last executing test programs:

4m53.120818955s ago: executing program 4 (id=109):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f000008}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x20000040)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

4m52.288101063s ago: executing program 4 (id=113):
mremap(&(0x7f00005c8000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
socket$inet6(0xa, 0x1, 0x0)
openat$dsp(0xffffff9c, &(0x7f0000000100), 0x125041, 0x0)
syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f00000000c0)='./file1\x00', 0x80000084)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0)

4m50.851969651s ago: executing program 4 (id=118):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

4m49.142681427s ago: executing program 4 (id=123):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000004, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
syz_io_uring_setup(0x7de, 0x0, 0x0, &(0x7f0000000540))
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4b4d, &(0x7f00000000c0))

4m47.877437544s ago: executing program 4 (id=125):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x408d7d46, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, 0x0, 0x0)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)

4m46.575760201s ago: executing program 4 (id=131):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

4m31.430248247s ago: executing program 32 (id=131):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

3m8.248427496s ago: executing program 1 (id=365):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
close(r2)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[])
close(r0)

3m7.945453855s ago: executing program 1 (id=367):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000c40)={{0x9, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x40000000000000, 0x100000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6bc847c6, 0xfffffcda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff7ffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xe9c76ae, 0x2, 0x0, 0x0, 0xfffffffffffffffc]})
eventfd2(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @private=0xa010100, 0x0, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900"}, 0x3c)

3m6.920548182s ago: executing program 1 (id=371):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x1d, 0x2, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0})
io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0)

3m6.806394902s ago: executing program 1 (id=373):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000004140)={[{@norecovery}, {@sysvgroups}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0xda33}}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@grpquota}]}, 0x9, 0x54f, &(0x7f0000000b00)="$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")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x40, &(0x7f0000000280), 0x1, 0x4f7, &(0x7f0000000540)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
fchown(r1, r3, r4)

3m5.665537169s ago: executing program 1 (id=377):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff6b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet6_tcp_int(r4, 0x6, 0x7, &(0x7f0000000640)=0xc50c, 0x4)
readv(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/211, 0xd3}], 0x1)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x604, &(0x7f0000001c40)="$eJzs3c9rHGUfAPDvzCZ5kzbvm/ZFii2KAQ8tSPOjFque2l7soWDBHkQ8NDRJDd20oUnB1oIpeFBQEPEq0ov/gHcpXr2JoN48C1Wk4kGlKzO72y6b3XQbsz/S+XxgNs88M7vP890nT+aZnTw7ARTWZPaQRuyPiHNJxETDtvGobpys7Xf3txvnsyWJSuW1X5NIann1/e/Vfu7OHpKI0Yj49mTE/0sby129dv3iXLlS9W7E9NryyvTqteuHl5bnLixcWLg0e+TFo8dmXpo9OrstcdbjOnX61ac+eu+tFxa/Kx9O4nicHX5nPpri2C6TMRn3aiE25g9FxLEs0eJ92amSfleALSnVfh+HI2JfTEQpX6uaiKUP+1o5oKsqpYgKUFCJ/g8FVR8H1M/tu3EePMjunKieAG2Mf6j62UiM5udGu+4mDWdG1fPdPdtQflbG3zcOfJYt0eZziKFtKKed9ZsR8WSr+JO8bnvyT3Gy+NNIG56XpWciYqT2XqRbLH+yab3Xv3+PEn9jO2TxHq/9zPJPbrH8fscPQDHdPlE7kK9naw+Of9nIsD7+iRbjn/EWx66t6Pfxr/34r368H80/I0+bxmHZmOdM65ccbs746YNTn7Qrv3H8ly1Z+fWxYC/cuRlxoCn+9/PBXHK//ZMW7Z/tcq7DMl75/pdT7bb1O/7KrYiDLc9/HlzRylLTa8sr9bym65PTi0vlhZnqY8syvvrmzS/ald/v+LP2jzbxb9b+Wd5Kh2V8eebWcrtt4w+NP/15JDmbp0ZqOW/Pra1dmY0YSU7XdmnIP7J5Xer71F8ji//Qs637/ybx5w293mH8K69fvFtNbbxK2nH7b/irkrtX6bAO7WTxz2+x/T/usIw/3rj6dFPWWD2xWfxjG18q6fQ9BwAAAAAAgCJK82uwSTp1P52mU1PVObxPxK60fHl17bnFy1cvzUccyv8fcjitX+meqK4n2fps7f9h6+tHmtafj4i9EfFpaSxfnzp/uTzf7+ABAAAAAAAAAAAAAAAAAABgQOyuzf+v36f691J1/n9H1vZ1uXZA13XzBnPAYNP/objy/r/VO7gCO5rjPxSX/g/Fpf9Dcen/UFz6PxSX/g/Fpf9Dcen/AAAAAPBY2vvM7R+TiFh/eSxfMiO1bcN9rRnQbY/exye7Ug+g90o9fRowSO5f+jf9Hwqno/H/n7UvB+x+dYA+SFpl5oODyuad/3bLZwIAAAAAAAAAAAAAXXBwv/n/UFRpfN3vKgB98i8m8vsOANjhfPU/FJdzfOBhs/hH220w/x8AAAAAAAAAAAAAemY8X5J0qnYL0PFI06mpiP9GxJ4YThaXygszEfG/iPihNPyfbH2235UGAAAAAAAAAAAAAAAAAACAx8zqtesX58rlhSuNib825DzeifpdUAelPo2JSHpf6FhEDELs3UkMNeQkEetZyw9Exa6sxkBUI82r0ec/TAAAAAAAAAAAAAAAAAAAUEANc49bO/B5j2sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL334P7/W08kD3mdfscIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxM/wQAAP//vTw5JQ==")

3m5.291627388s ago: executing program 0 (id=380):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x29a83a768e447add)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'pim6reg\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x606100, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ptrace(0x10, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r1, &(0x7f0000000800)=[{&(0x7f0000000c00)="89b1ee2c7cf3d9b4b47381c988a8", 0xe}], 0x1)

3m5.232733668s ago: executing program 1 (id=381):
openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
epoll_create1(0x0)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, r3, 0x11, 0x0, r2, @void, @value}, 0x11)

3m4.921762997s ago: executing program 33 (id=381):
openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
epoll_create1(0x0)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, r3, 0x11, 0x0, r2, @void, @value}, 0x11)

3m3.823315954s ago: executing program 0 (id=387):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x28}}, 0x4800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r4 = socket(0x11, 0xa, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r5], 0x48}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x14, 0x30, 0x200, 0x74bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

3m3.062584702s ago: executing program 0 (id=388):
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f00000000c0)={{0x3, 0x2, 0x3, 0x0, 0x1800000}, 0xffffffffffffffff, 0x0, 0x8001})

3m1.227045058s ago: executing program 0 (id=391):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000004140)={[{@norecovery}, {@sysvgroups}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0xda33}}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@grpquota}]}, 0x9, 0x54f, &(0x7f0000000b00)="$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")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x40, &(0x7f0000000280), 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
fchown(r1, r3, r4)

2m57.579784808s ago: executing program 0 (id=399):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000000)={[{@auto_da_alloc}]}, 0x1, 0x568, &(0x7f0000000c40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
read$FUSE(r4, &(0x7f00000010c0)={0x2020}, 0x2020)
write$FUSE_WRITE(r0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f0000003a80)='\t', 0x1, 0x8000c61)
pwritev2(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xf4240}], 0x1, 0x800001, 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x100001)

2m55.748741323s ago: executing program 0 (id=404):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0)
close(r2)

2m54.68663634s ago: executing program 34 (id=404):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0)
close(r2)

1m42.966128815s ago: executing program 5 (id=602):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
r1 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180), 0xd, 0x5d8, &(0x7f0000000c00)="$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")
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

1m42.075473784s ago: executing program 5 (id=607):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5edad8800000000140012800b0001006970766c616e0000f3fe028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

1m38.127823831s ago: executing program 5 (id=614):
r0 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
rt_sigaction(0x34, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000003c0))
socket$kcm(0x10, 0x2, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

1m37.201292499s ago: executing program 5 (id=617):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0)
acct(&(0x7f0000000140)='./file0\x00')

1m35.549916655s ago: executing program 5 (id=620):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
setgroups(0x0, 0x0)
getgroups(0x1, &(0x7f0000000340)=[<r0=>0xee00])
setregid(0x0, r0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYRES16, @ANYBLOB], 0x6, 0x2aa, &(0x7f0000000500)="$eJzs3T1re1UYAPDnpulN1CEZnETwgg5Ope3qkiItFDMpGdRBi21BmiC0UPAFYydXF0c/gSC4+SVc/AQKrqKbHQpX7s29Jq1paqSx/5ffb+nTc89zznNODy0d7sn7L45ODrM4vvjsl2i3k2j0oheXSXSjEbUv4preVwEAPM4u8zz+yCeWyUsior26sgCAFVr67//3Ky8JAFixt95+542dfn/3zSxrx97oy/NB8Z998XXyfOc4PoxhHMVmdOIqIv/bJN7L83zczArdeGU0Ph8UmaP3fqzG3/ktoszfik50y6br+fv93a1sYiZ/XNTxbDV/r8jfjk48P2f+/f7u9pz8GKTx6ssz9W9EJ376ID6KYRyWRUzzP9/Kstfzr//89N2ivCI/GZ8PWmW/qXzt5t61Vv/jAQAAAAAAAAAAAAAAAAAAAADgCbVR3Z3TivL+nqKpun9n7ar4Zj2yWvf6/TyT/KQeaOZ+oDTyfJzHN/X9OptZluVVx2l+M15oRvNhVg0AAAAAAAAAAAAAAAAAAACPlrOPPzk5GA6PTu8lqG8DqF/r/6/j9GZaXorFnVvTuRpVuGDkWKv7JBG3lZEU21Is4p625a7gmdtq/va7ZQds391nfdH+3E9Qn66Tg2T+HraibmnXh+SH2T5plMHPv981V3rbo3yp45fOfdRZeu3pc2UwXtAnkkWFvfbrZOeqluTmKtJyV+emr1fBTPqNs7HUef7n74rEbR0AAAAAAAAAAAAAAAAAALBS05d+5zy8WJjayFsrKwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/lfTz/9fIhhXyf+icxqnZw+8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4CfwUAAP//UZdgPQ==")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
setgroups(0x0, &(0x7f00000000c0))
utimensat(r3, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)

1m33.478645419s ago: executing program 5 (id=625):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)
r1 = userfaultfd(0x80001)
creat(0x0, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100})

1m18.288125209s ago: executing program 35 (id=625):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)
r1 = userfaultfd(0x80001)
creat(0x0, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100})

27.046516622s ago: executing program 7 (id=776):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
mq_open(&(0x7f000000bd00)='\tHQ\x92o', 0x40, 0x0, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
write$FUSE_INIT(r1, &(0x7f0000000340)={0x50}, 0x50)
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r1, 0x407, 0x2000000)
ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040))
r3 = socket(0x10, 0x2, 0x0)
sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x800248a0, 0x0)

24.827324266s ago: executing program 7 (id=771):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3}, &(0x7f0000005680), 0x0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f00000191c0)='net/dev_mcast\x00')
pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)

