last executing test programs:

13m51.14722274s ago: executing program 1 (id=2):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x1, 0x11, r0, 0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180))
getpid()
r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ipv6_route\x00')
pread64(r3, &(0x7f000004b680)=""/102363, 0x18fdb, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={0xffffffffffffffff, r4}, 0xc)

13m49.735532232s ago: executing program 1 (id=11):
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004"], 0x200)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc", 0x40}], 0x1}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x148, 0x29, 0x36, {0x5e, 0x25, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x97, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x288}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13m43.884073915s ago: executing program 1 (id=19):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x33}, @in6=@mcast1, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000000}, {0x1, 0x2}, {0x8}, 0x0, 0x0, 0xa, 0x3, 0x2}, 0x4}}, 0xf8}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
accept$alg(r0, 0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f00000001c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}})

13m41.981498826s ago: executing program 1 (id=20):
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r2)
r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

13m25.973683632s ago: executing program 32 (id=20):
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r2)
r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

12m49.490924415s ago: executing program 3 (id=81):
socket$inet6(0xa, 0x80000, 0x4)
close(0x3)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$tun(0xffffffffffffff9c, 0x0, 0xc0b01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
close(0x3)
socket$key(0xf, 0x3, 0x2)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000700)=[{&(0x7f00000007c0)=""/124, 0x7c}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=""/32, 0x20}, {0x0}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000600)=""/245, 0xf5}], 0x8, 0x0, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x3, 0x2)
close(0xffffffffffffffff)

12m48.128634385s ago: executing program 3 (id=82):
timer_create(0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0)
mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(0x0)
chdir(&(0x7f0000000300)='./bus\x00')
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0)

12m46.516548719s ago: executing program 3 (id=83):
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socket(0x80000000000000a, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12m42.23595141s ago: executing program 3 (id=88):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000080))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0xa000000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x2004001)
io_setup(0xff, &(0x7f0000000380)=<r5=>0x0)
io_submit(r5, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000340), 0x41}])
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$eJzs3V1sHNW9APD/GDt2HJGL7r3KjaIQJglXSnSDWTtgri8P3L3rsTNg71q766tEFYIIHBrFAQRCQFSV5gXaqh/qUx8pfUS88NRWlVqpD22fKpWHvvQBCYmXVrRqpapVVdXVzuzGduy18+EkLf39Vt4zPnPOmf+ZHe/xrH1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIpDZdqYwnMZfXF0+n/dWmm435TdeMRESa9tr74bpki+1GJJ2vGBmJ/WXW/n9fXb2v83QkDpbfHYzORmIkLu3Zd8+j/zY40Ku/RcA36nCf/JU0HVr7fRLxhU5QF84uLy+9dAsCuY2+/P3uwsg1V/nTSud5NqvnrUY+X53N0rzVSKcmJysPnppppTP5XNY602pn82mtmVVf+5+VlWO14+n41NTJNBs701isz05X57K0m/nIAxOVymT6+NhCVm22GvUHHx9r1U7lc3N5fbYoM1F5NTplHukciE/k7bSdVefTdDiWl05uF+q588tL4+tyhtcdOAfvv+fjVz76/fmlzgHZr5Gke2BOjI9PTIxPPjz18COV8gCIuJJRGaxcJSYqE2WVGIiISmXwlhy03Fl7Nskb7B4xG1ZErPzLDrxzw80bGOkuzEUe9ViM05FGGgPFc/H42u5IYyhqMR3NaMR8J+8XQ6vru4+u3vj/nw/+5mdbbXft+N8b5fdfWVe+2x6JQ2XGoX7j/4YoduAx2K/V+ntlNGvzXo7X41JciLOxHMuxFC9dXWvX1TU2eVxLmZt+DJfpwM62OhtZ1COPViSRx3xUi5y0yGlEGlMxGZNRiafiVMxEK9KYiTzmIotWnIlWtCMrjqhaNCOLarSjEc1I41jU4nikMR5TMRUnI40sxuJMNGIx6jEb01EtWjm3Unrjqrj2ff7p7z3384/f7izHuThfvDjjW3Qk6Yzlez6M+N0Wha4M5r3hfkPG5uP/QJQlBroH+G0Zk7hNRq7zVd2Jt23YESvF+f/ghvyROxINAAAAcCskxafvSUQMxb3F0kw+l32mt3rozkYHAAAA7ITiP+0OdpLiVP/eSDrn/5VNSn4QMXzbwwMAAAB2QFLMsUsiYjTuK5d606U2+xAAAAAA+AdU/P3/UCcZjXijyHD+DwAAAJ8yX+x3jf2PdhXX2B2N1sJw8oPfRrM5lFxeOH1/crHaKVe9eFdZr5v8/5UW2zMHkr3dRopkcvDSniQiBmvZwaR39cu/dOcSfFI8H1i9AGG/a/0n2wQQWwdQfBdficNlmcPPlumzvTXlVkZn8rlsrNaYe3Q86X440n7l+fOvRdH9L9Xn9yZx7vzy0tgzLywXLVy83Hm+fLF7efikVyu6107YIpaV3myKezfv8VAxEaO73dFyu5W1/e9eTXZg6/4na7f5ZhwpyxwZLdPR9f0f6WxzfOzR8ahW9w60s9PtV1bW9L4bxXgRRdHz4V5vk2t6FQa6URwtyxw9drRMNoliYl0Uz2+MYmI1isvXuC/2rd8X/aN4+/Abp//w40aSndwuipM3GQXAnXKuuOrP6ii0uxiF/lxeVf3b3ynXrR13d/dqXs+73LnV3zJ69deMdYOxYXRPb2R0fzOOlWWOlb9PDB7YZFypbPKO/uL5F3/SfUd/6N1vfuvJQz99/6px/TqieDeOl2W6Sfzrj/qMsZ0+f/WqUfWdTo13+m63NTeRvJrEUNK998ylB85fPPvc0nNLz09MnJysPFSpPDwRQ8WvCt1ks0g37FQA/tlsd4+d9z93pWi/u/AkD21zVp0M9v6lYCyeiRdiOZ6NE8Vsg4i4b/NWR9f8G8KJDWetyfqz9jV3eDmxzbnlatmJq8sOH02iT9mTa/bYf3yjSP54i14QALgNjmwzDidxT3nZn1fv7ta4UmKl+PD3riQ5sfa8+7MRcaDfmNsZy4+XN87tnR1Hv7Lj6+L8VTf979uxUwDgUy5rfpKMtt9Kms184anxqanxavtUljYbtSfSZj49m6V5vZ01a6eq9dksXWg22o1a74+W01krbS0uLDSa7XSm0UwXGq38dHHn97R76/dWNl+tt/Naa2Euq7aytNaot6u1djqdt2rpUETkrVNZs6jcWshq+Uxeq7bzRj1tNRabtWwsTVtZli4s/t9cWTCfzurtfCbPhtK8ni408/lq83JEzC3OZ+l01qo184V2o2yw3FYnzpm9zfmi2bHY8AeFX9+BXQ4Ad9zLr1+6cHZ5eemlG1v45bUUvtN9BADWM0oDAAAAAAAAAAAAAMDfv43T9Tq51zURcChuePrgy8PRWdh9o9U7C0+WHeldV/impjNuXBjc6Qa3Xviv93auFxvbGerl3L3dvM/d617TXd19u7NdHug7/fSvm9bqRH/d23r6sccuXLocEUVOMri6ezud2n/qwyx6vduinc1/Ujab6vrW3ohd3/16mfO/fQongzt82HzQ7WDvp7pf4YH1OSvJFj/4t+XtBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACuy98CAAD//0pDPbQ=")

12m38.646865259s ago: executing program 3 (id=91):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x40408d4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x5)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0xdc)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

12m30.615565189s ago: executing program 3 (id=98):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x0)

12m14.104398484s ago: executing program 33 (id=98):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x0)

9m16.872364978s ago: executing program 0 (id=313):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x29e, &(0x7f0000000140)=<r3=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = dup2(r4, r4)
faccessat2(r5, &(0x7f0000000880)='\x00', 0x1, 0x1100)
r6 = socket$unix(0x1, 0x5, 0x0)
io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, r6, &(0x7f0000000000)="5e0044856800000004", 0x9, 0x0, 0x0, 0x971a2bbfb5f4c835}])
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0)
dup3(r7, 0xffffffffffffffff, 0x80000)

9m12.175587312s ago: executing program 0 (id=319):
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x10, 0x803, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000200000400000000000000000200000000000000000000000200000000000000"], 0x0, 0x4e}, 0x28)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x6, 0x0, 0x2}}}, 0x8)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008}, 0x18)

9m9.629969201s ago: executing program 0 (id=326):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x6c, 0x0, 0x0, 0x5}, 0x10)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$packet(0x11, 0x3, 0x300)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109301)
ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x3, 0x0, 0x905, 0x0})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)

9m7.511679555s ago: executing program 0 (id=327):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000280)=0x9, 0x4)
bind$inet6(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = getpgid(r1)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x8, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
r6 = openat$vfio(0xffffffffffffff9c, &(0x7f00000006c0), 0x40800, 0x0)
ioctl$VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

9m5.123725025s ago: executing program 0 (id=330):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000400)={0x4, 0x100000, 0x0, 0xfffffffffffffffd, 0x0, 0x7ff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, 0x0)

8m59.141234745s ago: executing program 0 (id=335):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000080)='./file0\x00', 0x115)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, 0x0, 0x0)
write$FUSE_INIT(r4, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0)

8m42.369518435s ago: executing program 34 (id=335):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000080)='./file0\x00', 0x115)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, 0x0, 0x0)
write$FUSE_INIT(r4, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0)

3m54.935168102s ago: executing program 6 (id=697):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4000004)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0x7, 0x0, &(0x7f0000000080))
syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', 0x4002, &(0x7f0000000f80)=ANY=[], 0x1, 0x21d, &(0x7f0000000540)="$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")
openat$rtc(0xffffffffffffff9c, 0x0, 0x1c2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
shmat(0x0, &(0x7f0000218000/0x3000)=nil, 0x804f8a39e3d2aebc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
fadvise64(r3, 0xfcff, 0x0, 0x3)

3m52.338250964s ago: executing program 6 (id=700):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r3, 0x4bfa, &(0x7f0000000080)=""/219)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x229)
r6 = accept4$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180), 0x0)

3m49.861688029s ago: executing program 6 (id=703):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16)
r0 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'ip6gre0\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0xe, @dev={0xfe, 0x80, '\x00', 0x43}, 0x4}, 0x1c)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
mount$bind(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x2103800, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040), 0x4)
syz_emit_ethernet(0x11, &(0x7f0000000340)=ANY=[], 0x0)

3m47.617966001s ago: executing program 6 (id=706):
add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0)
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x20000000000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102)
r1 = socket$inet_sctp(0x2, 0x3, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x65010102, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e20], [0x4e21, 0x4e22]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be})
r4 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r5=>0x0, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x2}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r6}, 0x38)
mount(&(0x7f0000000540)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='adfs\x00', 0x3008085, 0x0)

