBX: ffff888027876330 RCX: ffff88807e750000
[  527.235150][ T3646] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  527.243254][ T3646] RBP: 00000000ffffffff R08: ffffffff89ac4d21 R09: ffffed1004f0ec03
[  527.251237][ T3646] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  527.259933][ T3646] R13: 1ffff1100324d623 R14: ffff888027876000 R15: ffffffff815ae9e9
[  527.268087][ T3646] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  527.277075][ T3646] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  527.283688][ T3646] CR2: 00007f74bf4eed58 CR3: 000000005ee4e000 CR4: 00000000003506e0
[  527.291669][ T3646] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  527.299666][ T3646] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  527.307663][ T3646] Call Trace:
[  527.310953][ T3646]  <TASK>
[  527.313968][ T3646]  ? __warn+0x15a/0x520
[  527.318164][ T3646]  ? hci_conn_timeout+0xf8/0x1e0
[  527.323197][ T3646]  ? report_bug+0x2af/0x500
[  527.327760][ T3646]  ? hci_conn_timeout+0xf8/0x1e0
[  527.332748][ T3646]  ? handle_bug+0x3d/0x70
[  527.337094][ T3646]  ? exc_invalid_op+0x16/0x40
[  527.341781][ T3646]  ? asm_exc_invalid_op+0x16/0x20
[  527.346859][ T3646]  ? process_one_work+0x7a9/0x11d0
[  527.352012][ T3646]  ? hci_conn_timeout+0x61/0x1e0
[  527.357042][ T3646]  ? hci_conn_timeout+0xf8/0x1e0
[  527.362002][ T3646]  ? hci_conn_timeout+0xf8/0x1e0
[  527.367030][ T3646]  ? hci_conn_timeout+0xf8/0x1e0
[  527.372015][ T3646]  ? process_one_work+0x7a9/0x11d0
[  527.377183][ T3646]  process_one_work+0x8a9/0x11d0
[  527.382161][ T3646]  ? worker_detach_from_pool+0x260/0x260
[  527.387852][ T3646]  ? _raw_spin_lock_irqsave+0x120/0x120
[  527.393454][ T3646]  ? kthread_data+0x4e/0xc0
[  527.398040][ T3646]  ? wq_worker_running+0x97/0x190
[  527.403167][ T3646]  worker_thread+0xa47/0x1200
[  527.407902][ T3646]  ? _raw_spin_unlock+0x40/0x40
[  527.412844][ T3646]  ? release_firmware_map_entry+0x186/0x186
[  527.418756][ T3646]  ? _raw_spin_unlock+0x40/0x40
[  527.423674][ T3646]  kthread+0x28d/0x320
[  527.427777][ T3646]  ? worker_clr_flags+0x190/0x190
[  527.432851][ T3646]  ? kthread_blkcg+0xd0/0xd0
[  527.437455][ T3646]  ret_from_fork+0x1f/0x30
[  527.441951][ T3646]  </TASK>
[  527.445029][ T3646] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  527.452322][ T3646] CPU: 1 PID: 3646 Comm: kworker/u5:4 Not tainted 6.1.112-syzkaller #0
[  527.460567][ T3646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  527.470631][ T3646] Workqueue: hci2 hci_conn_timeout
[  527.475748][ T3646] Call Trace:
[  527.479018][ T3646]  <TASK>
[  527.481942][ T3646]  dump_stack_lvl+0x1e3/0x2cb
[  527.486632][ T3646]  ? nf_tcp_handle_invalid+0x642/0x642
[  527.492100][ T3646]  ? panic+0x764/0x764
[  527.496174][ T3646]  ? 0xffffffffa0000958
[  527.500348][ T3646]  ? vscnprintf+0x59/0x80
[  527.504677][ T3646]  panic+0x318/0x764
[  527.508570][ T3646]  ? __warn+0x169/0x520
[  527.512725][ T3646]  ? memcpy_page_flushcache+0xfc/0xfc
[  527.518100][ T3646]  ? ret_from_fork+0x1f/0x30
[  527.522692][ T3646]  __warn+0x348/0x520
[  527.526682][ T3646]  ? hci_conn_timeout+0xf8/0x1e0
[  527.531632][ T3646]  report_bug+0x2af/0x500
[  527.535968][ T3646]  ? hci_conn_timeout+0xf8/0x1e0
[  527.540918][ T3646]  handle_bug+0x3d/0x70
[  527.545075][ T3646]  exc_invalid_op+0x16/0x40
[  527.549577][ T3646]  asm_exc_invalid_op+0x16/0x20
[  527.554441][ T3646] RIP: 0010:hci_conn_timeout+0xf8/0x1e0
[  527.560002][ T3646] Code: 89 f7 e8 eb 3e 0a 00 eb 07 e8 a4 61 de f7 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d a3 ff ff e8 88 61 de f7 <0f> 0b eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 48 89
[  527.579608][ T3646] RSP: 0018:ffffc90003cbfc28 EFLAGS: 00010293
[  527.585676][ T3646] RAX: ffffffff89ac4db8 RBX: ffff888027876330 RCX: ffff88807e750000
[  527.593655][ T3646] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  527.601624][ T3646] RBP: 00000000ffffffff R08: ffffffff89ac4d21 R09: ffffed1004f0ec03
[  527.609590][ T3646] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  527.617554][ T3646] R13: 1ffff1100324d623 R14: ffff888027876000 R15: ffffffff815ae9e9
[  527.625518][ T3646]  ? process_one_work+0x7a9/0x11d0
[  527.630645][ T3646]  ? hci_conn_timeout+0x61/0x1e0
[  527.635577][ T3646]  ? hci_conn_timeout+0xf8/0x1e0
[  527.640517][ T3646]  ? hci_conn_timeout+0xf8/0x1e0
[  527.645450][ T3646]  ? process_one_work+0x7a9/0x11d0
[  527.650556][ T3646]  process_one_work+0x8a9/0x11d0
[  527.655511][ T3646]  ? worker_detach_from_pool+0x260/0x260
[  527.661143][ T3646]  ? _raw_spin_lock_irqsave+0x120/0x120
[  527.666687][ T3646]  ? kthread_data+0x4e/0xc0
[  527.671213][ T3646]  ? wq_worker_running+0x97/0x190
[  527.676237][ T3646]  worker_thread+0xa47/0x1200
[  527.680944][ T3646]  ? _raw_spin_unlock+0x40/0x40
[  527.685791][ T3646]  ? release_firmware_map_entry+0x186/0x186
[  527.691698][ T3646]  ? _raw_spin_unlock+0x40/0x40
[  527.696559][ T3646]  kthread+0x28d/0x320
[  527.700659][ T3646]  ? worker_clr_flags+0x190/0x190
[  527.705687][ T3646]  ? kthread_blkcg+0xd0/0xd0
[  527.710267][ T3646]  ret_from_fork+0x1f/0x30
[  527.714690][ T3646]  </TASK>
[  527.718047][ T3646] Kernel Offset: disabled
[  527.722475][ T3646] Rebooting in 86400 seconds..