21.341109206s ago: executing program 7 (id=779):
r0 = socket(0x2, 0x3, 0x16)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
close(r1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
listen(r4, 0x0)
connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close_range(r0, 0xffffffffffffffff, 0x0)

20.161365383s ago: executing program 7 (id=787):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x22000406, &(0x7f0000000400)={[{@grpid}, {@noblock_validity}, {@nogrpid}, {@orlov}, {@data_err_abort}, {@grpjquota, 0x2e}, {@sb={'sb', 0x3d, 0x1}}, {@init_itable}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x800}}], [], 0x2c}, 0x0, 0x4bf, &(0x7f0000001600)="$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")
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000000080)={0x2, 0xa000, 0x8})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100)
r2 = eventfd2(0x9, 0x0)
dup3(0xffffffffffffffff, r2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x18d0, &(0x7f00000018c0)=ANY=[], 0x0, 0x150e, &(0x7f0000002080)="$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")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

17.402910506s ago: executing program 7 (id=794):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_io_uring_setup(0x119, &(0x7f0000000140)={0x0, 0xd343, 0x400}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

15.992009192s ago: executing program 8 (id=798):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x3, 0xfffffff9, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty, 0x3}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

15.782252931s ago: executing program 7 (id=800):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_restrict_self(r0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0)
umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0)
mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0)
pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00')

15.39235234s ago: executing program 36 (id=800):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_restrict_self(r0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0)
umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0)
mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0)
pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00')

14.800131379s ago: executing program 8 (id=803):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xc0ff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

13.566723456s ago: executing program 8 (id=807):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000b40)={'dummy0\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x401)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
accept4$unix(r1, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$netlink(0x10, 0x3, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8)

12.120444982s ago: executing program 3 (id=810):
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@codepage={'codepage', 0x3d, 'cp864'}}, {@type={'type', 0x3d, "3ae6f83f"}}]}, 0x1, 0x2e5, &(0x7f0000000140)="$eJzs3U1PE0Ecx/HfbFsoD8EVMCZeNCiJXoioB+OlxvTq3ZNR25IQG4iAiXoRjUfjC/DuW/BFeNH4BvTkybucHDPTadnCdkvFshS/n4RmOzuz+5/OPsx/Y60A/LfuVL99uP7D/RmpoIKkW1IkqSwVJZ3R2fLTta3VrWajnrWhgm/h/oxaLc2+OrW1RlpT1863CGL3rqjpZBmGw1p7+3veQSB3/uxPEUnj4Tz068tHHNewbEvn847hqCUH2OxoR880k2M4AIBjINz/o3CbmPZFRlEkLYbb/om6/++cnK44N5r7imxmg8T938/urHHje8qv2s33fArn1kftLPEgwZT2vB9T68jqmmCaflmljyWaWFktaqn2SvVIr1UJEtXm/Wu9dei29Yl2ISU3zdB7ayXdnWz1xs8o92qHtLLabIy7hZT45wbb4+GZT+aLuW9ivVe9M/8rWuOGyY9UvGekopKL/2rvLU75Vq6WQtpfqVSiriqn/U7OhT0EfXpZTs9IkttsPyDY7kSQFaff96y6Hyu0erfcp9VcWqu4865Hq/muVoVwJCzV1puZj1KGo91F887cMwv6qY+qJub/kYtvUYkzM+v6aHzNcGTU1vXb2rH0mkVfM953ud09XS50IgjGB+4bpAGflr3VI93UzObzF48LzWZjwy08TFl4Mr1hQknpjZRaZ/gLBWXU0fZuiXVeWnvQLdtDBGb6fRpX+m/n18F36q4fnRJ3+qRVdmdZpyT6B5+8NTkM93FfqH5W1gE5OgvWSj1WDe06hWNk07QHPRRM5BwQjpqbd5lW/udn8mFW51Mk9xJnzNOzk0x1bXG5k8F1TwVn/evkQBncVO8MLrHHaz1yRp9zXbwsXUoUGmXuMQ5xnhCmqq96wPN/AAAAAAAAAAAAAAAAAACAURP+0X/7K5tD+aZBzl0EAAAAAAAAAAAAAAAAAAAAAGDk/dXv/6b9H/H+939jfv8XGCF/AgAA///7WndM")
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0xfffffffc, 0x400, 0x0, 0x4a}, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1})
io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0)

10.935743169s ago: executing program 3 (id=811):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0xfffffffc)

9.702110856s ago: executing program 3 (id=814):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0)

9.647050255s ago: executing program 6 (id=815):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
r2 = timerfd_create(0x8, 0x80000)
clock_gettime(0x0, &(0x7f0000000040))
timerfd_gettime(r2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)

8.354899652s ago: executing program 8 (id=817):
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000040))
syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

8.292100312s ago: executing program 3 (id=818):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

7.245987239s ago: executing program 8 (id=820):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket(0x28, 0x1, 0x0)
r2 = semget$private(0x0, 0x6, 0x501)
semop(r2, &(0x7f00000000c0)=[{}, {0x0, 0x4000, 0x1800}], 0x2)
semop(r2, &(0x7f0000000180)=[{}, {0x0, 0x6}], 0x2)

7.240340139s ago: executing program 3 (id=821):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x2f)
connect$inet6(r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000580), 0x24, 0x0)

6.292624306s ago: executing program 2 (id=822):
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
link(0x0, &(0x7f0000000080)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)

6.019872635s ago: executing program 2 (id=824):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x6f, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @opaque="b73609f0daaa2d3d8593145ea609b8200783dab75a47a3c943f4c2cd151d47b8b706a2677e7b7d25e4c233f33c471dc7eff32835b16f04c0d55d3c9ab720067984df052347"}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

5.844345355s ago: executing program 6 (id=825):
r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000280)={r0, 0x12, 0xdd}, 0x0, &(0x7f0000000400)="e3ecafae9a853f69c9a1f048e8541e6add81", &(0x7f0000000700)=""/221)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4)
r1 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000580)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x41901})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.561021872s ago: executing program 2 (id=826):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000300))
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00002f9000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x10, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.520671882s ago: executing program 6 (id=827):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x5, &(0x7f00000002c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000340)=[0x0])

3.316615229s ago: executing program 3 (id=828):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f00000002c0))
r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x800, 0x2)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x94a41, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd2(0x0, 0x1)
write$UHID_CREATE2(r0, &(0x7f0000000480)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x2e, 0x9, 0x1, 0x1, 0x0, 0x8, "350b2885e70587a879fc66273a58c468400546fae0a3d2e9e580a05b7f2df9d86b7207b9c56c95212a3a05fba088"}}, 0x146)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x4000, 0x4, r4, 0x6})
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f043})
ppoll(&(0x7f0000000300)=[{r1, 0x2007}], 0x1, 0x0, 0x0, 0x0)

2.729682526s ago: executing program 2 (id=829):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r4, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

2.574796636s ago: executing program 6 (id=830):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x6, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0)
r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={'\x00', 0x0, 0xf, 0x2, 0x9, 0x8, '\x00', "c5db953e", '\x00', "00e3edff", ["e86621d9cc668c391f77c506", "3549ffffffffffff08010800", "9e00000080ffffffff00", "e000"]})

1.172905793s ago: executing program 2 (id=831):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
close_range(r0, 0xffffffffffffffff, 0x0)

226.5643ms ago: executing program 6 (id=832):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0)
write$cgroup_type(r1, 0x0, 0x0)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6)

102.15702ms ago: executing program 2 (id=833):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
openat$kvm(0xffffffffffffff9c, 0x0, 0x121240, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="0d58fa00a4a25557616d6ad626d271bc", 0x10}], 0x1}, 0x8010)
recvmmsg(r2, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/166, 0xa6}], 0x1}, 0x7ff}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x60000000}, 0x20000000)

21.87026ms ago: executing program 8 (id=834):
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x3, 0xe, 0x6}, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)

0s ago: executing program 6 (id=835):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0)
io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r3, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40)

kernel console output (not intermixed with test programs):