3m45.657891095s ago: executing program 6 (id=708):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x10001043, 0xffffffffffffffff, 0x0)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r6 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0)
mq_notify(r6, 0x0)

3m44.144000233s ago: executing program 6 (id=709):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x80104d12, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
recvfrom$packet(r3, &(0x7f00000001c0)=""/180, 0xb4, 0x40010123, &(0x7f0000000280)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @random="a3fc46462109"}, 0x12)
setreuid(0xffffffffffffffff, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341)
ioctl$USBDEVFS_IOCTL(r4, 0x80045515, &(0x7f00000000c0)=@usbdevfs_connect={0x7})

3m26.889717582s ago: executing program 35 (id=709):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x80104d12, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
recvfrom$packet(r3, &(0x7f00000001c0)=""/180, 0xb4, 0x40010123, &(0x7f0000000280)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @random="a3fc46462109"}, 0x12)
setreuid(0xffffffffffffffff, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341)
ioctl$USBDEVFS_IOCTL(r4, 0x80045515, &(0x7f00000000c0)=@usbdevfs_connect={0x7})

1m28.91691486s ago: executing program 4 (id=848):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0xfffffffa)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0x3)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x39000, 0x3)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
socket$unix(0x1, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020}, 0x2020)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000480)={0x2, 0x0, [{0x8, 0x3, 0x1, 0x0, @adapter={0x6, 0x10, 0x80, 0xe, 0x2}}, {0x2, 0x4, 0x0, 0x0, @sint={0x6, 0x5}}]})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x9)

1m26.411391757s ago: executing program 4 (id=852):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000009e383bd4b4c19334ea3b4d91f463af7e67637772a2304f1df9ec09fc86f3bb594bf5a4b33c"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1a1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000003040)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x0)
r7 = open(&(0x7f0000000040)='./file1\x00', 0x66842, 0x21)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r8, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffa, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x4, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x7, 0x3, 0xfffffff8, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c)

1m24.522226737s ago: executing program 4 (id=855):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc)
r3 = socket$inet6(0xa, 0x3, 0x75)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x4}, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {0x0, 0x3, 0xfffffffffffffffd, 0x40000000000}, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3ffffe}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x0, 0x0, 0x0, 0x778a, 0xffff}, {0x3, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x1}}, 0xe8)
sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4048005)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[], 0x78)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSIG(r5, 0x40045436, 0x14)
splice(r0, 0x0, r4, 0x0, 0x39000, 0x0)
pread64(r0, &(0x7f00000000c0)=""/151, 0x97, 0x6)
r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0)
accept4(r0, &(0x7f0000000580)=@x25={0x9, @remote}, &(0x7f0000000040)=0x80, 0x80000)
fsetxattr$security_capability(r6, &(0x7f0000000080), 0x0, 0x0, 0x1)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
r8 = syz_open_pts(r7, 0x141601)
ioctl$TIOCGPTPEER(r7, 0x5441, 0x2185)
fcntl$setstatus(r8, 0x4, 0x102800)
close(r7)

1m22.027182293s ago: executing program 4 (id=861):
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1)
brk(0x689d80000003)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r3, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
tkill(r0, 0x19)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x0, 0x5707b563827c8365, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x12a}, @void}}}, 0x24}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f0008000340000000000800044000000000080005400000000009000200000000000700000008000100"], 0x40}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x318, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x280, 0x230, 0x230, 0x280, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x160, 0x1a8, 0x0, {0x1000000}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, [0xffffffff, 0x54691080da52b893, 0xff, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff, 0xff, 0xff, 0xffffff], @ipv6=@private0, [0xffffff00, 0xffffff00, 0xff], @ipv6=@mcast2, [0xffffff00, 0xffffff00, 0xffffff00, 0xffff00], 0xfffffffe, 0x6, 0x1d, 0x4e23, 0x4e21, 0x4e22, 0x4e22, 0xa00, 0x2200}, 0x100, 0x1004, 0x4e22, 0x4e23, 0x4e22, 0x4e23}}, @common=@unspec=@state={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x378)

1m20.841323462s ago: executing program 4 (id=863):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000080)='./file0\x00', 0x115)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, 0x0, 0x0)
write$FUSE_INIT(r4, 0x0, 0x0)
syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0)

1m19.3428062s ago: executing program 4 (id=864):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000440)={0x0, 0x7, 0x9, [0x2, 0x2, 0x0, 0x0, 0x76, 0x7ff, 0x8, 0x5, 0x2005]}, 0x1a)

1m2.533395253s ago: executing program 36 (id=864):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000440)={0x0, 0x7, 0x9, [0x2, 0x2, 0x0, 0x0, 0x76, 0x7ff, 0x8, 0x5, 0x2005]}, 0x1a)

36.573663901s ago: executing program 2 (id=902):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x80104d12, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
recvfrom$packet(r3, &(0x7f00000001c0)=""/180, 0xb4, 0x40010123, &(0x7f0000000280)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @random="a3fc46462109"}, 0x12)
setreuid(0xffffffffffffffff, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341)
ioctl$USBDEVFS_IOCTL(r4, 0x80045515, &(0x7f00000000c0)=@usbdevfs_connect={0x7})

24.433946771s ago: executing program 5 (id=912):
fsopen(&(0x7f0000000240)='cgroup2\x00', 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$inet(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4a, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

23.945643849s ago: executing program 5 (id=914):
socket$nl_generic(0x10, 0x3, 0x10)
waitid(0x2, 0x0, 0x0, 0x2, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040), 0x0)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
get_mempolicy(0x0, &(0x7f0000000180), 0xffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x4)
get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3)
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000), 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c})
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[])

23.660934996s ago: executing program 2 (id=915):
r0 = fsopen(&(0x7f0000000100)='hpfs\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x0, 0x0, 0x4e, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendto$packet(r6, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000)
r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, 0x0, 0x0)
splice(r1, 0x0, r3, 0x0, 0x400000, 0x3)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000440)='\x05\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81F\xa9sz{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x8d\x84\'\xa3\xf1', 0x0)

20.69369682s ago: executing program 2 (id=917):
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)=0x2)
get_mempolicy(0x0, &(0x7f0000000140), 0x2d9, &(0x7f00005d4000/0x3000)=nil, 0x0)
socket(0xa, 0x80807, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)

20.584346726s ago: executing program 7 (id=918):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000140)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x0, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0xf, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x44, 0x0, [0x0, 0xfffffff7]}})
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0)
write$vga_arbiter(r4, &(0x7f0000000240)=@other={'trylock', ' ', 'io+mem'}, 0xf)
r5 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x18000, 0x1800, 0x2}, 0x20)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r6, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x300, 0x0, 0x7, 0x1, 0x2000000008, 0x3, 0x3, 0x30000000000000, 0xc4})

20.34361542s ago: executing program 8 (id=919):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtaction={0xa0, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x55, 0x6, "f84c610cd37e7e7578939b0e31b51702792c21bbcb5e18d029fa86642f1d8755a3e45b95bc0d70f36f2239af521bad07238b322b4c8d127d9c54ad27a10a502380cce7f224da177068fcf30b320fe20eb3"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_MCE_KILL(0x35, 0x0, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
read$FUSE(0xffffffffffffffff, &(0x7f0000003340)={0x2020}, 0x2020)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000340)={{0x1, 0x0, 0x1c, 0x9, 'syz1\x00', 0xfa}, 0x4, 0x200, 0x3, r2, 0x5, 0x0, 'syz1\x00', &(0x7f00000000c0)=['/dev/ptp0\x00', '!/\xec(\x00', '\x00', '-\x00', '+,)\x00'], 0x16})
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000000030000000eba9163d1301ff300000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00', 0x800, 0x0, 0xff, 0x1}, 0x20)
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
socket$inet6(0xa, 0x3, 0xff)
close_range(r4, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)={0x4, 0x1})

19.669992439s ago: executing program 8 (id=920):
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x21e, &(0x7f00000008c0)="$eJzs3D1v00Acx/Gf40BIQTyKBzFVQkIsJNBWqrLRhY03gMRQtaGqcKE0LI2QoG+CnZWJl8A7YWVoBzYmjM6+gHNO8MVp4kr5fqQ2Tnw//89tz/YlcgVgYT1Jvgc6Z5/HcfxhWdLzZ5JqlXYNwIzF9vF3DGDxhO7Qr6mingCYr5ONMDn/fwuk7z/fbx3brwue1w8nG+kkwcwfjjP55rjACyd/FCSPd+vD+SVJF3Phev765XOav+/Uv+Tbf1t/yck3vPPp/j+4N5y/LOmKpKuSrkm6LumGlGz2puyKTP1tp/6ddPWRZzcAAAAAAPgvM/tsDZ74TvrdfMun5aORr5rZ88vdqDt6rYdamn/s1Ti/g+dt/ZWS5Qf5VadPhewHrg2bb229ibZL9gEoq5Yd/8VyA2j8+B/1DmD+7axQCqcZ//Vk/HwqmQYWW++w/2oziroHc1uQJk2ZU2X5os3Bwo/Cxl/Mgn6ln4zM/qcxOJiaV5Z9UoFtPLffl4rbfCxo09RBL/bYztwX3j5Nr95mUMKclLKv9KfdYOCO0/rQIPqa+UOKojjs7Z/CfpkNxuHfA0VYxdEJwCy13+3tt3uH/Ye7e5s73Z3u67X1Tmd9bXWl004uy9tTTc4BnGX/TvpV9wQAAAAAAAAAAAAAAJR1S9LtyWNj/70HAAAAgLNr8huDGhPfTjSiLHcTAQAAAAAAAAAAAABwiv4EAAD//wvVO1M=")
socket$nl_generic(0x10, 0x3, 0x10)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
io_setup(0x222, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e459, 0x700000000000000)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)
symlinkat(&(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')

15.767312088s ago: executing program 8 (id=921):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000000340)=0xa, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r4, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a0252", 0x3b}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000001280)=0x1, 0x4)

15.587524739s ago: executing program 2 (id=922):
r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000580))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000005c0))
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f0000000280)=""/100, 0x0, 0x64, 0x1, 0x1000}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={<r4=>0x0}, &(0x7f0000000300)=0xc)
setpgid(r4, r1)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x8000)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

15.294587516s ago: executing program 7 (id=923):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, r0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
io_setup(0x6, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a00000a3c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c009afa05000100000000"], 0x94}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061108b000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)

14.279583105s ago: executing program 2 (id=924):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x80104d12, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
recvfrom$packet(r3, &(0x7f00000001c0)=""/180, 0xb4, 0x40010123, &(0x7f0000000280)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @random="a3fc46462109"}, 0x12)
setreuid(0xffffffffffffffff, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341)
ioctl$USBDEVFS_IOCTL(r4, 0x80045515, &(0x7f00000000c0)=@usbdevfs_connect={0x7})