 family 0 port 6081 - 0
[  132.799767][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.806753][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.939825][ T4402] Bluetooth: hci5: command 0x040f tx timeout
[  133.257439][  T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.028372][ T4401] Bluetooth: hci5: command 0x0419 tx timeout
[  138.353276][ T4867] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  138.787050][ T4964] netlink: 'syz.3.187': attribute type 10 has an invalid length.
[  138.857189][ T4964] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  138.870933][ T4867] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  138.890331][ T4963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.771645][ T4867] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  139.889050][ T4867] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  140.641869][ T4981] loop3: detected capacity change from 0 to 2048
[  140.765848][ T4867] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.779011][ T4981] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  140.800945][ T4981] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.839254][ T4985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'.
[  140.998314][ T4998] fs-verity: sha512 using implementation "sha512-avx2"
[  141.062064][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  141.080817][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  141.505961][ T4867] 8021q: adding VLAN 0 to HW filter on device team0
[  141.523112][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  141.583987][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  141.613394][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.620557][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.678164][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  141.724932][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  141.768833][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.803914][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.811673][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.836494][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  142.011904][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  142.036273][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  142.068532][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  142.077286][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  142.104292][ T4402] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  142.126724][ T4867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  142.164102][ T4867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  142.189053][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  142.211669][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  142.233764][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  142.243964][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  142.253864][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  142.263582][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  142.267489][ T5013] loop1: detected capacity change from 0 to 2048
[  142.334257][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  142.386533][ T5013] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  142.389656][ T4402] usb 3-1: Using ep0 maxpacket: 32
[  142.401915][ T5013] EXT4-fs (loop1): Ignoring removed nobh option
[  142.450746][  T154] device hsr_slave_0 left promiscuous mode
[  142.467168][  T154] device hsr_slave_1 left promiscuous mode
[  142.482665][ T5013] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,nojournal_checksum,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,minixdf,nobh,,errors=continue. Quota mode: none.
[  142.502442][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.518511][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.529461][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.545796][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.553937][ T4402] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  142.565126][  T154] device bridge_slave_1 left promiscuous mode
[  142.573559][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.592817][  T154] device bridge_slave_0 left promiscuous mode
[  142.600007][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.629690][  T154] device veth1_macvtap left promiscuous mode
[  142.636214][  T154] device veth0_macvtap left promiscuous mode
[  142.646338][  T154] device veth1_vlan left promiscuous mode
[  142.654643][  T154] device veth0_vlan left promiscuous mode
[  142.734567][ T4402] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  142.768644][ T4402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.797117][ T4402] usb 3-1: Product: syz
[  142.808837][ T4402] usb 3-1: Manufacturer: syz
[  142.813488][ T4402] usb 3-1: SerialNumber: syz
[  142.919135][ T4402] usb 3-1: config 0 descriptor??
[  142.939254][ T5007] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  142.978987][ T4402] hub 3-1:0.0: bad descriptor, ignoring hub
[  142.991609][ T4402] hub: probe of 3-1:0.0 failed with error -5
[  143.033214][ T4402] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5
[  144.234945][ T4402] usb 3-1: USB disconnect, device number 4
[  144.386620][ T5032] loop1: detected capacity change from 0 to 8192
[  144.480986][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  144.481002][   T26] audit: type=1800 audit(1736834973.879:66): pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.199" name="file2" dev="loop1" ino=1048592 res=0 errno=0
[  144.567567][ T5036] loop0: detected capacity change from 0 to 4096
[  144.595796][  T154] team0 (unregistering): Port device team_slave_1 removed
[  144.663339][  T154] team0 (unregistering): Port device team_slave_0 removed
[  144.734897][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.812506][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.931241][ T5041] loop2: detected capacity change from 0 to 512
[  145.030179][ T5041] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  145.051309][  T154] bond0 (unregistering): Released all slaves
[  145.115317][ T5042] ntfs3: loop0: failed to convert "0000" to iso8859-6
[  145.124090][ T5041] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.218979][ T5042] ntfs3: loop0: failed to convert "0030" to iso8859-6
[  145.387122][ T5056] capability: warning: `syz.3.204' uses deprecated v2 capabilities in a way that may be insecure
[  145.459292][ T5059] program syz.3.204 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  145.536097][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  145.563723][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  145.598664][ T4867] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.967093][ T5082] netlink: 1 bytes leftover after parsing attributes in process `syz.1.209'.
[  147.092134][ T5082] loop1: detected capacity change from 0 to 512
[  147.261143][ T5082] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  147.286999][ T5082] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.353817][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  147.450765][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  147.635868][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  147.667486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  147.677164][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  147.693964][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  147.727507][ T4867] device veth0_vlan entered promiscuous mode
[  147.771752][ T4867] device veth1_vlan entered promiscuous mode
[  147.838389][ T4867] device veth0_macvtap entered promiscuous mode
[  147.872059][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  147.892432][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  148.019102][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  148.056804][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  148.076372][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  148.107664][ T5121] netlink: 'syz.2.216': attribute type 4 has an invalid length.
[  149.302615][ T4867] device veth1_macvtap entered promiscuous mode
[  149.318276][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  149.371874][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.435250][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.484444][ T5132] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  149.484688][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.667269][ T5132] kvm: pic: single mode not supported
[  149.682176][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.682737][ T5132] kvm: pic: non byte read
[  149.688953][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.716185][ T5132] kvm: pic: level sensitive irq not supported
[  149.716301][ T5132] kvm: pic: non byte read
[  149.731913][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.781567][ T4867] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.849587][ T5142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.220'.
[  149.880889][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  149.902675][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  149.935630][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.981546][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.154578][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.188004][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.239950][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.239974][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.239985][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.240000][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.241562][ T4867] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.241697][ T5142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.220'.
[  150.245277][ T5148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.220'.
[  150.251551][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  150.252323][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  150.401561][ T5161] loop0: detected capacity change from 0 to 1024
[  151.381537][ T5164] delete_channel: no stack
[  151.481361][ T4867] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.482232][ T4867] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.482990][ T4867] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.483365][ T4867] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.764844][ T5161] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  151.833142][ T5161] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.222: bg 0: block 200: padding at end of block bitmap is not set
[  151.840794][ T5161] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  152.700374][ T1229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.700452][ T1229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.703585][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  152.928278][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.928357][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.931814][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  153.552795][ T5182] tipc: Started in network mode
[  153.553345][ T5182] tipc: Node identity ac14140f, cluster identity 4711
[  153.576062][ T5182] tipc: New replicast peer: 255.255.255.255
[  153.593308][ T5182] tipc: Enabled bearer <udp:syz2>, priority 10
[  154.434474][ T5188] loop2: detected capacity change from 0 to 1024
[  154.589674][ T4400] tipc: Node number set to 2886997007
[  154.717417][ T5188] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,,errors=continue. Quota mode: none.
[  154.788983][ T5188] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.232989][ T5188] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.228: corrupted xattr block 128
[  155.301119][   T26] audit: type=1326 audit(1736834984.699:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a898dd29 code=0x7ffc0000
[  155.353806][ T5204] tipc: Started in network mode
[  155.373940][ T5204] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  155.377495][ T5188] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.228: corrupted xattr block 128
[  155.410449][   T26] audit: type=1326 audit(1736834984.699:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a898dd29 code=0x7ffc0000
[  155.420360][ T5204] tipc: Enabled bearer <udp:syz0>, priority 10
[  155.505944][   T26] audit: type=1804 audit(1736834984.729:69): pid=5206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.228" name="/newroot/55/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  155.680272][   T26] audit: type=1326 audit(1736834984.739:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f33a898dd29 code=0x7ffc0000
[  155.808291][   T26] audit: type=1326 audit(1736834984.739:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a898dd29 code=0x7ffc0000
[  155.923933][   T26] audit: type=1326 audit(1736834984.739:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a898dd29 code=0x7ffc0000
[  155.982606][   T26] audit: type=1326 audit(1736834984.739:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f33a898dd29 code=0x7ffc0000
[  156.075977][ T5230] loop0: detected capacity change from 0 to 2048
[  156.085983][   T26] audit: type=1326 audit(1736834984.739:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a898dd29 code=0x7ffc0000
[  156.114709][   T26] audit: type=1326 audit(1736834984.739:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a898dd29 code=0x7ffc0000
[  156.175959][   T26] audit: type=1326 audit(1736834984.739:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f33a898dd29 code=0x7ffc0000
[  156.256988][ T5230] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.236: bad orphan inode 8192
[  156.307431][ T5230] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  157.560268][ T4215] tipc: Node number set to 4269801491
[  158.347166][ T5252] loop2: detected capacity change from 0 to 2048
[  158.357370][ T5257] device vlan2 entered promiscuous mode
[  158.414722][ T5257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'.
[  158.526569][ T5252] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  158.578520][ T5252] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.175055][ T5257] device hsr_slave_1 left promiscuous mode
[  160.648176][ T4250] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  161.089242][ T4250] usb 3-1: unable to get BOS descriptor or descriptor too short
[  161.766725][ T4250] usb 3-1: config 1 interface 0 has no altsetting 0
[  162.089896][ T4250] usb 3-1: string descriptor 0 read error: -22
[  162.096180][ T4250] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.40
[  162.170143][ T4250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.286209][ T4250] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7
[  162.469959][ T3531] bcm5974 3-1:1.0: could not read from device
[  162.525271][ T4250] usb 3-1: USB disconnect, device number 5
[  164.265503][ T5323] loop0: detected capacity change from 0 to 2048
[  164.532683][ T5323] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  164.543717][ T5323] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.728646][ T4214] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  164.734959][ T5332] loop1: detected capacity change from 0 to 32768
[  165.368231][ T4214] usb 4-1: Using ep0 maxpacket: 8
[  165.681813][ T4214] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  165.717220][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.765489][ T4214] usb 4-1: Product: syz
[  165.773596][ T4214] usb 4-1: Manufacturer: syz
[  165.783736][ T4214] usb 4-1: SerialNumber: syz
[  165.795756][ T4214] usb 4-1: config 0 descriptor??
[  165.860694][ T4214] gspca_main: sq930x-2.14.0 probing 2770:930c
[  166.519351][ T5388] loop0: detected capacity change from 0 to 128
[  166.738350][ T4215] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  166.964702][ T5390] udc-core: couldn't find an available UDC or it's busy
[  167.057366][ T5390] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  167.168717][ T4215] usb 2-1: unable to get BOS descriptor or descriptor too short
[  167.299147][ T4215] usb 2-1: config 1 interface 0 has no altsetting 0
[  167.801339][ T4215] usb 2-1: string descriptor 0 read error: -22
[  167.824838][ T4215] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.40
[  168.350601][ T4215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.491972][ T4215] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input8
[  168.937218][ T5398] loop5: detected capacity change from 0 to 32768
[  169.022855][ T4211] usb 2-1: USB disconnect, device number 3
[  169.081811][ T3531] bcm5974 2-1:1.0: could not read from device
[  169.155179][ T5398] JBD2: Ignoring recovery information on journal
[  169.165175][ T5398] jbd2_journal_bmap: journal block not found at offset 64 on loop5-27
[  169.174419][ T5398] JBD2: bad block at offset 64
[  169.211890][ T5398] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  169.228342][ T4214] gspca_sq930x: ucbus_write failed -71
[  169.236947][ T4214] sq930x: probe of 4-1:0.0 failed with error -71
[  169.241062][ T5160] bcm5974 2-1:1.0: could not read from device
[  169.253973][ T4214] usb 4-1: USB disconnect, device number 2
[  169.354043][ T4434] attempt to access beyond end of device
[  169.354043][ T4434] loop0: rw=1, want=1041, limit=128

syzkaller
syzkaller login: [  171.274414][ T4867] ocfs2: Unmounting device (7,5) on (node local)
[  171.359982][ T5426] loop1: detected capacity change from 0 to 2048
[  171.521840][ T5426] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  171.553647][ T5426] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.998061][ T5440] loop0: detected capacity change from 0 to 40427
[  172.093213][ T5440] F2FS-fs (loop0): invalid crc value
[  172.133644][ T5440] F2FS-fs (loop0): Found nat_bits in checkpoint
[  172.147737][ T5445] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  172.154859][ T5445] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  172.214819][ T5445] vhci_hcd vhci_hcd.0: Device attached
[  172.227843][ T5440] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  172.254904][ T5440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  172.295947][ T5445] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  172.304560][ T5460] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  172.312684][ T5445] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  172.380916][ T5459] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  172.406258][ T5445] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  172.418291][ T4250] vhci_hcd: vhci_device speed not set
[  172.434098][ T5445] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  172.508183][ T4250] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  172.568830][ T5448] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  172.622988][ T5445] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  173.347000][ T5445] vhci_hcd vhci_hcd.0: port 0 already used
[  173.742600][ T5479] loop1: detected capacity change from 0 to 32768
[  173.882920][ T5485] loop3: detected capacity change from 0 to 2048
[  173.900166][ T5479] JBD2: Ignoring recovery information on journal
[  173.910247][ T5479] jbd2_journal_bmap: journal block not found at offset 64 on loop1-27
[  173.918573][ T5479] JBD2: bad block at offset 64
[  173.967087][ T5485] NILFS (loop3): invalid segment: Sequence number mismatch
[  174.021783][ T5485] NILFS (loop3): trying rollback from an earlier position
[  174.048286][ T5447] vhci_hcd: connection reset by peer
[  174.094175][ T4434] vhci_hcd: stop threads
[  174.109434][ T4434] vhci_hcd: release socket
[  174.166784][ T5479] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  174.194951][ T4434] vhci_hcd: disconnect device
[  174.196538][ T5485] NILFS (loop3): recovery complete
[  175.541739][ T5502] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  178.391157][ T4167] ocfs2: Unmounting device (7,1) on (node local)
[  178.545416][ T5514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  178.610219][ T4250] vhci_hcd: vhci_device speed not set
[  178.715528][ T5514] device bridge_slave_0 left promiscuous mode
[  178.819020][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.945204][ T5514] device bridge_slave_1 left promiscuous mode
[  179.965879][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.223583][ T5537] loop1: detected capacity change from 0 to 1024
[  181.555628][ T5514] bond0: (slave bond_slave_0): Releasing backup interface
[  181.634779][ T5514] bond0: (slave bond_slave_1): Releasing backup interface
[  181.740450][ T5514] team0: Port device team_slave_0 removed
[  181.802257][ T5514] team0: Port device team_slave_1 removed
[  181.811987][ T5550] loop2: detected capacity change from 0 to 256
[  181.817936][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.826438][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.841163][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.849064][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.868905][ T5550] exfat: Unknown parameter 'ÿÿÿÿ0x00000000000000000xffffffffffffffffÿ'
[  181.890395][ T5519] team0: Mode changed to "loadbalance"
[  184.055404][ T5559] loop2: detected capacity change from 0 to 256
[  184.507064][ T5575] loop3: detected capacity change from 0 to 16
[  186.028344][ T5585] fuse: Bad value for 'fd'
[  186.068559][ T4250] Bluetooth: hci2: command 0x0406 tx timeout
[  186.074697][ T4250] Bluetooth: hci3: command 0x0406 tx timeout
[  186.091259][ T5591] mmap: syz.5.310 (5591) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  186.389694][ T4211] Bluetooth: hci0: command 0x0406 tx timeout
[  186.395762][ T4211] Bluetooth: hci1: command 0x0406 tx timeout
[  186.520244][   T26] kauditd_printk_skb: 26 callbacks suppressed
[  186.520260][   T26] audit: type=1326 audit(1736835015.919:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz.0.314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33a898dd29 code=0x0
[  188.198481][ T5609] netlink: 'syz.3.312': attribute type 1 has an invalid length.
[  188.207546][ T5609] netlink: 224 bytes leftover after parsing attributes in process `syz.3.312'.
[  189.506223][ T5619] loop2: detected capacity change from 0 to 512
[  189.686028][ T5619] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,min_batch_time=0x0000000000000029,minixdf,,errors=continue. Quota mode: writeback.
[  189.741419][ T5619] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  191.137798][ T5636] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  191.176937][ T5636] FAT-fs (loop1): unable to read boot sector
[  192.452036][ T5657] loop5: detected capacity change from 0 to 1024
[  192.985259][ T5664] kernel profiling enabled (shift: 6)
[  193.179575][ T5668] loop5: detected capacity change from 0 to 1024
[  193.312900][ T5668] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  193.682668][ T5668] EXT4-fs (loop5): orphan cleanup on readonly fs
[  194.236578][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.243139][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.591520][ T5668] EXT4-fs error (device loop5): ext4_free_blocks:6223: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  194.723316][ T5668] EXT4-fs (loop5): Remounting filesystem read-only
[  194.770269][ T5668] EXT4-fs (loop5): 1 truncate cleaned up
[  194.804669][ T5668] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000000,grpid,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback.
[  194.888202][ T5685] loop1: detected capacity change from 0 to 512
[  194.954414][ T5685] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  195.004518][ T5689] loop2: detected capacity change from 0 to 2048
[  195.014915][ T5685] EXT4-fs (loop1): 1 truncate cleaned up
[  195.048332][ T5685] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  195.091059][ T5693] loop0: detected capacity change from 0 to 256
[  195.190941][ T5693] exfat: Unknown parameter '²áSÌh_‚&†aÐúÊ^©Ë@RY»ÊécayrÍïFzQ>Pß�†º*Ù¹àV£µ8‡‰d|ëCüŸpÅIýÑ7°7ò"€T©U®ûT¹ªCH{W¶Ž.H K; ^­j¡_—]Ñ7ò5³q•Yçb¯Yþ•ÉF'
[  195.220526][ T5689] NILFS (loop2): invalid segment: Sequence number mismatch
[  195.227833][ T5689] NILFS (loop2): trying rollback from an earlier position
[  195.364564][ T5689] NILFS (loop2): recovery complete
[  195.416292][ T5708] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.542896][ T5709] loop0: detected capacity change from 0 to 512
[  197.695472][ T5726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.340'.
[  197.886208][ T5726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.340'.
[  199.227359][ T5752] netlink: 96 bytes leftover after parsing attributes in process `syz.2.345'.
[  199.420313][ T5760] loop1: detected capacity change from 0 to 256
[  199.521815][ T5762] loop2: detected capacity change from 0 to 512
[  199.886620][ T5762] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.346: invalid block
[  199.912567][ T5762] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.346: invalid indirect mapped block 10 (level 1)
[  199.932721][ T5762] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.346: invalid indirect mapped block 8 (level 1)
[  199.952026][ T5762] EXT4-fs (loop2): 1 truncate cleaned up
[  199.957807][ T5762] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,user_xattr,,errors=continue. Quota mode: none.
[  200.560284][ T5760] exfat: Deprecated parameter 'utf8'
[  200.565703][ T5760] exfat: Deprecated parameter 'namecase'
[  200.581649][ T5760] exfat: Deprecated parameter 'utf8'
[  201.675879][ T5760] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  202.567749][ T5796] loop0: detected capacity change from 0 to 64
[  203.048330][   T26] audit: type=1800 audit(1736835032.349:104): pid=5796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.349" name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
[  203.607577][ T5809] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.046276][ T5809] device syzkaller0 entered promiscuous mode
[  204.073744][ T5808] tipc: Resetting bearer <eth:syzkaller0>
[  204.239632][ T5824] loop0: detected capacity change from 0 to 256
[  204.247380][ T5824] exfat: Unknown parameter 'ÿÿÿÿ0x00000000000000000xffffffffffffffffÿ'
[  204.253383][ T5808] tipc: Disabling bearer <eth:syzkaller0>
[  205.275829][ T4213] tipc: Node number set to 90814682
[  205.447741][ T5835] loop0: detected capacity change from 0 to 256
[  206.170401][ T5839] device batadv0 entered promiscuous mode
[  207.125276][ T5839] device macvtap1 entered promiscuous mode
[  207.181267][ T5824] loop0: detected capacity change from 0 to 512
[  207.195286][ T5839] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  207.539387][ T5858] loop3: detected capacity change from 0 to 512
[  207.656412][ T5858] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.363: invalid block
[  207.669138][ T5858] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.363: invalid indirect mapped block 10 (level 1)
[  207.683834][ T5858] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.363: invalid indirect mapped block 8 (level 1)
[  207.701599][ T5858] EXT4-fs (loop3): 1 truncate cleaned up
[  207.707280][ T5858] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,user_xattr,,errors=continue. Quota mode: none.
[  208.767031][ T5878] loop0: detected capacity change from 0 to 512
[  208.937864][ T5878] EXT4-fs (loop0): Ignoring removed nobh option
[  208.977733][ T5878] EXT4-fs (loop0): Ignoring removed nobh option
[  209.033269][ T5878] EXT4-fs (loop0): Unrecognized mount option "uid<00000000000000000000" or missing value
[  209.250610][ T5839] device batadv0 left promiscuous mode
[  209.498355][ T5889] netlink: 830 bytes leftover after parsing attributes in process `syz.3.368'.
[  209.641496][ T5892] loop5: detected capacity change from 0 to 256
[  209.737111][ T5892] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d)
[  209.764334][ T5892] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  210.006747][ T5904] loop0: detected capacity change from 0 to 256
[  210.096628][ T5908] loop1: detected capacity change from 0 to 1024
[  210.120199][ T5904] exfat: Deprecated parameter 'namecase'
[  210.135710][ T5904] exfat: Deprecated parameter 'utf8'
[  210.202810][ T5904] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66cd20, utbl_chksum : 0xe619d30d)
[  210.220036][ T5908] EXT4-fs (loop1): Invalid want_extra_isize 7
[  210.287372][ T5904] exFAT-fs (loop0): failed to load alloc-bitmap
[  210.348393][ T5904] exFAT-fs (loop0): failed to recognize exfat type
[  210.362892][ T5908] loop1: detected capacity change from 0 to 512
[  210.492974][ T5904] loop0: detected capacity change from 0 to 256
[  210.531407][ T5908] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  210.543628][ T5908] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  210.559139][ T5904] exfat: Unknown parameter '²áSÌh_‚&†aÐúÊ^©Ë@RY»ÊécayrÍïFzQ>Pß�†º*Ù¹àV£µ8‡‰d|ëCüŸpÅIýÑ7°7ò"€T©U®ûT¹ªCH{W¶Ž.H K; ^­j¡_—]Ñ7ò5³q•Yçb¯Yþ•ÉF'
[  210.634236][ T5908] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.373: bg 0: bad block bitmap checksum
[  210.667514][ T5908] Quota error (device loop1): write_blk: dquota write failed
[  210.687718][ T5908] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  210.712552][ T5908] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.373: Failed to acquire dquot type 0
[  210.795754][ T4277] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.836836][ T5904] loop0: detected capacity change from 0 to 512
[  210.883613][ T5922] netlink: 44 bytes leftover after parsing attributes in process `syz.3.376'.
[  211.002937][ T4277] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.354839][ T4277] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.620163][ T4277] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.649222][ T5959] loop6: detected capacity change from 0 to 524287999
[  212.728744][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.740017][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  212.798592][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.809584][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  212.979727][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.990729][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.088452][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'.
[  213.166041][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  213.177113][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.216601][ T5971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.387'.
[  213.260010][ T5946] chnl_net:caif_netlink_parms(): no params data found
[  213.299100][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  213.310083][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.461139][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  213.472107][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.538808][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  213.549764][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.560060][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  213.571202][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.579321][ T5959] ldm_validate_partition_table(): Disk read failed.
[  213.587959][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  213.598966][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.639254][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  213.650285][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.746579][ T5959] Dev loop6: unable to read RDB block 0
[  213.805206][ T5959]  loop6: unable to read partition table
[  213.833103][ T5959] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  213.846396][ T1107] Bluetooth: hci0: command 0x0409 tx timeout
[  214.033155][ T5963] ldm_validate_partition_table(): Disk read failed.
[  214.078854][ T5963] Dev loop6: unable to read RDB block 0
[  214.099883][ T5963]  loop6: unable to read partition table
[  214.115551][ T5963] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  214.115304][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.327532][ T3546] ldm_validate_partition_table(): Disk read failed.
[  215.357057][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.365388][ T3546] Dev loop6: unable to read RDB block 0
[  215.557071][ T5946] device bridge_slave_0 entered promiscuous mode
[  215.598972][ T5999] loop0: detected capacity change from 0 to 1024
[  215.604365][ T1107] Bluetooth: hci4: command 0x0409 tx timeout
[  215.617096][ T3546]  loop6: unable to read partition table
[  215.625910][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.639558][ T5999] EXT4-fs (loop0): Invalid want_extra_isize 7
[  215.647135][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.539178][   T21] Bluetooth: hci0: command 0x041b tx timeout
[  216.597848][ T5946] device bridge_slave_1 entered promiscuous mode
[  216.792797][ T5999] loop0: detected capacity change from 0 to 512
[  216.896367][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.305888][ T5999] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  217.701455][ T5999] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  217.743098][ T4400] Bluetooth: hci4: command 0x041b tx timeout
[  217.792857][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.955962][ T5999] EXT4-fs error (device loop0): ext4_validate_block_bitmap:420: comm syz.0.391: bg 0: bad block bitmap checksum
[  218.031499][ T5946] team0: Port device team_slave_0 added
[  218.132570][ T5999] Quota error (device loop0): write_blk: dquota write failed
[  218.150030][ T5972] chnl_net:caif_netlink_parms(): no params data found
[  218.173873][ T5946] team0: Port device team_slave_1 added
[  218.193003][ T5999] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  219.012489][ T5999] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.391: Failed to acquire dquot type 0
[  219.149200][ T4402] Bluetooth: hci0: command 0x040f tx timeout
[  219.179667][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.193041][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.253684][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.290912][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.316355][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.342748][    C1] vkms_vblank_simulate: vblank timer overrun