13.83444988s ago: executing program 8 (id=925):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/188, 0xbc}], 0x1}, 0x7}], 0x1, 0x10000, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001e40)=@newtfilter={0x24, 0x2c, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xf}, {0xfff1, 0x2}, {0x7, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x800)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
sendmsg$inet(r6, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x80800})
listen(r6, 0x5)
io_uring_enter(r7, 0x3517, 0xc2de, 0x9, 0x0, 0x0)

11.926163492s ago: executing program 8 (id=926):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
io_uring_setup(0x1b7b, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
fsopen(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prctl$PR_MCE_KILL(0x35, 0x0, 0x8)
prctl$PR_MCE_KILL(0x35, 0x0, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0xc6a, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x80000, 0xd1})
io_uring_enter(r5, 0x0, 0x2, 0x17, 0x0, 0x0)

11.885959875s ago: executing program 7 (id=927):
openat$vsock(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2(0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0x2a, &(0x7f0000000880)={@local, @random="fa34db48716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
recvmmsg(r4, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)=""/232, 0xe8}], 0x1}, 0x1ff}], 0x1, 0x2, 0x0)
getpid()
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c)
r6 = socket$inet(0xa, 0x801, 0x6)
accept4(r6, 0x0, 0x0, 0x0)

10.227492922s ago: executing program 8 (id=928):
socket$inet(0x10, 0x3, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x1a404bc, &(0x7f0000001fc0)=ANY=[@ANYBLOB="ebbd4140", @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES16, @ANYBLOB="e1d1b255b4eb5f7ce5cabfaa8a31fcb491915ed1121629c89803e5ee0c991af7d1459747a51bb4aefcb8ab7d721d76eb99ad97e1d70adc338da072ec3b49b23a8da3dd31ccbdfab2467a077078b50ca51139d4713acb42fa9e8f4d08e7c178f538b5dfefb4964e01a0cfa9ed7a636921161338dadfdfd055a5d651d68194e6239be784a880c61ab050a82dbc95daba03a8a48f6f55ed615d6bb4c4ab6df5c1a7c85cddb187bbcce01a5b2d86e17ff68d9a4044a8338d754c9daba97c34f55696b542b457505b868bf8cd3e9a7c03b72acd99dcd68362366226f2a78bcaa8ba0e7d33285a9fbfa4c2a70dd915d4a7959e08a8c592", @ANYRES16], 0x1, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fanotify_init(0x40, 0x400)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, r3, 0x5, 0x0, @val=@tracing={0x0, 0x8000000000000000}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x4002, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@local})
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6})

9.443888437s ago: executing program 5 (id=929):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0x6a7})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
pread64(r4, 0x0, 0x0, 0x78f2a36b)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000200)={@my=0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000300)={r5, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r7, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}})
socket(0x10, 0x800, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'})
close_range(r2, 0xffffffffffffffff, 0x0)

9.359280742s ago: executing program 7 (id=930):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000066681900d46e5fec6dfb9ed6c09b8148a5b4578ce6a127bc73bf86fd4990d51be1ab57ffbd8c8f24816be64188e412c53e97c4bbdd840e4059ddf3698ea73108b16aa0d3515f15"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000024c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0), 0x80080)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002500))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020)
syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e07042d0c"], 0xa)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x10040, 0x0)

5.483957429s ago: executing program 7 (id=931):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x14d)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x3)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
sendmsg$tipc(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)
close(r4)
syz_open_dev$sg(0x0, 0x0, 0x0)
r6 = syz_open_dev$sg(0x0, 0x6, 0x2800)
ioctl$SG_GET_VERSION_NUM(r6, 0x2284, 0x0)
syz_open_dev$video(0x0, 0x7, 0x20000)

5.457671091s ago: executing program 5 (id=932):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00')
socket(0x1e, 0x805, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
r5 = dup2(r4, r4)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10})
ioctl$BLKTRACESTOP(r5, 0x1275, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100a7c1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f00000002c0)="6766c7442400010000006766c74424027a2add186766c744240600000000670f011424ba4300b000ee36f3af0f21fe0fbdc336d97dba0f01cfb863008ee80f01df263ed9fb", 0x45}], 0x1, 0x4, &(0x7f0000000380)=[@cstype0={0x4, 0x6}], 0x1)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x4044094)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
syz_open_procfs(0x0, 0x0)

4.164085507s ago: executing program 5 (id=933):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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")
chdir(&(0x7f00000003c0)='./bus\x00')
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_sctp(0x2, 0x1, 0x84)
r4 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r4, &(0x7f0000000200))
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{}, {}, {@noacl}, {}, {@nouser_xattr}, {@cache_strategy_readahead}]}, 0x1, 0x177, &(0x7f0000000680)="$eJzslL9KA0EQxr/diwkROztBLAwYi1zuLio2IsEXCPgPO6M5Q/RiQnKCiZXY+gC2tr5CGsEXUSsRUlpH9naTWyV/RNAgzq+Y+/Z2dm52Dj4QBPFveX56e7x+bV0YAKaQQEy9fzHCHK7ln+XiB9OpjbvWzcPVenW20q9mp/P170cA3GcN+L2zH08n1HMLvKe3wbGo9C4YTKX3wbGjtAuGPaWPNV0R+aZ5VPJc87DiFYSwRLBFcETIfO6vfclQ0Ppj2n690TzJe55b+0Exan7tLMea1p/+v7qzsbT52eCwlc6AYVPpVcS6s5Ej0e4/EwnrG798fxIkSPw1EfpT55ZhQfOniOYfab9cTdcbzVSpnC+6RffUcTIr1pJlLTvpwIhkHOJ/8cCfJrX6EwNyoyyK87zv12wZe2tHxn6OywP/40jOy7Xw/ujAbuQ+U+dYoJLGkHSCIIixMQcWeOYInNy4GyUIgiAIgiAIgiAI4tu8BwAA//9iEXZY")
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='cifs\x00', 0x1200010, &(0x7f0000000100))
recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x100a}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x3}, 0x1801}], 0x1, 0x0, 0x0)
r5 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000340)='./bus\x00', 0x18000, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}], [{@uid_gt={'uid>', 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'user_xattr'}}, {@subj_role}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}}, 0x1, 0x0, &(0x7f0000000c40)="185f28c8905204e79b816d5c979ce52b632c1772740f46557da888099cc56c4d1e1aefb03ca0c8ef3efcd45267fb3dd87b9baf1471dca7fc919dc9ee10a6ac6474b452ff81f84bb75896731cdcd9ca07b7a1bbef6b2e99d054cc4a0ad87481cb411d0dbc4db57bbf8ca04c249bf3d8e05d0752b38b4806381e938ff41f61f39e79538aacb670cf64fc959c310dead9717168e64f8bb59ee241b8d68ce6b9b3d519d5b592ca8545646ee9abce2c3964b8653ad6b3088f7345541f")
open_tree(r5, &(0x7f0000000380)='./file0\x00', 0x80000)

2.634757706s ago: executing program 7 (id=934):
r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000580))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000005c0))
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f0000000280)=""/100, 0x0, 0x64, 0x1, 0x1000}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={<r4=>0x0}, &(0x7f0000000300)=0xc)
setpgid(r4, r1)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x8000)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.405473838s ago: executing program 2 (id=935):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_socket_connect_nvme_tcp()
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'})
sendto$inet_nvme_pdu(r3, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)=0x4)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@rand_addr=0x64010102, @loopback}, 0x8)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880)