[  219.396609][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.820600][ T4402] Bluetooth: hci4: command 0x040f tx timeout
[  220.230257][ T6040] loop3: detected capacity change from 0 to 1024
[  220.756880][ T6046] loop3: detected capacity change from 0 to 512
[  220.770901][ T5946] device hsr_slave_0 entered promiscuous mode
[  220.798463][ T5946] device hsr_slave_1 entered promiscuous mode
[  220.805207][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  220.814939][ T5946] Cannot create hsr debugfs directory
[  220.873857][ T6046] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  220.965991][ T6046] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.075263][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.124241][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.183897][ T5972] device bridge_slave_0 entered promiscuous mode
[  221.218598][ T4400] Bluetooth: hci0: command 0x0419 tx timeout
[  221.260903][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.277397][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.285905][ T5972] device bridge_slave_1 entered promiscuous mode
[  221.479095][ T6055] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.403: corrupted inode contents
[  221.514781][ T6055] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #2: comm syz.3.403: mark_inode_dirty error
[  221.531013][ T6055] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.403: corrupted inode contents
[  221.546203][ T6055] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.403: mark_inode_dirty error
[  221.950809][ T4400] Bluetooth: hci4: command 0x0419 tx timeout
[  222.202081][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.242389][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.285764][   T26] audit: type=1326 audit(1736835051.679:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  222.347031][   T26] audit: type=1326 audit(1736835051.719:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  222.457076][   T26] audit: type=1326 audit(1736835051.729:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  222.490972][   T26] audit: type=1326 audit(1736835051.729:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  222.950402][   T26] audit: type=1326 audit(1736835051.729:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  222.972819][    C1] vkms_vblank_simulate: vblank timer overrun
[  223.386824][   T26] audit: type=1326 audit(1736835051.729:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  223.430179][   T26] audit: type=1326 audit(1736835051.729:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  223.471455][   T26] audit: type=1326 audit(1736835051.729:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  223.481531][ T5972] team0: Port device team_slave_0 added
[  223.493776][    C1] vkms_vblank_simulate: vblank timer overrun
[  223.500405][   T26] audit: type=1326 audit(1736835051.729:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  223.530624][   T26] audit: type=1326 audit(1736835051.729:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  223.553413][   T26] audit: type=1326 audit(1736835051.729:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  223.575828][    C1] vkms_vblank_simulate: vblank timer overrun
[  223.582174][   T26] audit: type=1326 audit(1736835051.729:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  223.606813][   T26] audit: type=1326 audit(1736835051.729:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  223.629274][   T26] audit: type=1326 audit(1736835051.729:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  223.631527][ T5972] team0: Port device team_slave_1 added
[  223.651860][   T26] audit: type=1326 audit(1736835051.729:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  223.839459][ T4277] device hsr_slave_0 left promiscuous mode
[  223.846281][ T4277] device hsr_slave_1 left promiscuous mode
[  223.865322][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.883676][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.896826][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.910265][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.926022][ T4277] device bridge_slave_1 left promiscuous mode
[  223.934898][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.952030][ T4277] device bridge_slave_0 left promiscuous mode
[  223.966136][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.987474][ T4277] device veth1_macvtap left promiscuous mode
[  224.000714][ T4277] device veth0_macvtap left promiscuous mode
[  224.008886][ T4277] device veth1_vlan left promiscuous mode
[  224.047570][ T4277] device veth0_vlan left promiscuous mode
[  225.065594][ T6087] loop2: detected capacity change from 0 to 1024
[  225.120260][ T6087] EXT4-fs (loop2): Ignoring removed oldalloc option
[  225.163617][ T4277] team0 (unregistering): Port device team_slave_1 removed
[  225.167347][ T6087] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000001,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  225.204349][ T4277] team0 (unregistering): Port device team_slave_0 removed
[  225.236657][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.253268][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.350082][ T4277] bond0 (unregistering): Released all slaves
[  225.447355][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.456237][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.482543][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.510216][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.517191][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.569553][ T6095] loop3: detected capacity change from 0 to 512
[  225.578514][ T4158] Bluetooth: hci1: command 0x0409 tx timeout
[  225.578885][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.678719][ T6095] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback.
[  225.695742][ T6095] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  226.577061][ T5972] device hsr_slave_0 entered promiscuous mode
[  226.590790][ T5972] device hsr_slave_1 entered promiscuous mode
[  226.597689][ T5972] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  226.606618][ T5972] Cannot create hsr debugfs directory
[  226.848416][ T6104] loop2: detected capacity change from 0 to 1024
[  227.155044][ T6104] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  227.325913][ T6104] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.635739][ T6104] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.414: bg 0: block 393: padding at end of block bitmap is not set
[  227.661362][   T21] Bluetooth: hci1: command 0x041b tx timeout
[  227.707901][ T6072] chnl_net:caif_netlink_parms(): no params data found
[  229.181432][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.199592][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.216136][ T6072] device bridge_slave_0 entered promiscuous mode
[  229.236854][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.259036][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.267652][ T6072] device bridge_slave_1 entered promiscuous mode
[  229.363613][ T6072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.382091][ T5972] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  229.443635][ T6072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.472923][ T5972] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  229.519945][ T5972] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  229.533772][ T5972] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  229.576587][ T6072] team0: Port device team_slave_0 added
[  229.614215][ T6072] team0: Port device team_slave_1 added
[  229.698678][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.707190][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.737900][ T6072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.748815][ T4400] Bluetooth: hci1: command 0x040f tx timeout
[  229.759000][ T5946] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  229.790539][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.802274][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.830151][ T6072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.848270][ T5946] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  229.909154][ T5946] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  230.372677][ T6150] sp0: Synchronizing with TNC
[  231.039235][ T5946] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  231.090583][ T6072] device hsr_slave_0 entered promiscuous mode
[  231.101747][ T6072] device hsr_slave_1 entered promiscuous mode
[  231.116253][ T6072] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  231.130739][ T6072] Cannot create hsr debugfs directory
[  231.306651][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.547966][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  231.579295][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  231.692883][ T5972] 8021q: adding VLAN 0 to HW filter on device team0
[  231.761805][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  231.771911][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  231.791307][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.798464][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.818249][ T1107] Bluetooth: hci1: command 0x0419 tx timeout
[  231.847430][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  231.941085][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  231.980455][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.987575][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.088817][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  232.157050][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  232.206655][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  232.258589][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  232.299656][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  232.380261][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  232.398805][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  232.429048][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  232.446555][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.475724][ T6072] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  232.501941][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  232.521361][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  232.546873][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  232.558969][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  232.590629][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  232.652392][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  232.669158][ T6072] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  232.697208][ T5946] 8021q: adding VLAN 0 to HW filter on device team0
[  232.730976][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  232.742646][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  232.764621][ T6072] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  232.797314][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  232.817504][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  232.851633][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.858831][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.891602][ T6072] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  232.925761][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  232.941961][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  232.961498][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  232.998837][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.005940][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.116267][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  233.160968][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  233.330985][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  233.546819][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  233.913095][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  233.951092][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  234.000662][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  234.071325][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  234.081662][ T6226] loop3: detected capacity change from 0 to 1764
[  234.100099][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  234.143694][ T6220] netlink: 72 bytes leftover after parsing attributes in process `syz.2.429'.
[  234.183642][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  234.234792][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  234.245704][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  234.257039][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  234.414159][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  234.447463][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  234.578629][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.055663][ T6072] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.168760][ T4277] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.326002][ T4277] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.460951][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  235.469572][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  235.477116][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  235.506954][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  235.532393][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.562398][ T4277] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.617238][ T6072] 8021q: adding VLAN 0 to HW filter on device team0
[  235.745373][ T4277] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.847778][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  235.879878][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  235.888596][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.895691][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.904650][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  235.924923][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  235.950859][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  235.997548][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.004766][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.973545][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  236.989807][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  237.029708][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  237.311830][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  237.339368][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  237.464917][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  237.630911][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  237.910214][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  237.952668][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  237.988699][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  238.016702][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  238.066611][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  238.092910][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  238.102329][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  238.111166][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  238.119615][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  238.141536][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  238.154055][ T5972] device veth0_vlan entered promiscuous mode
[  238.206649][ T6290] loop3: detected capacity change from 0 to 512
[  238.269188][ T5972] device veth1_vlan entered promiscuous mode
[  238.277031][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  238.310412][ T6290] EXT4-fs (loop3): Ignoring removed nobh option
[  238.316419][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  238.383586][ T6290] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  238.401063][ T6290] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  238.416850][ T6290] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #13: comm syz.3.439: casefold flag without casefold feature
[  238.438947][ T6290] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.439: couldn't read orphan inode 13 (err -117)
[  238.454250][ T6290] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback.
[  238.460848][ T4277] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.553623][ T5972] device veth0_macvtap entered promiscuous mode
[  238.562962][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  238.573155][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  238.582415][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  238.592220][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  238.626143][ T4277] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.651250][ T5972] device veth1_macvtap entered promiscuous mode
[  238.671107][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  238.682772][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  238.696226][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  238.707534][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  238.716920][ T5946] device veth0_vlan entered promiscuous mode