0s ago: executing program 5 (id=936):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000580))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000005c0))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ustat(0xac9e, &(0x7f0000000300))
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6(0xa, 0x1, 0x0)
sendmsg$sock(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x1000000, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.158885][    T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.368851][ T6406] device hsr_slave_0 entered promiscuous mode
[  419.397636][ T6406] device hsr_slave_1 entered promiscuous mode
[  419.440201][ T6406] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  419.447831][ T6406] Cannot create hsr debugfs directory
[  422.348324][ T6406] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  422.433469][ T6406] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  422.482915][ T6406] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  422.523715][ T6406] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  422.607798][ T6505] loop5: detected capacity change from 0 to 2048
[  422.676883][ T6505] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  424.313851][ T6505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  426.212342][ T6531] tmpfs: Unknown parameter 'fscontext'
[  426.358809][   T26] audit: type=1326 audit(1771270767.491:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7fc00000
[  426.410361][   T26] audit: type=1326 audit(1771270767.491:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c9e39bf79 code=0x7fc00000
[  426.410408][   T26] audit: type=1326 audit(1771270767.491:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7fc00000
[  426.410444][   T26] audit: type=1326 audit(1771270767.491:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7fc00000
[  426.410481][   T26] audit: type=1326 audit(1771270767.491:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7fc00000
[  426.411696][   T26] audit: type=1326 audit(1771270767.491:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7fc00000
[  426.412301][   T26] audit: type=1326 audit(1771270767.491:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7fc00000
[  426.412421][   T26] audit: type=1326 audit(1771270767.491:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7fc00000
[  426.412543][   T26] audit: type=1326 audit(1771270767.491:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7fc00000
[  426.412661][   T26] audit: type=1326 audit(1771270767.491:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7fc00000
[  427.138749][ T6406] 8021q: adding VLAN 0 to HW filter on device bond0
[  427.183757][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  427.184461][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  427.285190][ T6406] 8021q: adding VLAN 0 to HW filter on device team0
[  428.572922][ T6549] loop6: detected capacity change from 0 to 128
[  430.564428][ T4272] Bluetooth: hci5: command 0x0406 tx timeout
[  432.417955][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  432.430834][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  432.440573][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.447785][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state
[  432.484687][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  432.504856][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  432.611333][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.618536][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  432.669821][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  432.712106][ T6549] device batadv_slave_0 entered promiscuous mode
[  432.719843][ T6549] device batadv_slave_0 left promiscuous mode
[  432.726916][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  432.808084][ T6406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  433.621620][ T6406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  434.293385][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  434.318102][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  434.367957][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  434.386154][   T26] kauditd_printk_skb: 186 callbacks suppressed
[  434.386171][   T26] audit: type=1326 audit(1771270775.012:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  434.421997][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  434.441176][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  434.459441][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  434.483854][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  434.513036][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  434.531967][   T26] audit: type=1326 audit(1771270775.012:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  434.545032][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  434.587579][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  434.596055][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  434.642707][ T4325] libceph: connect (1)[c::]:6789 error -101
[  434.663967][ T4325] libceph: mon0 (1)[c::]:6789 connect error
[  434.685109][   T26] audit: type=1326 audit(1771270775.012:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  434.708631][   T26] audit: type=1326 audit(1771270775.096:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  434.731886][   T26] audit: type=1326 audit(1771270775.096:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  434.757444][ T6572] ceph: No mds server is up or the cluster is laggy
[  434.781981][   T26] audit: type=1326 audit(1771270775.096:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  434.805022][   T26] audit: type=1326 audit(1771270775.096:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  434.833950][   T26] audit: type=1326 audit(1771270775.096:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  434.921509][   T26] audit: type=1326 audit(1771270775.096:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  434.943712][    C1] vkms_vblank_simulate: vblank timer overrun
[  435.041408][   T26] audit: type=1326 audit(1771270775.096:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  435.080772][ T4278] Bluetooth: hci4: Malformed Event: 0x02
[  436.354909][ T6603] loop5: detected capacity change from 0 to 512
[  436.624635][ T6603] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  436.712668][ T6603] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  437.232610][ T6603] EXT4-fs (loop5): 1 truncate cleaned up
[  437.475817][ T6603] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  438.490370][ T6628] EXT4-fs (loop5): re-mounted. Quota mode: none.
[  438.503939][ T6629] EXT4-fs (loop5): re-mounted. Quota mode: none.
[  439.139479][ T5702] EXT4-fs (loop5): unmounting filesystem.
[  442.798156][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  442.811803][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  444.909633][ T6406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.075784][    T9] device hsr_slave_0 left promiscuous mode
[  446.249285][    T9] device hsr_slave_1 left promiscuous mode
[  446.338479][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.346027][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.501961][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  446.551879][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.613687][    T9] device bridge_slave_1 left promiscuous mode
[  447.058426][ T4272] Bluetooth: hci0: command 0x0406 tx timeout
[  447.551908][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.674600][    T9] device bridge_slave_0 left promiscuous mode
[  447.680952][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.842306][    T9] device veth1_macvtap left promiscuous mode
[  447.853732][    T9] device veth0_macvtap left promiscuous mode
[  447.872314][    T9] device veth1_vlan left promiscuous mode
[  447.904790][    T9] device veth0_vlan left promiscuous mode
[  450.632839][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  450.639334][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  455.209579][ T6736] loop5: detected capacity change from 0 to 164
[  458.807191][ T6755] loop5: detected capacity change from 0 to 256
[  460.889260][    T9] team0 (unregistering): Port device team_slave_1 removed
[  460.937152][ T6761] loop6: detected capacity change from 0 to 32768
[  461.091212][    T9] team0 (unregistering): Port device team_slave_0 removed
[  461.107039][ T6761] XFS (loop6): Mounting V5 Filesystem
[  461.235948][ T6761] XFS (loop6): Ending clean mount
[  461.243694][ T6761] XFS (loop6): Quotacheck needed: Please wait.
[  461.295494][ T6761] XFS (loop6): Quotacheck: Done.
[  462.046993][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  462.266892][ T5800] XFS (loop6): Unmounting Filesystem
[  463.663620][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  466.029284][ T4272] Bluetooth: hci5: command 0x2016 tx timeout
[  466.117236][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  466.127915][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  466.137063][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  466.146237][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  466.155820][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  466.163462][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  466.910804][ T6797] loop6: detected capacity change from 0 to 16
[  467.016786][ T6797] erofs: (device loop6): mounted with root inode @ nid 36.
[  467.713448][ T6799] erofs: (device loop6): erofs_read_inode: bogus i_mode (4355) @ nid 46
[  467.723146][ T6799] erofs: (device loop6): erofs_read_inode: bogus i_mode (4355) @ nid 46
[  467.735409][ T6799] erofs: (device loop6): erofs_read_inode: bogus i_mode (4355) @ nid 46
[  468.259912][ T6802] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  469.774515][ T4274] Bluetooth: hci2: command 0x0409 tx timeout
[  472.482119][ T4274] Bluetooth: hci2: command 0x041b tx timeout
[  476.006711][ T4278] Bluetooth: hci2: command 0x040f tx timeout
[  476.041301][ T6831] Bluetooth: MGMT ver 1.22
[  476.316013][    T9] bond0 (unregistering): Released all slaves
[  479.371569][ T4278] Bluetooth: hci2: command 0x0419 tx timeout
[  481.544254][ T6793] chnl_net:caif_netlink_parms(): no params data found
[  481.833890][ T4278] Bluetooth: hci2: command 0x0405 tx timeout
[  483.109768][ T6875] loop5: detected capacity change from 0 to 2048
[  483.219028][ T6875] NILFS (loop5): invalid segment: Magic number mismatch
[  483.226890][ T6875] NILFS (loop5): trying rollback from an earlier position
[  483.350522][ T6875] NILFS (loop5): recovery complete
[  484.121078][ T6877] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  486.779078][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.614447][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.649806][ T6793] device bridge_slave_0 entered promiscuous mode
[  487.681904][ T6793] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.508860][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.584582][ T6793] device bridge_slave_1 entered promiscuous mode
[  489.643668][ T6793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  489.712725][ T6914] 9pnet_fd: Insufficient options for proto=fd
[  490.459322][ T6917] loop5: detected capacity change from 0 to 131072
[  490.471859][ T6793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.481828][ T6917] F2FS-fs (loop5): Wrong CP boundary, start(512) end(198144) blocks(1024)
[  490.491156][ T6917] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  490.503194][ T6917] F2FS-fs (loop5): invalid crc value
[  490.531947][ T6917] F2FS-fs (loop5): Found nat_bits in checkpoint
[  490.580013][ T6917] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  490.587309][ T6917] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  491.228328][ T6925] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  493.995078][ T6793] team0: Port device team_slave_0 added
[  494.073426][ T6793] team0: Port device team_slave_1 added
[  495.184076][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  495.191459][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.395749][ T6793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  496.592280][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  496.701239][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.829553][ T6793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.719265][ T6793] device hsr_slave_0 entered promiscuous mode
[  499.756204][ T6793] device hsr_slave_1 entered promiscuous mode
[  499.775059][ T6793] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  499.806401][ T6793] Cannot create hsr debugfs directory
[  500.952217][ T6972] loop5: detected capacity change from 0 to 128
[  506.800772][ T6996] sctp: [Deprecated]: syz.4.472 (pid 6996) Use of struct sctp_assoc_value in delayed_ack socket option.
[  506.800772][ T6996] Use struct sctp_sack_info instead
[  507.316526][ T6793] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  507.444056][ T7014] mmap: syz.5.470 (7014) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  507.526743][ T6793] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  507.593098][ T6793] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  507.783339][ T6793] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  507.966306][ T7017] loop6: detected capacity change from 0 to 512
[  508.066385][ T7017] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  508.334631][ T7017] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  508.795965][ T7017] EXT4-fs (loop6): 1 truncate cleaned up
[  508.801688][ T7017] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  509.080273][ T6793] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.824960][   T26] kauditd_printk_skb: 56 callbacks suppressed
[  509.826893][   T26] audit: type=1326 audit(1771271100.965:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa97b9bf79 code=0x7ffc0000
[  510.356166][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  510.451477][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  510.687885][ T4437] device hsr_slave_0 left promiscuous mode
[  510.697934][   T26] audit: type=1326 audit(1771271100.965:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa97b9bf79 code=0x7ffc0000
[  510.839066][ T4437] device hsr_slave_1 left promiscuous mode
[  510.956205][   T26] audit: type=1326 audit(1771271100.965:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffa97b9bf79 code=0x7ffc0000
[  510.979637][   T26] audit: type=1326 audit(1771271100.965:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa97b9bf79 code=0x7ffc0000
[  511.002061][   T26] audit: type=1326 audit(1771271100.974:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa97b9bf79 code=0x7ffc0000
[  511.024642][   T26] audit: type=1326 audit(1771271100.974:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffa97b9bf79 code=0x7ffc0000
[  511.051758][   T26] audit: type=1326 audit(1771271100.974:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa97b9bf79 code=0x7ffc0000
[  511.074300][   T26] audit: type=1326 audit(1771271100.974:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa97b9bf79 code=0x7ffc0000
[  511.097952][   T26] audit: type=1326 audit(1771271100.974:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa97b9bf79 code=0x7ffc0000
[  511.120906][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_0
[  511.131316][   T26] audit: type=1326 audit(1771271100.974:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa97b9bf79 code=0x7ffc0000
[  511.155427][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_1
[  511.175113][ T4437] device bridge_slave_1 left promiscuous mode
[  511.192440][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.269985][ T4437] device bridge_slave_0 left promiscuous mode
[  511.446613][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.584316][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  515.590752][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  518.179873][ T4437] team0 (unregistering): Port device team_slave_1 removed
[  518.266298][ T5800] EXT4-fs (loop6): unmounting filesystem.
[  518.629105][ T4437] team0 (unregistering): Port device team_slave_0 removed
[  518.695366][ T7081] loop5: detected capacity change from 0 to 256
[  519.459975][ T7078] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  519.698550][ T4437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  520.215838][ T7090] loop5: detected capacity change from 0 to 32768
[  520.607826][ T7090] XFS (loop5): Mounting V5 Filesystem
[  521.405409][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  521.482694][ T7090] XFS (loop5): Ending clean mount
[  521.501233][ T7090] XFS (loop5): Quotacheck needed: Please wait.
[  521.684984][ T7090] XFS (loop5): Quotacheck: Done.
[  522.598291][ T5702] XFS (loop5): Unmounting Filesystem
[  528.323141][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  528.335574][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  528.343735][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  528.353468][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  528.626062][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  528.635750][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  529.300946][ T4437] bond0 (unregistering): Released all slaves
[  530.847400][ T7120] netlink: 'syz.4.488': attribute type 22 has an invalid length.
[  531.485386][ T4278] Bluetooth: hci1: command 0x0409 tx timeout
[  531.526505][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'.
[  531.588164][ T7120] bond0: option ad_select: unable to set because the bond device is up
[  533.712009][ T4278] Bluetooth: hci1: command 0x041b tx timeout