[  238.753214][ T4277] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.783693][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  238.798713][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  238.813910][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.826095][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.838332][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.849561][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.862683][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.882537][ T5946] device veth1_vlan entered promiscuous mode
[  238.906732][ T6072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.922791][ T4277] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.950072][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  238.966000][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  238.997037][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  239.047078][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.070211][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.118812][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.140445][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.170168][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.193894][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.206912][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.238628][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  239.259459][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  239.300443][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  239.335144][ T5972] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.359238][ T5972] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.396858][ T5972] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.409362][ T5972] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.446666][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'.
[  239.503117][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  239.513327][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  239.552359][ T5946] device veth0_macvtap entered promiscuous mode
[  239.646758][ T5946] device veth1_macvtap entered promiscuous mode
[  239.729696][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  239.749209][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  239.759634][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  239.776136][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  239.806332][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.819832][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.830418][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.847778][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.868100][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.908277][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.920310][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.957539][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  239.960422][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.984899][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  239.987372][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.039737][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.051040][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.061488][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.073777][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.084177][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.095125][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.105444][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.117177][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.135943][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.152412][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  240.164424][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  240.173757][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  240.182267][ T4213] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  240.191573][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  240.200947][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  240.210153][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  240.218498][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  240.236270][ T4277] tipc: Disabling bearer <udp:syz2>
[  240.252073][ T4277] tipc: Left network mode
[  240.255145][ T5946] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.272944][ T5946] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.289727][ T5946] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.307705][ T5946] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.343800][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.355616][ T4277] tipc: Disabling bearer <udp:syz0>
[  240.361221][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.385650][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  240.388373][ T4213] usb 3-1: device descriptor read/64, error -71
[  240.393674][ T4277] tipc: Left network mode
[  240.403883][ T6354] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  240.430257][ T6072] device veth0_vlan entered promiscuous mode
[  240.500057][ T6072] device veth1_vlan entered promiscuous mode
[  240.735539][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.735817][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  240.748333][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.761017][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  240.774106][ T6072] device veth0_macvtap entered promiscuous mode
[  240.807956][ T6072] device veth1_macvtap entered promiscuous mode
[  240.864383][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  240.876300][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  240.894838][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  240.902893][ T4250] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  241.000011][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.018966][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.105859][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.206189][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.309051][ T4250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.374258][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.406838][ T4250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.513784][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.544713][ T4250] usb 4-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00
[  241.688440][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.716814][ T4250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.869496][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.902701][ T4250] usb 4-1: config 0 descriptor??
[  241.947124][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.033354][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.051681][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.449'.
[  242.064477][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.074151][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  242.083719][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  242.096773][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  242.183978][ T6385] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  242.195636][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.229384][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.249337][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.261084][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.293091][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.315917][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.336392][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.377707][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.408100][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.439446][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.469643][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.508845][ T4250] usbhid 4-1:0.0: can't add hid device: -71
[  242.515388][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  242.534151][ T4250] usbhid: probe of 4-1:0.0 failed with error -71
[  242.553700][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  242.580867][ T4250] usb 4-1: USB disconnect, device number 3
[  242.592139][ T6396] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  242.609952][ T6072] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.632884][ T6072] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.657964][ T6072] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.678215][ T6072] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.121822][  T263] block nbd6: Attempted send on invalid socket
[  243.131250][  T263] print_req_error: 41 callbacks suppressed
[  243.131295][  T263] blk_update_request: I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  243.157937][  T263] block nbd6: Attempted send on invalid socket
[  243.164355][  T263] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  243.179723][  T263] block nbd6: Attempted send on invalid socket
[  243.186064][  T263] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  243.208940][  T263] block nbd6: Attempted send on invalid socket
[  243.215286][  T263] blk_update_request: I/O error, dev nbd6, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  243.231022][  T263] block nbd6: Attempted send on invalid socket
[  243.237363][  T263] blk_update_request: I/O error, dev nbd6, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  243.251470][  T263] block nbd6: Attempted send on invalid socket
[  243.257759][  T263] blk_update_request: I/O error, dev nbd6, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  243.272975][ T6401] VFS: unable to find oldfs superblock on device nbd6
[  243.354117][ T6404] loop2: detected capacity change from 0 to 256
[  243.379787][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.436293][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.608999][ T6404] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  243.637314][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  243.674982][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.146351][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  244.649086][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.766717][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  246.442153][ T6440] xt_NFQUEUE: number of queues (1280) out of range (got 65792)
[  248.105053][ T6445] loop5: detected capacity change from 0 to 1024
[  248.323995][ T6445] hfsplus: invalid btree flag
[  248.333028][ T6445] hfsplus: failed to load catalog file
[  248.733893][ T6449] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  249.390460][ T4277] device hsr_slave_0 left promiscuous mode
[  249.403835][ T4277] device hsr_slave_1 left promiscuous mode
[  249.496627][ T4277] device hsr_slave_0 left promiscuous mode
[  249.525678][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.583286][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.648324][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.676989][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.823317][ T4277] device bridge_slave_1 left promiscuous mode
[  249.895797][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.584374][ T4277] device bridge_slave_0 left promiscuous mode
[  250.608800][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.545214][ T4277] device veth0 left promiscuous mode
[  251.633526][ T4277] device veth1_macvtap left promiscuous mode
[  251.678641][ T4277] device veth0_macvtap left promiscuous mode
[  251.762135][ T4277] device veth1_macvtap left promiscuous mode
[  251.778267][ T4277] device veth0_macvtap left promiscuous mode
[  251.801744][ T4277] device veth1_vlan left promiscuous mode
[  251.828417][ T4277] device veth0_vlan left promiscuous mode
[  253.414880][ T6506] loop7: detected capacity change from 0 to 1024
[  253.701500][ T4277] bond0 (unregistering): Released all slaves
[  253.994797][ T4277] team0 (unregistering): Port device team_slave_1 removed
[  254.014564][ T4277] team0 (unregistering): Port device team_slave_0 removed
[  254.039020][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.059832][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.210431][ T4277] bond0 (unregistering): Released all slaves
[  254.390441][ T6503] netlink: 76 bytes leftover after parsing attributes in process `syz.6.475'.
[  254.878412][ T4211] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  255.161121][ T4211] usb 8-1: Using ep0 maxpacket: 8
[  255.668823][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.677282][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  255.998350][ T4211] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  256.112637][ T4211] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.128832][ T4211] usb 8-1: config 0 descriptor??
[  256.403016][ T4211] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  256.428325][   T13] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  256.818284][   T13] usb 7-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=be.42
[  256.830523][   T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.741079][   T13] usb 7-1: config 0 descriptor??
[  257.781664][   T13] ldusb 7-1:0.0: Interrupt in endpoint not found
[  257.895163][ T6574] device syzkaller0 entered promiscuous mode
[  258.148677][   T13] usb 7-1: USB disconnect, device number 2
[  258.260281][ T4211] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  258.281170][ T4211] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  258.382540][ T4211] asix: probe of 8-1:0.0 failed with error -71
[  258.442401][ T4211] usb 8-1: USB disconnect, device number 2
[  259.945394][ T6608] sg_write: data in/out 1048540/17 bytes for SCSI command 0x0-- guessing data in;
[  259.945394][ T6608]    program syz.2.494 not setting count and/or reply_len properly
[  262.018179][ T6627] loop5: detected capacity change from 0 to 128
[  262.273901][ T6627] VFS: Found a Xenix FS (block size = 512) on device loop5
[  262.840272][ T6645] xt_connbytes: Forcing CT accounting to be enabled
[  262.847616][ T6645] Cannot find add_set index 0 as target
[  262.934948][ T6644] netdevsim netdevsim6: Direct firmware load for /
[  262.934948][ T6644]  failed with error -2
[  263.492689][ T6645] sysv_free_block: getblk() failed
[  263.498473][ T6645] sysv_free_block: getblk() failed
[  263.504168][ T6645] sysv_free_block: getblk() failed
[  263.509520][ T6645] sysv_free_block: getblk() failed
[  263.514672][ T6645] sysv_free_block: getblk() failed
[  263.519948][ T6645] sysv_free_block: getblk() failed
[  263.525105][ T6645] sysv_free_block: getblk() failed
[  263.530470][ T6645] sysv_free_block: getblk() failed
[  263.531936][ T6644] netdevsim netdevsim6: Falling back to sysfs fallback for: /
[  263.531936][ T6644] 
[  263.535627][ T6645] sysv_free_block: getblk() failed
[  263.550514][ T6645] sysv_free_block: getblk() failed
[  263.555669][ T6645] sysv_free_block: getblk() failed
[  263.560917][ T6645] sysv_free_block: getblk() failed
[  263.566078][ T6645] sysv_free_block: getblk() failed
[  263.571341][ T6645] sysv_free_block: getblk() failed
[  263.576495][ T6645] sysv_free_block: getblk() failed
[  263.583648][ T6645] sysv_free_block: getblk() failed
[  263.588881][ T6645] sysv_free_block: getblk() failed
[  263.597118][ T6645] sysv_free_block: getblk() failed
[  263.602442][ T6645] sysv_free_block: getblk() failed
[  263.607812][ T6645] sysv_free_block: getblk() failed
[  263.613198][ T6645] sysv_free_block: getblk() failed
[  263.618667][ T6645] sysv_free_block: getblk() failed
[  263.623830][ T6645] sysv_free_block: getblk() failed
[  263.629178][ T6645] sysv_free_block: getblk() failed
[  263.634339][ T6645] sysv_free_block: getblk() failed
[  263.639585][ T6645] sysv_free_block: getblk() failed
[  263.644919][ T6645] sysv_free_block: getblk() failed
[  263.650203][ T6645] sysv_free_block: getblk() failed
[  263.655360][ T6645] sysv_free_block: getblk() failed
[  263.660695][ T6645] sysv_free_block: getblk() failed
[  263.666045][ T6645] sysv_free_block: getblk() failed
[  263.677790][ T6645] sysv_free_block: getblk() failed
[  263.683523][ T6645] sysv_free_block: getblk() failed
[  263.689555][ T6645] sysv_free_block: getblk() failed
[  263.694930][ T6645] sysv_free_block: getblk() failed
[  263.700522][ T6645] sysv_free_block: getblk() failed
[  263.705731][ T6645] sysv_free_block: trying to free block not in datazone
[  264.502574][ T5946] sysv_free_block: getblk() failed
[  264.553143][ T5946] sysv_free_block: getblk() failed
[  264.559134][ T5946] sysv_free_block: trying to free block not in datazone
[  264.569813][ T5946] sysv_free_block: getblk() failed
[  264.575130][ T5946] sysv_free_block: getblk() failed
[  264.580924][ T5946] sysv_free_block: getblk() failed