[  534.708743][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  535.935640][ T4278] Bluetooth: hci1: command 0x040f tx timeout
[  536.115658][ T7131] chnl_net:caif_netlink_parms(): no params data found
[  536.821317][ T7131] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.962234][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.970593][ T7131] device bridge_slave_0 entered promiscuous mode
[  537.017801][ T7131] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.025147][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.059308][ T7131] device bridge_slave_1 entered promiscuous mode
[  537.163949][ T7131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  537.263522][ T7131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  537.403309][ T7131] team0: Port device team_slave_0 added
[  537.497403][ T7131] team0: Port device team_slave_1 added
[  537.587614][ T7131] batman_adv: batadv0: Adding interface: batadv_slave_0
[  537.609992][ T7131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  537.781603][ T7131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.213802][ T4278] Bluetooth: hci1: command 0x0419 tx timeout
[  538.983066][ T7131] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.990088][ T7131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  539.814091][ T7131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  541.634521][ T7205] loop6: detected capacity change from 0 to 128
[  541.710993][ T7205] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  542.383576][ T7205] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  546.227763][ T7131] device hsr_slave_0 entered promiscuous mode
[  547.873646][ T7131] device hsr_slave_1 entered promiscuous mode
[  548.005431][ T7131] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  548.013189][ T7131] Cannot create hsr debugfs directory
[  549.352569][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  549.352588][   T26] audit: type=1400 audit(1771271137.978:325): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=7235 comm="syz.4.511"
[  555.442066][ T7286] tty tty2: ldisc open failed (-12), clearing slot 1
[  555.556359][ T4278] Bluetooth: Unexpected continuation frame (len 10)
[  557.100117][ T7298] loop5: detected capacity change from 0 to 512
[  557.118543][ T7298] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  557.232611][ T7298] EXT4-fs (loop5): 1 truncate cleaned up
[  557.239058][ T7298] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  558.095783][ T7302] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  559.829956][ T5702] EXT4-fs (loop5): unmounting filesystem.
[  560.253593][ T4278] Bluetooth: Frame is too long (len 18, expected len 4)
[  561.863061][ T7131] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  562.071299][ T7131] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  563.049292][ T7131] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  563.125031][ T7131] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  563.178412][ T4437] device hsr_slave_0 left promiscuous mode
[  563.218215][ T4437] device hsr_slave_1 left promiscuous mode
[  563.472552][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_0
[  563.584934][ T7343] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  564.360130][ T7334] loop5: detected capacity change from 0 to 512
[  564.420703][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.473988][ T4437] device bridge_slave_1 left promiscuous mode
[  564.495518][ T7334] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  564.504662][ T7334] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  564.526868][ T7334] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #2: comm syz.5.527: corrupted inode contents
[  564.543597][ T7334] EXT4-fs error (device loop5): ext4_dirty_inode:6137: inode #2: comm syz.5.527: mark_inode_dirty error
[  564.555708][ T7334] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #2: comm syz.5.527: corrupted inode contents
[  564.569000][ T7334] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.527: mark_inode_dirty error
[  564.648249][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.167870][ T7361] loop6: detected capacity change from 0 to 128
[  566.189715][ T4437] device bridge_slave_0 left promiscuous mode
[  566.198197][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.942802][ T5702] EXT4-fs (loop5): unmounting filesystem.
[  568.844112][ T7372] loop5: detected capacity change from 0 to 40427
[  568.993274][ T7372] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  569.001641][ T7372] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  569.014591][ T7372] F2FS-fs (loop5): invalid crc value
[  569.255521][ T7372] F2FS-fs (loop5): Found nat_bits in checkpoint
[  569.996525][ T7372] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  570.003699][ T7372] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  570.694716][ T4437] team0 (unregistering): Port device team_slave_1 removed
[  570.982699][ T4437] team0 (unregistering): Port device team_slave_0 removed
[  571.083653][ T4437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  571.316417][ T7394] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  572.338207][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  573.382397][ T7401] trusted_key: encrypted_key: insufficient parameters specified
[  573.744474][ T4437] bond0 (unregistering): Released all slaves
[  575.553912][ T7131] 8021q: adding VLAN 0 to HW filter on device bond0
[  575.622059][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  575.696920][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  575.731958][ T7131] 8021q: adding VLAN 0 to HW filter on device team0
[  577.648506][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  577.698661][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  577.967869][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.975252][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state
[  577.984774][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  577.994821][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  578.003648][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.010805][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  579.125966][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  579.177626][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  579.234229][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  580.226018][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  580.339986][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  580.386537][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  580.570365][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  580.792501][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  581.084379][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  581.207140][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  581.269580][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  581.276558][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  581.328351][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  581.337114][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  581.351114][ T7131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  584.912987][ T7486] loop6: detected capacity change from 0 to 128
[  584.931418][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  584.939991][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  584.977569][ T7131] 8021q: adding VLAN 0 to HW filter on device batadv0
[  586.684574][ T7486] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  586.833685][ T7486] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  587.363686][ T7501] Mount JFS Failure: -22
[  587.368464][ T7501] jfs_mount failed w/return code = -22
[  588.065226][ T5800] EXT4-fs (loop6): unmounting filesystem.
[  589.346639][ T7514] loop5: detected capacity change from 0 to 32768
[  592.606444][ T4278] Bluetooth: Unexpected continuation frame (len 10)
[  596.224515][ T7572] loop6: detected capacity change from 0 to 2048
[  596.250216][ T7572] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  596.945947][   T26] audit: type=1800 audit(1771271183.074:326): pid=7574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.571" name="file1" dev="loop6" ino=1313 res=0 errno=0
[  600.046781][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  600.472216][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  600.481203][ T4272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  600.635937][ T4272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  600.647501][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  600.654926][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  601.851876][ T7602] syz.5.585 (7602) used greatest stack depth: 18096 bytes left
[  602.149653][ T7612] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  602.829390][ T4272] Bluetooth: hci1: command 0x0409 tx timeout
[  605.335671][ T4278] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  605.350150][ T4278] Bluetooth: hci1: command 0x041b tx timeout
[  606.469291][ T7588] chnl_net:caif_netlink_parms(): no params data found
[  606.548505][ T7632] loop5: detected capacity change from 0 to 128
[  606.616944][ T7632] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  606.669976][ T7632] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  607.666018][ T7651] Illegal XDP return value 4294967274 on prog  (id 40) dev N/A, expect packet loss!
[  607.755284][ T4278] Bluetooth: hci1: command 0x040f tx timeout
[  608.108976][ T5702] EXT4-fs (loop5): unmounting filesystem.
[  609.860533][ T7677] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.591'.
[  609.914565][ T4278] Bluetooth: hci1: command 0x0419 tx timeout
[  610.763103][ T7588] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.825844][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.867752][ T7588] device bridge_slave_0 entered promiscuous mode
[  611.915985][ T7588] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.923183][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.454405][ T7588] device bridge_slave_1 entered promiscuous mode
[  613.860012][ T4333] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  614.031533][ T4333] usb 6-1: device descriptor read/64, error -71
[  614.278685][ T7588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  614.322735][ T7588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  614.340596][ T4333] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  614.483687][ T7588] team0: Port device team_slave_0 added
[  614.511572][ T4333] usb 6-1: device descriptor read/64, error -71
[  615.150814][ T7588] team0: Port device team_slave_1 added
[  615.591503][ T4333] usb usb6-port1: attempt power cycle
[  615.668928][ T7696] syz.6.598 (7696): drop_caches: 2
[  615.823321][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_0
[  615.860345][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  615.955071][ T7588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  616.009663][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_1
[  616.016686][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  616.136548][ T7588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  616.254104][ T4333] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  616.566763][ T7588] device hsr_slave_0 entered promiscuous mode
[  616.742768][ T7588] device hsr_slave_1 entered promiscuous mode
[  616.951433][ T7588] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  616.959101][ T7588] Cannot create hsr debugfs directory
[  617.218643][ T4333] usb 6-1: device descriptor read/8, error -71
[  619.584768][ T7709] xt_hashlimit: size too large, truncated to 1048576
[  619.592032][ T7709] xt_hashlimit: invalid rate
[  620.990402][   T26] audit: type=1326 audit(1771271205.561:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7ffc0000
[  621.318197][   T26] audit: type=1326 audit(1771271205.636:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7ffc0000
[  621.902405][   T26] audit: type=1326 audit(1771271205.655:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f5c9e35846c code=0x7ffc0000
[  622.254176][ T7270] libceph: connect (1)[c::]:6789 error -101
[  622.260280][ T7270] libceph: mon0 (1)[c::]:6789 connect error
[  622.291091][   T26] audit: type=1326 audit(1771271205.673:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5c9e3584ce code=0x7ffc0000
[  622.291603][ T7711] ceph: No mds server is up or the cluster is laggy
[  622.343206][   T26] audit: type=1326 audit(1771271205.701:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c9e39bc0b code=0x7ffc0000
[  622.441304][   T26] audit: type=1326 audit(1771271205.739:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c9e39bf79 code=0x7ffc0000
[  622.477109][   T26] audit: type=1326 audit(1771271205.832:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7ffc0000
[  622.548179][   T26] audit: type=1326 audit(1771271205.832:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7ffc0000
[  622.586285][   T26] audit: type=1326 audit(1771271205.832:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7ffc0000
[  623.244327][ T7741] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.606'.
[  623.258876][   T26] audit: type=1326 audit(1771271205.842:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9e39bf79 code=0x7ffc0000
[  625.091449][ T7588] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  625.358392][ T4384] device hsr_slave_0 left promiscuous mode
[  625.466005][ T7765] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  625.924554][ T7770] loop6: detected capacity change from 0 to 256
[  625.959314][ T4384] device hsr_slave_1 left promiscuous mode
[  625.972478][ T7212] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  626.257480][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0
[  626.304656][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1
[  627.205664][ T7773] loop6: detected capacity change from 0 to 32768
[  627.239911][ T4384] device bridge_slave_1 left promiscuous mode
[  627.265007][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.397064][ T7773] XFS (loop6): Mounting V5 Filesystem
[  628.580729][ T7773] XFS (loop6): log mount failed
[  628.612485][ T4384] device bridge_slave_0 left promiscuous mode
[  628.624085][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.777104][ T7804] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.616'.
[  635.978871][ T7836] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  638.352197][ T7859] capability: warning: `syz.6.637' uses 32-bit capabilities (legacy support in use)
[  640.466025][ T7872] loop5: detected capacity change from 0 to 2048
[  640.841461][ T7872] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  642.924247][ T4293] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  642.944844][ T4293] EXT4-fs (loop5): Remounting filesystem read-only
[  642.963825][ T4278] Bluetooth: hci4: Malformed Event: 0x02
[  645.393284][ T5702] EXT4-fs (loop5): unmounting filesystem.
[  646.182634][ T4384] team0 (unregistering): Port device team_slave_1 removed
[  646.435950][ T7924] loop6: detected capacity change from 0 to 256
[  646.544090][ T4384] team0 (unregistering): Port device team_slave_0 removed
[  647.056643][ T7927] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  647.927199][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  647.933614][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  647.977215][ T4384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  648.923509][ T7938] loop6: detected capacity change from 0 to 32768
[  648.996321][ T7938] XFS (loop6): Mounting V5 Filesystem
[  649.090709][ T7938] XFS (loop6): Ending clean mount
[  649.117850][ T7938] XFS (loop6): Quotacheck needed: Please wait.
[  649.142296][ T4384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  649.278382][ T7938] XFS (loop6): Quotacheck: Done.
[  650.089613][ T5800] XFS (loop6): Unmounting Filesystem
[  650.587946][ T4278] Bluetooth: hci5: Malformed Event: 0x02
[  653.789932][ T4384] bond0 (unregistering): Released all slaves
[  654.051593][ T7588] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  654.066846][ T7909] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  654.076818][ T7909] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  654.086596][ T7909] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  654.171582][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'.
[  654.520985][ T4278] Bluetooth: hci1: link tx timeout
[  654.530064][ T4278] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  655.041155][ T4278] Bluetooth: hci1: link tx timeout
[  655.046351][ T4278] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  655.303149][ T7588] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  655.351460][ T7588] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  656.945504][ T4278] Bluetooth: hci1: command 0x0406 tx timeout
[  657.326166][ T8022] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  660.628500][ T8042] ./cgroup: Can't open blockdev
[  662.439034][   T26] kauditd_printk_skb: 62 callbacks suppressed
[  662.439050][   T26] audit: type=1326 audit(1771271756.343:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c999bf79 code=0x7ffc0000
[  662.528916][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  662.539272][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  662.551198][ T4272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  662.571986][ T4272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  662.580173][   T26] audit: type=1326 audit(1771271756.371:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c999bf79 code=0x7ffc0000
[  662.580195][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  662.613247][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  662.640775][ T4255] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  662.664953][   T26] audit: type=1326 audit(1771271756.371:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c999bf79 code=0x7ffc0000
[  662.769356][   T26] audit: type=1326 audit(1771271756.502:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c999bf79 code=0x7ffc0000
[  662.854659][   T26] audit: type=1326 audit(1771271756.530:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c999bf79 code=0x7ffc0000
[  662.886816][ T4255] usb 5-1: Using ep0 maxpacket: 8
[  662.932640][ T4255] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  662.972229][ T4255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.980627][ T4255] usb 5-1: Product: syz
[  662.996077][ T4255] usb 5-1: Manufacturer: syz
[  663.000913][ T4255] usb 5-1: SerialNumber: syz
[  663.020723][   T26] audit: type=1326 audit(1771271756.539:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f88c999bf79 code=0x7ffc0000
[  663.072267][ T4255] usb 5-1: config 0 descriptor??
[  663.169977][   T26] audit: type=1326 audit(1771271756.539:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c999bf79 code=0x7ffc0000
[  663.270498][ T4255] option 5-1:0.0: GSM modem (1-port) converter detected
[  663.356110][   T26] audit: type=1326 audit(1771271756.539:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c999bf79 code=0x7ffc0000
[  664.201884][ T8066] fuse: Bad value for 'fd'
[  664.719266][   T26] audit: type=1326 audit(1771271756.652:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c999bf79 code=0x7ffc0000
[  664.751705][ T4255] usb 5-1: USB disconnect, device number 2
[  664.784872][ T4255] option 5-1:0.0: device disconnected
[  664.821857][ T4274] Bluetooth: hci1: command 0x0409 tx timeout
[  665.179115][   T26] audit: type=1326 audit(1771271756.652:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f88c999bf79 code=0x7ffc0000
[  666.466192][ T8055] chnl_net:caif_netlink_parms(): no params data found
[  667.073509][ T4274] Bluetooth: hci1: command 0x041b tx timeout
[  669.584366][ T4274] Bluetooth: hci1: command 0x040f tx timeout
[  669.604673][ T7078] udevd[7078]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  669.804688][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.812364][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.847595][ T8055] device bridge_slave_0 entered promiscuous mode
[  670.004196][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.451344][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.539696][ T8055] device bridge_slave_1 entered promiscuous mode
[  671.425774][ T8055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  671.496227][ T8055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  671.652003][ T8107] loop6: detected capacity change from 0 to 2048
[  671.749399][ T4274] Bluetooth: hci1: command 0x0419 tx timeout
[  671.871939][ T8055] team0: Port device team_slave_0 added
[  671.911652][ T8055] team0: Port device team_slave_1 added
[  671.933556][ T8112] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  672.605961][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_0
[  672.612979][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  672.919596][ T8055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  672.996688][ T8112] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  673.031971][ T8112] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4)
[  673.067762][ T8112] Remounting filesystem read-only
[  673.073448][ T5800] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  673.115321][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_1
[  673.136131][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  673.275253][ T8055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  673.404010][ T4297] device hsr_slave_0 left promiscuous mode
[  673.428559][ T4297] device hsr_slave_1 left promiscuous mode
[  673.439782][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0
[  673.457127][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1
[  673.481595][ T4297] device bridge_slave_1 left promiscuous mode
[  673.487958][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.531520][ T4297] device bridge_slave_0 left promiscuous mode
[  673.573159][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.597378][ T8123] kvm [8122]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x5300
[  676.528229][ T8154] ptrace attach of "./syz-executor exec"[5800] was attempted by ""[8154]
[  677.702742][ T8157] sctp: failed to load transform for md5: -2
[  677.965229][ T4297] team0 (unregistering): Port device team_slave_1 removed
[  678.492086][ T8171] loop6: detected capacity change from 0 to 1024
[  678.996150][ T8171] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000]
[  679.084639][ T8171] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 2: comm syz.6.684: lblock 2 mapped to illegal pblock 2 (length 1)
[  679.099612][ T8171] __quota_error: 30 callbacks suppressed
[  679.099629][ T8171] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  679.113703][ T8171] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 48: comm syz.6.684: lblock 0 mapped to illegal pblock 48 (length 1)
[  679.132485][ T8171] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  679.145795][ T8171] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.684: Failed to acquire dquot type 0
[  679.163823][ T8171] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5933: Corrupt filesystem
[  679.174234][ T8171] EXT4-fs error (device loop6): ext4_evict_inode:279: inode #11: comm syz.6.684: mark_inode_dirty error
[  679.186158][ T8171] EXT4-fs warning (device loop6): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  679.196498][ T8171] EXT4-fs (loop6): 1 orphan inode deleted
[  679.202435][ T8171] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  679.258801][ T4759] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:19: lblock 1 mapped to illegal pblock 1 (length 1)
[  679.306404][ T4297] team0 (unregistering): Port device team_slave_0 removed
[  681.144339][ T4759] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  681.375273][ T4759] EXT4-fs error (device loop6): ext4_release_dquot:6871: comm kworker/u4:19: Failed to release dquot type 0
[  681.447821][ T5800] EXT4-fs (loop6): unmounting filesystem.
[  681.500349][ T4293] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  681.563153][ T4293] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  681.576877][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  682.704024][ T4293] EXT4-fs error (device loop6): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 0
[  682.739062][ T5800] EXT4-fs error (device loop6): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0
[  682.798067][ T5800] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5933: Corrupt filesystem
[  682.850134][ T5800] EXT4-fs error (device loop6): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error
[  683.329794][ T8197] ALSA: mixer_oss: invalid OSS volume ''
[  683.819159][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  685.390583][ T8213] loop5: detected capacity change from 0 to 1024
[  685.402609][ T8213] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  686.246515][ T8217] loop6: detected capacity change from 0 to 16
[  686.309106][ T8217] erofs: (device loop6): mounted with root inode @ nid 36.
[  686.315057][ T4297] bond0 (unregistering): Released all slaves
[  686.858329][ T8223] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  686.986956][ T8222] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  686.997176][ T8222] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  687.009360][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 42 @ nid 36
[  687.018788][ T8222] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  687.028379][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 41 @ nid 36
[  687.037593][ T8222] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  687.047025][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36
[  687.056731][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36
[  687.066394][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36
[  687.078028][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 36 @ nid 36
[  687.087557][ T8222] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  687.097099][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 31 @ nid 36
[  687.106620][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36
[  687.118114][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36
[  687.127632][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 19 @ nid 36
[  687.138438][ T8222] syz.6.697: attempt to access beyond end of device
[  687.138438][ T8222] loop6: rw=524288, sector=784, nr_sectors = 64 limit=16
[  687.152587][ T8222] syz.6.697: attempt to access beyond end of device
[  687.152587][ T8222] loop6: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  687.167413][ T8222] syz.6.697: attempt to access beyond end of device
[  687.167413][ T8222] loop6: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  687.189182][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 87 @ nid 36
[  687.198484][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36
[  687.208057][ T8222] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  687.217478][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 83 @ nid 36
[  687.229441][ T8222] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  687.238997][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 82 @ nid 36
[  687.248529][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 79 @ nid 36
[  687.257704][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 78 @ nid 36
[  687.267099][ T8222] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  687.276683][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 76 @ nid 36
[  687.285952][ T8222] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  687.295560][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 75 @ nid 36
[  687.305055][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36
[  687.314304][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36
[  687.324093][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 71 @ nid 36
[  687.333342][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36
[  687.345765][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 63 @ nid 36
[  687.355101][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 61 @ nid 36
[  687.364365][ T8222] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  687.373871][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 59 @ nid 36
[  687.385532][ T8222] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  687.395143][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 58 @ nid 36
[  687.404914][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 56 @ nid 36
[  687.414397][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36
[  687.423835][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36
[  687.433163][ T8222] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  687.442700][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36
[  687.454675][ T8222] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  687.464343][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36
[  687.473565][ T8222] erofs: (device loop6): z_erofs_readahead: readahead error at page 45 @ nid 36
[  687.483074][ T8222] syz.6.697: attempt to access beyond end of device
[  687.483074][ T8222] loop6: rw=524288, sector=32, nr_sectors = 64 limit=16
[  687.497097][ T8222] syz.6.697: attempt to access beyond end of device
[  687.497097][ T8222] loop6: rw=524288, sector=16, nr_sectors = 16 limit=16
[  687.510809][ T8222] syz.6.697: attempt to access beyond end of device
[  687.510809][ T8222] loop6: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  687.937761][ T8223] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -11 in[46, 4050] out[5297]
[  687.949426][ T8223] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117]
[  688.014523][ T5800] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  688.066325][ T5800] syz-executor: attempt to access beyond end of device
[  688.066325][ T5800] loop6: rw=0, sector=296, nr_sectors = 8 limit=16
[  688.095535][ T5800] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117]
[  688.116336][ T5800] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  688.164351][ T8055] device hsr_slave_0 entered promiscuous mode
[  688.881882][ T8055] device hsr_slave_1 entered promiscuous mode
[  689.128891][ T8055] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  689.164233][ T8055] Cannot create hsr debugfs directory
[  691.555070][ T8246] loop5: detected capacity change from 0 to 1024
[  692.468433][ T8246] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #4: comm syz.5.705: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  692.521336][ T8246] EXT4-fs error (device loop5): ext4_quota_enable:7046: comm syz.5.705: Bad quota inode: 4, type: 1
[  692.533607][ T8246] EXT4-fs warning (device loop5): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  692.632708][ T8246] EXT4-fs (loop5): mount failed
[  693.061747][ T8259] loop5: detected capacity change from 0 to 256
[  695.983859][ T8266] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  710.237106][ T8055] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  710.322738][ T8055] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  710.470956][ T8055] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  710.606920][ T8317] delete_channel: no stack
[  711.743428][ T8055] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  711.750928][ T8316] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  711.784605][ T8316] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  711.817629][ T8316] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  712.175696][ T8327] loop5: detected capacity change from 0 to 128
[  712.308842][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0
[  712.352554][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  712.526058][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  712.642443][ T8330] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 323)
[  712.651854][ T8330] FAT-fs (loop5): Filesystem has been set read-only
[  712.663592][   T26] audit: type=1800 audit(1771271803.300:439): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.717" name="file2" dev="loop5" ino=1048673 res=0 errno=0
[  712.836881][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  712.849522][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  713.217544][ T8055] 8021q: adding VLAN 0 to HW filter on device team0
[  713.304611][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  713.313585][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  713.534643][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state
[  713.541875][ T6598] bridge0: port 1(bridge_slave_0) entered forwarding state
[  713.910806][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  714.554740][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  716.104857][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  716.301048][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state
[  716.308268][ T4386] bridge0: port 2(bridge_slave_1) entered forwarding state
[  717.366328][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  717.422923][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  717.522209][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  717.571315][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  717.590770][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  717.621541][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  717.664685][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  717.713060][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  717.774510][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  717.811287][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  717.847872][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  717.903078][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  717.981513][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  717.994398][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  718.006483][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  718.015764][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  718.031177][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  718.045258][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  720.248792][ T8389] loop5: detected capacity change from 0 to 256
[  720.285346][ T8389] FAT-fs (loop5): Unrecognized mount option "smackfsdef=vfat" or missing value
[  721.082628][ T4272] Bluetooth: hci2: command 0x0409 tx timeout
[  722.680104][ T7078] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  722.899032][ T8397] ALSA: mixer_oss: invalid OSS volume ''
[  723.622776][ T4272] Bluetooth: hci2: command 0x041b tx timeout
[  723.766196][ T8366] chnl_net:caif_netlink_parms(): no params data found
[  724.345889][ T4293] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.758288][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state
[  725.766489][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.793538][ T8423] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  725.802247][ T4272] Bluetooth: hci2: command 0x040f tx timeout
[  725.819504][ T8366] device bridge_slave_0 entered promiscuous mode
[  725.853952][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state
[  725.883159][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state
[  725.914172][ T8366] device bridge_slave_1 entered promiscuous mode
[  725.995671][ T8410] device gretap1 entered promiscuous mode