[  264.586235][ T5946] sysv_free_block: getblk() failed
[  264.592368][ T5946] sysv_free_block: getblk() failed
[  264.597557][ T5946] sysv_free_block: getblk() failed
[  264.603175][ T5946] sysv_free_block: getblk() failed
[  264.609294][ T5946] sysv_free_block: getblk() failed
[  264.614464][ T5946] sysv_free_block: getblk() failed
[  264.641681][ T5946] sysv_free_block: getblk() failed
[  264.646871][ T5946] sysv_free_block: getblk() failed
[  264.674883][ T5946] sysv_free_block: getblk() failed
[  264.694914][ T5946] sysv_free_block: getblk() failed
[  264.711276][ T5946] sysv_free_block: getblk() failed
[  264.721447][ T5946] sysv_free_block: getblk() failed
[  264.726651][ T5946] sysv_free_block: getblk() failed
[  264.742313][ T5946] sysv_free_block: getblk() failed
[  264.798567][ T5946] sysv_free_block: getblk() failed
[  264.805001][ T6653] device pim6reg1 entered promiscuous mode
[  264.853881][ T5946] sysv_free_block: trying to free block not in datazone
[  264.880569][ T5946] sysv_free_block: trying to free block not in datazone
[  264.892932][ T5946] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  264.979515][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.7.507'.
[  266.256213][   T26] kauditd_printk_skb: 55 callbacks suppressed
[  266.256246][   T26] audit: type=1804 audit(1736835095.599:175): pid=6683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.513" name="/newroot/129/bus/file1" dev="overlay" ino=725 res=1 errno=0
[  266.562360][ T6694] loop5: detected capacity change from 0 to 1024
[  268.368162][ T6717] loop5: detected capacity change from 0 to 8192
[  268.465048][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  270.335002][ T4180] Bluetooth: hci1: link tx timeout
[  270.342047][ T4180] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  271.198799][ T6759] netlink: 12 bytes leftover after parsing attributes in process `syz.7.532'.
[  271.593444][ T6770] loop3: detected capacity change from 0 to 4096
[  271.736773][ T6783] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  271.896789][ T4182] Bluetooth: hci1: link tx timeout
[  271.902379][ T4182] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  271.948904][ T4212] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  272.268192][ T4212] usb 7-1: Using ep0 maxpacket: 8
[  272.366819][ T6795] loop2: detected capacity change from 0 to 2048
[  272.388231][ T4402] Bluetooth: hci1: command 0x0406 tx timeout
[  272.388690][ T4212] usb 7-1: config 162 has an invalid interface number: 97 but max is 0
[  272.438414][ T4212] usb 7-1: config 162 has no interface number 0
[  272.444776][ T4212] usb 7-1: config 162 interface 97 has no altsetting 0
[  272.524592][ T6795] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  272.791179][ T4212] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  273.367882][ T4182] Bluetooth: hci1: link tx timeout
[  273.374322][ T4182] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  273.471092][ T4212] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.572070][ T4212] usb 7-1: Product: syz
[  273.576386][ T4212] usb 7-1: Manufacturer: syz
[  273.581330][ T4212] usb 7-1: SerialNumber: syz
[  275.434723][ T4212] metro_usb 7-1:162.97: interrupt-out endpoint missing
[  275.518902][ T4212] usb 7-1: USB disconnect, device number 3
[  276.784094][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.7.547'.
[  276.842729][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  276.849719][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[  276.856230][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  276.862736][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[  276.869334][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  276.875771][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[  276.882300][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  276.888766][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[  276.895263][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  276.901841][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[  276.908361][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  276.914794][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[  276.921330][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  276.927766][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[  276.934296][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  276.940775][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[  276.947271][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  276.953765][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[  276.960296][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  276.966734][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  276.974679][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  276.982556][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  278.206315][ T4182] Bluetooth: hci1: link tx timeout
[  278.211844][ T4182] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  281.007891][ T6907] loop6: detected capacity change from 0 to 512
[  281.987373][ T6917] loop7: detected capacity change from 0 to 512
[  282.007936][ T6907] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  282.089515][ T6907] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.213518][ T6917] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  282.270120][ T6917] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities
[  285.858083][ T4182] Bluetooth: hci1: link tx timeout
[  285.863308][ T4182] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  285.871890][ T4182] Bluetooth: hci1: link tx timeout
[  285.877031][ T4182] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  286.072149][ T6950] tmpfs: Unknown parameter 'usrquota'
[  286.079879][ T6945] device bridge0 entered promiscuous mode
[  286.135611][ T6945] bridge0: port 3(macsec1) entered blocking state
[  286.165504][ T6945] bridge0: port 3(macsec1) entered disabled state
[  286.182841][   T26] audit: type=1326 audit(1736835115.579:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.2.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03de326d29 code=0x0
[  286.270204][ T6945] device bridge0 left promiscuous mode
[  286.596740][ T6958] loop6: detected capacity change from 0 to 1024
[  286.672484][ T6963] tipc: Trying to set illegal importance in message
[  286.733668][ T6958] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  287.946953][ T4212] Bluetooth: hci1: command 0x0406 tx timeout
[  288.705652][ T7011] loop6: detected capacity change from 0 to 4096
[  288.741008][   T26] audit: type=1326 audit(1736835118.139:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  288.791175][   T26] audit: type=1326 audit(1736835118.159:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  288.851273][   T26] audit: type=1326 audit(1736835118.159:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  288.878399][   T26] audit: type=1326 audit(1736835118.159:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  288.916079][ T7011] ntfs3: loop6: Failed to load $MFT.
[  289.952248][   T26] audit: type=1326 audit(1736835118.159:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  290.280215][   T26] audit: type=1326 audit(1736835118.169:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  290.448713][   T26] audit: type=1326 audit(1736835118.169:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  290.504570][   T26] audit: type=1326 audit(1736835118.169:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  290.560887][ T7025] loop5: detected capacity change from 0 to 164
[  290.584646][   T26] audit: type=1326 audit(1736835118.169:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf04624d29 code=0x7ffc0000
[  290.714894][ T7025] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  292.019388][ T4180] Bluetooth: hci1: link tx timeout
[  292.024554][ T4180] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  292.032393][ T4180] Bluetooth: hci1: link tx timeout
[  292.037517][ T4180] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  292.532546][ T7068] bridge0: port 3(syz_tun) entered blocking state
[  292.552364][ T7068] bridge0: port 3(syz_tun) entered disabled state
[  292.574649][ T7068] device syz_tun entered promiscuous mode
[  292.590904][ T7068] bridge0: port 3(syz_tun) entered blocking state
[  292.598208][ T7068] bridge0: port 3(syz_tun) entered forwarding state
[  292.619069][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.593'.
[  292.645971][ T7072] debugfs: Directory 'netdev:nicvf0' with parent 'phy9' already present!
[  292.679667][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.718196][ T4276] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  293.148514][ T4276] usb 7-1: config 0 has an invalid interface number: 117 but max is 0
[  293.156737][ T4276] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  293.538692][ T4276] usb 7-1: config 0 has no interface number 0
[  293.567246][ T7133] loop7: detected capacity change from 0 to 1024
[  293.595284][ T4276] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 12336, setting to 64
[  293.629326][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.598'.
[  293.654967][ T7135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.659896][ T4276] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  293.892784][ T7145] loop5: detected capacity change from 0 to 1024
[  293.911404][ T7127] hfsplus: b-tree write err: -5, ino 4
[  293.928627][ T4276] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  293.954114][ T4276] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.962384][ T4276] usb 7-1: Product: syz
[  293.966655][ T7145] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  293.978397][ T4276] usb 7-1: Manufacturer: syz
[  293.986379][ T4276] usb 7-1: SerialNumber: syz
[  294.013567][ T4276] usb 7-1: config 0 descriptor??
[  294.089524][ T7151] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  294.298609][ T4276] usbtouchscreen: probe of 7-1:0.117 failed with error -71
[  294.334186][ T4276] usb 7-1: USB disconnect, device number 4
[  294.447243][ T7164] dlm: dev_write: no op 0 0
[  294.512683][ T7143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.601'.
[  294.766498][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.607'.
[  294.786319][ T7182] device ipvlan2 entered promiscuous mode
[  294.796532][ T7182] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  294.839307][ T7182] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  297.899077][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  298.723188][ T7203] loop3: detected capacity change from 0 to 4096
[  299.493488][ T7203] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  301.270652][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  301.270670][   T26] audit: type=1326 audit(1736835130.669:189): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154f235d29 code=0x7ffc0000
[  301.275214][ T7231] loop5: detected capacity change from 0 to 256
[  301.276771][   T26] audit: type=1326 audit(1736835130.669:190): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f154f235d29 code=0x7ffc0000
[  302.284497][   T26] audit: type=1326 audit(1736835130.669:191): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f154f235d63 code=0x7ffc0000
[  302.317377][   T26] audit: type=1326 audit(1736835130.669:192): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f154f2347df code=0x7ffc0000
[  302.451785][   T26] audit: type=1326 audit(1736835130.669:193): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f154f235db7 code=0x7ffc0000
[  303.120565][   T26] audit: type=1326 audit(1736835130.669:194): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f154f234690 code=0x7ffc0000
[  303.158586][   T26] audit: type=1326 audit(1736835130.669:195): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f154f23592b code=0x7ffc0000
[  303.268088][ T4212] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  303.281372][   T26] audit: type=1326 audit(1736835130.709:196): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f154f23498a code=0x7ffc0000
[  303.320219][   T26] audit: type=1326 audit(1736835130.709:197): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f154f23498a code=0x7ffc0000
[  303.455554][   T26] audit: type=1326 audit(1736835131.709:198): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f154f234597 code=0x7ffc0000
[  304.428342][ T4212] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.443705][ T4212] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  304.454827][ T4212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.465180][ T4212] usb 7-1: config 0 descriptor??
[  304.473079][ T7265] loop7: detected capacity change from 0 to 64
[  304.510837][ T4212] pwc: Askey VC010 type 2 USB webcam detected.
[  304.774493][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.535274][ T4212] pwc: recv_control_msg error -32 req 02 val 2b00
[  305.698219][ T4212] pwc: recv_control_msg error -32 req 02 val 2700
[  305.745043][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'.
[  305.748249][ T4212] pwc: recv_control_msg error -32 req 02 val 2c00
[  305.908203][ T4212] pwc: recv_control_msg error -32 req 04 val 1000
[  305.965850][ T4212] pwc: recv_control_msg error -32 req 04 val 1300
[  306.018194][ T4212] pwc: recv_control_msg error -32 req 04 val 1400
[  306.068133][ T4212] pwc: recv_control_msg error -32 req 02 val 2000
[  306.108355][ T4212] pwc: recv_control_msg error -32 req 02 val 2100
[  306.148179][ T4212] pwc: recv_control_msg error -32 req 04 val 1500
[  306.188362][ T4212] pwc: recv_control_msg error -32 req 02 val 2500
[  306.238191][ T4212] pwc: recv_control_msg error -32 req 02 val 2400
[  306.498209][ T4212] pwc: recv_control_msg error -71 req 02 val 2900
[  306.518240][ T4212] pwc: recv_control_msg error -71 req 02 val 2800
[  306.618460][ T4212] pwc: recv_control_msg error -71 req 04 val 1100
[  306.658124][ T4212] pwc: recv_control_msg error -71 req 04 val 1200
[  306.748254][ T4212] pwc: Registered as video103.
[  306.801825][ T4212] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10
[  307.026914][ T4212] usb 7-1: USB disconnect, device number 5
[  308.262270][ T7312] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  314.647926][ T7376] device bridge1 entered promiscuous mode
[  315.473939][ T7376] loop3: detected capacity change from 0 to 64
[  315.600732][ T7382] loop7: detected capacity change from 0 to 1024
[  315.632279][ T7376] hfs: unable to open extent tree
[  315.657894][ T7376] hfs: can't find a HFS filesystem on dev loop3
[  315.728276][ T7382] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  315.817078][ T7382] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000005,noinit_itable,nomblk_io_submit,grpquota,nogrpid,. Quota mode: writeback.
[  315.929813][ T7382] batman_adv: batadv0: Adding interface: macvtap1
[  315.936675][ T7382] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.965078][ T7382] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  316.013349][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.7.651'.
[  316.070101][ T7382] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  317.202937][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.209320][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.241108][ T7382] batman_adv: batadv0: Removing interface: batadv_slave_0
[  317.270449][ T7382] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  317.732906][ T7382] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.336495][ T7382] batman_adv: batadv0: Removing interface: macvtap1
[  318.731253][ T7425] loop3: detected capacity change from 0 to 256
[  320.262182][ T7261] bridge0: port 3(syz_tun) entered disabled state
[  320.350665][ T7261] device syz_tun left promiscuous mode
[  320.357831][ T7261] bridge0: port 3(syz_tun) entered disabled state
[  320.641823][ T7435] chnl_net:caif_netlink_parms(): no params data found
[  321.258295][ T4211] Bluetooth: hci5: command 0x0409 tx timeout
[  321.668858][ T7435] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.676049][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.684335][ T7435] device bridge_slave_0 entered promiscuous mode
[  321.710995][ T7435] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.738166][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.768146][ T7435] device bridge_slave_1 entered promiscuous mode
[  321.826833][ T7484] fuse: Bad value for 'fd'
[  322.503000][ T7435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.517331][ T7435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.626162][ T7435] team0: Port device team_slave_0 added
[  323.518720][ T7435] team0: Port device team_slave_1 added
[  323.555073][   T13] Bluetooth: hci5: command 0x041b tx timeout