[  726.181488][ T4293] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.228662][ T8366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  726.242248][ T8366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  726.317028][ T4293] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.328929][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  726.340484][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  726.349946][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  726.360414][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  726.368391][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  726.376275][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  726.446075][ T8366] team0: Port device team_slave_0 added
[  726.467731][ T8366] team0: Port device team_slave_1 added
[  726.508425][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_0
[  726.515550][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  726.543123][ T8366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  726.576786][ T4293] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.614016][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_1
[  726.620991][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  726.660756][ T8366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  727.596096][ T8366] device hsr_slave_0 entered promiscuous mode
[  727.611297][ T8366] device hsr_slave_1 entered promiscuous mode
[  727.845930][ T8366] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  727.853878][ T8366] Cannot create hsr debugfs directory
[  727.952642][ T8454] overlayfs: failed to clone upperpath
[  728.047395][ T4278] Bluetooth: hci2: command 0x0419 tx timeout
[  728.538351][ T4278] Bluetooth: hci0: command 0x0409 tx timeout
[  731.356659][ T4272] Bluetooth: hci0: command 0x041b tx timeout
[  731.424889][ T8462] overlayfs: failed to clone upperpath
[  731.625521][ T8431] chnl_net:caif_netlink_parms(): no params data found
[  733.576980][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.584547][ T4272] Bluetooth: hci0: command 0x040f tx timeout
[  733.587991][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.620831][ T8431] device bridge_slave_0 entered promiscuous mode
[  733.654218][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state
[  733.671329][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.694424][ T8431] device bridge_slave_1 entered promiscuous mode
[  733.806357][ T8366] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  733.887387][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  733.911744][ T8366] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  733.948009][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  734.377198][ T8366] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  734.654722][ T8366] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  735.183342][ T8431] team0: Port device team_slave_0 added
[  735.225425][ T8431] team0: Port device team_slave_1 added
[  735.432780][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0
[  735.472534][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  735.548652][   T27] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  735.565206][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  735.619142][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1
[  735.627086][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  735.689246][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  735.725128][ T8513] binder: 8508:8513 ioctl 4018620d 0 returned -22
[  735.840875][ T4278] Bluetooth: hci0: command 0x0419 tx timeout
[  736.392779][   T27] usb 6-1: device descriptor read/64, error -71
[  736.740744][   T27] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  738.088436][ T8431] device hsr_slave_0 entered promiscuous mode
[  738.123865][ T8431] device hsr_slave_1 entered promiscuous mode
[  738.138450][ T8431] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  738.158507][ T8431] Cannot create hsr debugfs directory
[  742.035606][ T8523] syz.4.745 (8523): drop_caches: 2
[  742.540064][ T8366] 8021q: adding VLAN 0 to HW filter on device bond0
[  742.683016][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  742.699525][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  742.739173][ T8366] 8021q: adding VLAN 0 to HW filter on device team0
[  742.975722][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  743.009241][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  743.029353][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state
[  743.036726][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state
[  743.068068][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  744.284503][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  744.302355][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  744.327017][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state
[  744.334266][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  744.882831][ T8574] loop5: detected capacity change from 0 to 32768
[  745.106524][ T8574] 
[  745.106524][ T8574]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  745.106524][ T8574] 
[  745.160403][ T8571] read_mapping_page failed!
[  745.165807][ T8571] ERROR: (device loop5): txCommit: 
[  745.165807][ T8571] 
[  745.207678][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  745.240623][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  745.250721][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  746.947119][ T5702] 
[  746.947119][ T5702]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  746.947119][ T5702] 
[  746.958392][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  746.968597][ T5702] 
[  746.968597][ T5702]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  746.968597][ T5702] 
[  747.001983][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  747.298292][ T4293] device hsr_slave_0 left promiscuous mode
[  747.333712][ T8590] tmpfs: Unknown parameter 'quota'
[  747.411996][ T4293] device hsr_slave_1 left promiscuous mode
[  748.198044][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  748.219827][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0
[  748.252040][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  748.261853][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1
[  748.294478][ T4293] device bridge_slave_1 left promiscuous mode
[  748.300783][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state
[  749.459884][ T4293] device bridge_slave_0 left promiscuous mode
[  749.474934][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state
[  749.871690][ T4293] device veth1_macvtap left promiscuous mode
[  749.878985][ T4293] device veth0_macvtap left promiscuous mode
[  749.885155][ T4293] device veth1_vlan left promiscuous mode
[  749.891272][ T4293] device veth0_vlan left promiscuous mode
[  749.978546][ T8599] syz.5.759 (8599): drop_caches: 2
[  751.263860][ T8609] block device autoloading is deprecated and will be removed.
[  751.711810][ T8616] delete_channel: no stack
[  753.329450][ T8627] ptrace attach of "./syz-executor exec"[4280] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  754.809266][ T8628] loop5: detected capacity change from 0 to 512
[  754.903590][ T8628] EXT4-fs: Ignoring removed nobh option
[  755.119173][ T8628] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.766: invalid indirect mapped block 256 (level 2)
[  755.939282][ T8628] EXT4-fs (loop5): 2 truncates cleaned up
[  755.945111][ T8628] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  756.147670][ T5702] EXT4-fs (loop5): unmounting filesystem.
[  757.260637][ T8648] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  761.589793][ T4293] team0 (unregistering): Port device team_slave_1 removed
[  761.768119][ T4293] team0 (unregistering): Port device team_slave_0 removed
[  761.900141][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  762.094231][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  762.446853][ T8661] loop5: detected capacity change from 0 to 1024
[  762.454414][ T8661] EXT4-fs: Ignoring removed nobh option
[  762.588606][ T8661] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  763.540654][ T5702] EXT4-fs (loop5): unmounting filesystem.
[  765.146092][ T4293] bond0 (unregistering): Released all slaves
[  765.363197][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  765.405272][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  765.434232][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  765.452841][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  765.474971][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  765.511434][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  765.581282][ T8613] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  765.589492][ T8613] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  765.598025][ T8613] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  765.638113][ T8366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  765.778844][ T8679] loop5: detected capacity change from 0 to 512
[  766.056551][ T8679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  767.086107][ T8679] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003]
[  767.116126][ T8679] System zones: 1-2, 4-12, 8-8
[  767.246624][ T8679] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.776: iget: bad i_size value: 38620345925642
[  767.698243][ T8679] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.776: couldn't read orphan inode 15 (err -117)
[  767.797111][ T8679] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  770.896975][ T8696] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  770.901814][   T26] audit: type=1326 audit(1771271857.001:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  770.993909][ T8431] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  771.083482][   T26] audit: type=1326 audit(1771271857.001:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  771.100724][ T8431] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  771.193140][   T26] audit: type=1326 audit(1771271857.039:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  771.232673][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  771.248667][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  771.256258][ T8431] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  771.279960][ T8366] 8021q: adding VLAN 0 to HW filter on device batadv0
[  771.311026][ T8431] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  771.333170][   T26] audit: type=1326 audit(1771271857.039:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  771.529170][   T26] audit: type=1326 audit(1771271857.039:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  771.657827][   T26] audit: type=1326 audit(1771271857.085:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  771.735405][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0
[  771.748176][   T26] audit: type=1326 audit(1771271857.085:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  771.812245][ T5702] EXT4-fs (loop5): unmounting filesystem.
[  771.861132][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  771.914438][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  771.975978][ T8431] 8021q: adding VLAN 0 to HW filter on device team0
[  772.000899][   T26] audit: type=1326 audit(1771271857.085:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  772.044690][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  772.064125][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  772.123395][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state
[  772.130543][ T6577] bridge0: port 1(bridge_slave_0) entered forwarding state
[  772.167726][   T26] audit: type=1326 audit(1771271857.114:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  772.218217][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  772.240260][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  772.260771][   T26] audit: type=1326 audit(1771271857.123:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x7ffc0000
[  772.295276][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  772.304010][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state
[  772.311247][ T6577] bridge0: port 2(bridge_slave_1) entered forwarding state
[  772.339478][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  772.396887][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  772.411017][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  772.454557][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  772.477463][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  772.509144][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  772.560847][ T8431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  772.630115][ T8431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  772.684795][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  772.710827][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  772.744244][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  772.771722][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  772.793297][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  773.091126][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  774.831200][ T7729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  774.841195][ T7729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  775.491343][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  775.515493][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  775.779941][ T8366] device veth0_vlan entered promiscuous mode
[  775.787094][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  775.805013][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  775.821598][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  776.626402][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  776.872964][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0
[  776.998822][ T8366] device veth1_vlan entered promiscuous mode
[  777.269247][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  777.292482][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  777.336858][ T8366] device veth0_macvtap entered promiscuous mode
[  777.388858][ T8366] device veth1_macvtap entered promiscuous mode
[  778.785890][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  778.792518][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  778.851025][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  778.878637][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  778.982780][ T4293] device hsr_slave_0 left promiscuous mode
[  779.048839][ T4293] device hsr_slave_1 left promiscuous mode
[  779.134125][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0
[  779.163827][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1
[  779.214042][ T4293] device bridge_slave_1 left promiscuous mode
[  779.242335][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.414168][ T4317] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  780.706748][ T4293] device bridge_slave_0 left promiscuous mode
[  780.725708][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state
[  780.857351][ T4317] usb 6-1: Using ep0 maxpacket: 8
[  780.866999][ T4317] usb 6-1: unable to get BOS descriptor or descriptor too short
[  781.044589][ T4317] usb 6-1: unable to read config index 0 descriptor/start: -61
[  781.079202][ T4317] usb 6-1: can't read configurations, error -61
[  781.990950][ T4317] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  782.215077][ T4317] usb 6-1: Using ep0 maxpacket: 8
[  782.240694][ T4317] usb 6-1: device descriptor read/all, error -71
[  782.358351][ T4317] usb usb6-port1: attempt power cycle
[  782.372056][ T8810] tmpfs: Unknown parameter 'quota'
[  782.588421][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  783.598893][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  783.608071][ T4272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  783.699031][ T4272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  783.837052][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  783.873850][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  786.108236][ T4272] Bluetooth: hci1: command 0x0409 tx timeout
[  788.698605][ T4278] Bluetooth: hci1: command 0x041b tx timeout
[  788.882579][ T4293] team0 (unregistering): Port device team_slave_1 removed
[  789.145103][ T7270] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  789.373415][ T7270] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  789.405422][ T7270] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  789.437689][ T7270] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  789.460959][ T7270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.464924][ T4293] team0 (unregistering): Port device team_slave_0 removed
[  789.527792][ T7270] usb 6-1: config 0 descriptor??
[  789.568307][ T7270] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  789.598467][ T7270] dvb-usb: bulk message failed: -22 (3/0)
[  789.663777][ T7270] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  789.704425][ T7270] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  789.742825][ T7270] usb 6-1: media controller created
[  789.773935][ T7270] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  790.032727][ T7270] dvb-usb: bulk message failed: -22 (6/0)
[  790.039189][ T7270] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  790.896404][ T4278] Bluetooth: hci1: command 0x040f tx timeout
[  791.046096][ T7270] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5
[  791.255130][ T7270] dvb-usb: schedule remote query interval to 150 msecs.
[  791.494320][ T7270] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  792.310933][ T7270] usb 6-1: USB disconnect, device number 11