[  324.793669][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.812452][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.000017][ T7435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.013021][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.020087][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.054905][ T7435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.326779][ T7435] device hsr_slave_0 entered promiscuous mode
[  325.339415][ T7435] device hsr_slave_1 entered promiscuous mode
[  325.896079][ T4211] Bluetooth: hci5: command 0x040f tx timeout
[  326.044731][  T146] Bluetooth: hci1: link tx timeout
[  326.051183][  T146] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  326.064176][  T146] Bluetooth: hci1: link tx timeout
[  326.070214][  T146] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  326.095085][ T7435] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  326.119644][ T7435] Cannot create hsr debugfs directory
[  327.142986][  T146] Bluetooth: hci1: link tx timeout
[  327.148690][  T146] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  327.156439][  T146] Bluetooth: hci1: link tx timeout
[  327.161864][  T146] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  327.516336][ T7542] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  327.970269][ T7542] FAT-fs (loop13): unable to read boot sector
[  328.040052][   T13] Bluetooth: hci5: command 0x0419 tx timeout
[  328.184672][ T7550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.737248][ T7435] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  328.988581][ T7435] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  329.066240][ T7573] loop7: detected capacity change from 0 to 512
[  329.147831][ T7435] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  329.229386][ T7435] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  329.260485][ T7573] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  329.320897][ T7573] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.488933][ T7582] loop3: detected capacity change from 0 to 256
[  330.876279][ T7435] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.970399][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  331.014920][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  331.101518][ T7435] 8021q: adding VLAN 0 to HW filter on device team0
[  331.186505][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  331.213796][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  332.607757][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.614957][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.656193][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  332.759550][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  332.836352][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.843553][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state
[  332.926718][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  333.917464][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  334.760592][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  334.777837][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  334.831078][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'.
[  334.849286][  T146] Bluetooth: hci1: link tx timeout
[  334.854530][  T146] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  334.862248][  T146] Bluetooth: hci1: link tx timeout
[  334.867437][  T146] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  334.877363][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88802a8a2000: rx timeout, send abort
[  335.037114][ T7435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  335.076896][ T7435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  335.133784][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  335.149394][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  335.194450][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  335.207697][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  335.252502][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  335.263850][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  335.323144][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  335.349065][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  335.361541][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  335.387611][    C0] vxcan0 (unregistered): j1939_tp_rxtimer: 0xffff88802a8a2000: abort rx timeout. Force session deactivation
[  336.305217][ T7634] loop6: detected capacity change from 0 to 8
[  336.779531][ T7435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.791516][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  336.804833][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  337.700774][ T7649] SQUASHFS error: Failed to read block 0x1ec: -5
[  337.708459][ T7649] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  337.721601][   T26] kauditd_printk_skb: 39 callbacks suppressed
[  337.721617][   T26] audit: type=1800 audit(1736835167.109:238): pid=7649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.701" name="file1" dev="loop6" ino=5 res=0 errno=0
[  337.754559][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'.
[  343.856576][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  343.867863][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  343.941685][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  343.960417][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  343.990594][ T7435] device veth0_vlan entered promiscuous mode
[  344.010693][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  344.031958][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  344.067543][ T7435] device veth1_vlan entered promiscuous mode
[  344.104872][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  344.123472][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  344.137285][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  344.147926][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  344.172803][ T7435] device veth0_macvtap entered promiscuous mode
[  344.194768][ T7435] device veth1_macvtap entered promiscuous mode
[  344.244960][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.269502][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.311397][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.334288][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.364016][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.393520][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.425784][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.446117][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  344.466437][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  344.493532][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  344.520549][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  344.571071][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.596910][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.617619][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.661510][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.689043][ T4402] Bluetooth: hci4: command 0x0406 tx timeout
[  344.704291][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.715216][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.725135][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.735625][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.747066][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.917511][ T7435] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.034125][ T7435] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.134467][ T7435] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.171764][ T7435] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.235352][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  346.244952][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  347.693321][ T7727] loop7: detected capacity change from 0 to 256
[  347.957076][ T4182] Bluetooth: hci1: link tx timeout
[  347.962297][ T4182] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  347.970033][ T4182] Bluetooth: hci1: link tx timeout
[  347.975164][ T4182] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  348.900860][ T7121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.937337][ T7121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.516576][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  349.688830][ T7121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.861922][ T7121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.883594][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  352.651116][ T4182] Bluetooth: hci1: link tx timeout
[  352.656307][ T4182] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  352.664148][ T4182] Bluetooth: hci1: link tx timeout
[  352.669408][ T4182] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  354.062039][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  354.132359][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.7.729'.
[  354.173363][ T7784] MPTCP: addr_signal error, add_addr=1, echo=0
[  355.998949][ T7808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.037378][ T4402] wlan1: authenticate with 08:02:11:00:00:00
[  356.083591][ T4402] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  356.104599][ T7808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.125733][ T7121] wlan1: authenticated
[  356.148928][ T4211] mac80211_hwsim hwsim21 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[  356.163296][ T7808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.182097][ T7121] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[  356.203637][ T7121] wlan1: associated
[  356.215431][ T7819] loop7: detected capacity change from 0 to 256
[  356.348098][ T7808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.059658][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  359.943809][ T7852] netlink: 16 bytes leftover after parsing attributes in process `syz.7.742'.
[  359.968236][ T7852] IPVS: Unknown mcast interface: batadv0
[  360.117722][ T7851] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  360.166393][ T7851] FAT-fs (loop7): unable to read boot sector
[  362.102566][ T7884] loop7: detected capacity change from 0 to 512
[  362.419989][ T7884] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.749: invalid indirect mapped block 256 (level 2)
[  362.434397][ T7884] EXT4-fs (loop7): Remounting filesystem read-only
[  362.441360][ T7884] EXT4-fs (loop7): 2 truncates cleaned up
[  362.447172][ T7884] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback.
[  362.483797][ T7892] loop6: detected capacity change from 0 to 256
[  366.087621][ T7926] loop6: detected capacity change from 0 to 1024
[  366.435066][ T7926] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  368.305738][ T7926] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000005,noinit_itable,nomblk_io_submit,grpquota,nogrpid,. Quota mode: writeback.
[  368.592316][ T7926] batman_adv: batadv0: Adding interface: macvtap1
[  368.599013][ T7926] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.628391][ T7926] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  376.891787][ T8051] loop7: detected capacity change from 0 to 512
[  377.106353][ T8051] EXT4-fs (loop7): Ignoring removed orlov option
[  377.615409][ T8051] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  377.728145][ T8051] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it
[  377.743790][ T8051] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.787: Corrupt directory, running e2fsck is recommended
[  377.877110][ T8051] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  377.928713][ T8064] loop6: detected capacity change from 0 to 4096
[  377.940502][ T8051] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2219: inode #15: comm syz.7.787: corrupted in-inode xattr
[  377.975320][ T8051] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.787: couldn't read orphan inode 15 (err -117)
[  378.042117][ T8051] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,noblock_validity,nogrpid,orlov,data_err=abort,grpjquota=.sb=0x0000000000000001,init_itable,jqfmt=vfsold,stripe=0x0000000000000800,,,errors=continue. Quota mode: writeback.
[  378.126649][ T8074] loop8: detected capacity change from 0 to 1024
[  378.354757][ T8074] hfsplus: xattr searching failed
[  378.370477][ T8074] hfsplus: xattr searching failed
[  378.488381][ T8074] hfsplus: xattr searching failed
[  378.531001][ T8074] hfsplus: xattr searching failed
[  378.568749][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.575251][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  378.588142][ T8083] hfsplus: xattr searching failed
[  379.452928][ T4433] hfsplus: b-tree write err: -5, ino 3
[  381.243475][ T8117] loop3: detected capacity change from 0 to 8192
[  383.250854][ T8138] chnl_net:caif_netlink_parms(): no params data found
[  383.978238][ T4400] Bluetooth: hci0: command 0x0409 tx timeout
[  384.292047][ T8173] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  384.585804][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.647892][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.701383][ T8138] device bridge_slave_0 entered promiscuous mode
[  384.732577][ T8186] loop3: detected capacity change from 0 to 64
[  384.735132][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.767158][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.786395][ T8138] device bridge_slave_1 entered promiscuous mode
[  384.892585][ T8138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  384.968957][ T8138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.096735][ T8138] team0: Port device team_slave_0 added
[  385.366285][ T8138] team0: Port device team_slave_1 added
[  386.842155][ T4400] Bluetooth: hci0: command 0x041b tx timeout
[  386.882830][ T8138] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.910525][ T8138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.151650][ T8138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.168662][ T8138] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.175796][ T8138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.364467][ T8138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  388.727667][ T8138] device hsr_slave_0 entered promiscuous mode
[  388.783035][ T8138] device hsr_slave_1 entered promiscuous mode
[  388.845466][ T8237] virtio-fs: tag <(null)> not found
[  388.930336][ T8138] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  389.076498][ T8138] Cannot create hsr debugfs directory
[  389.538788][ T1107] Bluetooth: hci0: command 0x040f tx timeout
[  390.287087][ T8246] loop3: detected capacity change from 0 to 8192
[  390.568626][ T8246] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  390.657781][ T8246] REISERFS (device loop3): using ordered data mode
[  390.720261][ T8246] reiserfs: using flush barriers
[  390.853235][ T8246] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  390.925330][ T8246] REISERFS (device loop3): checking transaction log (loop3)
[  391.072787][ T8246] REISERFS (device loop3): Using r5 hash to sort names
[  391.093413][ T8138] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  391.217398][ T8246] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  391.237822][ T8138] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  391.241137][ T8246] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  391.578306][ T1107] Bluetooth: hci0: command 0x0419 tx timeout
[  392.140261][ T8138] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  392.234321][ T8138] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  392.756256][ T8282] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  392.772990][ T8282] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  392.787605][ T8282] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  396.697841][ T8138] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.756889][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  396.781395][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  396.839731][ T8138] 8021q: adding VLAN 0 to HW filter on device team0
[  396.878623][ T8311] tmpfs: Unknown parameter 'usrquota'
[  396.908612][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  396.932899][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  396.959625][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.966820][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.099004][ T4277] unregister_netdevice: waiting for lo to become free. Usage count = 2
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  397.452478][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  397.830352][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  397.876968][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  397.935837][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.943033][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.369641][ T4169] device syz_tun left promiscuous mode
[  398.518990][ T4169] syz-executor (4169) used greatest stack depth: 18456 bytes left