[  792.362231][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  792.540892][ T7270] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  792.774092][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  792.792446][ T4272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  792.801710][ T4272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  793.109234][ T4272] Bluetooth: hci1: command 0x0419 tx timeout
[  793.517345][ T4272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  793.526875][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  793.528029][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  793.545315][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  795.832657][ T4272] Bluetooth: hci2: command 0x0409 tx timeout
[  797.983966][ T4278] Bluetooth: hci2: command 0x041b tx timeout
[  798.214819][ T4293] bond0 (unregistering): Released all slaves
[  799.298757][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  799.298824][   T26] audit: type=1326 audit(1771271884.259:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8890 comm="syz.4.815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39bf79 code=0x0
[  800.450368][ T4278] Bluetooth: hci2: command 0x040f tx timeout
[  801.259315][ T8812] chnl_net:caif_netlink_parms(): no params data found
[  801.350336][ T8864] chnl_net:caif_netlink_parms(): no params data found
[  801.655227][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state
[  801.663809][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.672410][ T8864] device bridge_slave_0 entered promiscuous mode
[  801.680751][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state
[  801.690435][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.699305][ T8812] device bridge_slave_0 entered promiscuous mode
[  801.707680][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state
[  801.718203][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.726795][ T8864] device bridge_slave_1 entered promiscuous mode
[  801.735401][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state
[  801.742791][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.752991][ T8812] device bridge_slave_1 entered promiscuous mode
[  801.805660][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  801.834243][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  801.849032][ T8864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  801.873481][ T8864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  801.944376][ T8812] team0: Port device team_slave_0 added
[  801.962963][ T8864] team0: Port device team_slave_0 added
[  801.978122][ T8864] team0: Port device team_slave_1 added
[  801.988819][ T8812] team0: Port device team_slave_1 added
[  802.021508][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  802.029145][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  802.056057][ T8812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  802.125396][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  802.132604][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  802.159035][ T8812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  802.172694][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  802.182869][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  802.209640][ T8864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  802.252790][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  802.259805][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  802.287712][ T8864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  802.361179][ T8812] device hsr_slave_0 entered promiscuous mode
[  802.368329][ T8812] device hsr_slave_1 entered promiscuous mode
[  802.374960][ T8812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  802.382661][ T8812] Cannot create hsr debugfs directory
[  802.438642][ T8864] device hsr_slave_0 entered promiscuous mode
[  802.446842][ T8864] device hsr_slave_1 entered promiscuous mode
[  802.456101][ T8864] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  802.463993][ T8864] Cannot create hsr debugfs directory
[  802.687741][ T4278] Bluetooth: hci2: command 0x0419 tx timeout
[  803.501494][ T8812] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  803.511322][ T8812] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  803.563478][ T8812] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  803.600396][ T8812] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  803.867823][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0
[  803.886801][ T8812] 8021q: adding VLAN 0 to HW filter on device team0
[  803.896017][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  803.904196][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  803.938254][ T4293] device hsr_slave_0 left promiscuous mode
[  803.948030][ T4293] device hsr_slave_1 left promiscuous mode
[  803.967482][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0
[  803.976675][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1
[  803.986070][ T4293] device bridge_slave_1 left promiscuous mode
[  803.992655][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state
[  804.004218][ T4293] device bridge_slave_0 left promiscuous mode
[  804.010485][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state
[  804.041964][ T4293] device hsr_slave_0 left promiscuous mode
[  804.050422][ T4293] device hsr_slave_1 left promiscuous mode
[  804.057208][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0
[  804.065070][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1
[  804.073376][ T4293] device bridge_slave_1 left promiscuous mode
[  804.080544][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state
[  804.089746][ T4293] device bridge_slave_0 left promiscuous mode
[  804.096003][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state
[  804.134185][ T4293] device veth1_macvtap left promiscuous mode
[  804.140307][ T4293] device veth0_macvtap left promiscuous mode
[  804.147882][ T4293] device veth1_vlan left promiscuous mode
[  804.154450][ T4293] device veth0_vlan left promiscuous mode
[  804.511889][ T4293] team0 (unregistering): Port device team_slave_1 removed
[  804.569329][ T4293] team0 (unregistering): Port device team_slave_0 removed
[  804.623896][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  804.680244][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  805.036503][ T4293] bond0 (unregistering): Released all slaves
[  805.588293][ T4293] team0 (unregistering): Port device team_slave_1 removed
[  805.641080][ T4293] team0 (unregistering): Port device team_slave_0 removed
[  805.696982][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  805.750170][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  806.083264][ T4293] bond0 (unregistering): Released all slaves
[  806.202002][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  806.211953][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  806.222524][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  806.229834][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  806.239602][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  806.266337][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  806.279495][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  806.288461][ T4759] bridge0: port 2(bridge_slave_1) entered blocking state
[  806.295644][ T4759] bridge0: port 2(bridge_slave_1) entered forwarding state
[  806.304958][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  806.338791][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  806.352077][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  806.369689][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  806.410146][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  806.426107][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  806.447338][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  806.459874][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  806.477537][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  806.497814][ T7729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  806.512260][ T7729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  806.530751][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  806.678267][ T8864] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  806.720961][ T8864] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  806.762738][ T8864] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  806.805627][ T8864] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  807.058651][ T8864] 8021q: adding VLAN 0 to HW filter on device bond0
[  807.069802][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  807.078497][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  807.107583][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  807.124477][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  807.140075][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  807.169992][ T8864] 8021q: adding VLAN 0 to HW filter on device team0
[  807.202727][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  807.218769][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  807.253502][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state
[  807.260680][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state
[  807.286291][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  807.302854][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  807.323352][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  807.333898][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  807.341116][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  807.375157][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  807.395120][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  807.414944][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  807.434018][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  807.455230][ T8864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  807.468696][ T8864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  807.498554][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  807.506763][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  807.537893][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  807.550601][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  807.566770][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  807.579121][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  807.590652][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  807.625472][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  808.038515][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  808.057393][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  808.084147][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  808.103633][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  808.116475][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  808.148229][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  808.162772][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  808.185895][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  808.222853][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  808.242803][ T8812] device veth0_vlan entered promiscuous mode
[  808.292338][ T8812] device veth1_vlan entered promiscuous mode
[  808.354549][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  808.362900][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  808.373451][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  808.382363][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  808.396314][ T8812] device veth0_macvtap entered promiscuous mode
[  808.408072][ T8812] device veth1_macvtap entered promiscuous mode
[  808.430391][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  808.441554][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.454483][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  808.465434][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.476688][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  808.487616][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.497985][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  808.509481][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.526562][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_0
[  808.537024][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  808.553686][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  808.563750][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  808.586330][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  808.619427][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.630679][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  808.653267][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.663147][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  808.695316][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.716902][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  808.739546][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.762042][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  808.776135][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  808.803322][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  808.818100][ T8812] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  808.835763][ T8812] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  808.844538][ T8812] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  808.888802][ T8812] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  809.064043][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  809.104320][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  809.126865][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  809.156499][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  809.168443][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  809.212781][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  809.221917][ T6645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  809.229894][ T6645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  809.239898][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  809.251700][ T8864] device veth0_vlan entered promiscuous mode
[  809.264384][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  809.278893][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  809.292258][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  809.324765][ T8864] device veth1_vlan entered promiscuous mode
[  809.404557][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  809.425993][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  809.462539][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  809.724613][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  809.761461][ T8864] device veth0_macvtap entered promiscuous mode
[  810.233205][ T8864] device veth1_macvtap entered promiscuous mode
[  810.280273][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  810.568016][ T8987] misc userio: Invalid payload size
[  810.574229][ T8987] misc userio: Invalid payload size
[  811.229464][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.249768][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  811.261961][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.271854][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  811.282930][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.294391][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  811.305582][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.315682][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  811.327903][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.339633][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  811.385513][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  811.394643][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  811.413762][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  811.431965][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.442829][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  811.460564][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.470787][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  811.489382][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.501676][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  811.573404][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.596621][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  811.615872][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.703252][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  811.748634][ T8864] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  812.972005][ T8864] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  815.912167][ T8864] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  815.921924][ T8864] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  816.172857][ T9021] netlink: 20 bytes leftover after parsing attributes in process `syz.8.820'.
[  816.576160][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  816.621334][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  820.565579][   T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  820.672283][   T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  820.680312][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  820.924358][ T4762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  821.093327][ T9044] misc userio: Invalid payload size
[  821.099498][ T9044] misc userio: Invalid payload size
[  821.264806][ T4762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  821.502618][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  824.211236][ T9068] trusted_key: encrypted_key: insufficient parameters specified
[  824.244867][ T9066] loop8: detected capacity change from 0 to 512
[  824.263543][ T9066] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[  824.455166][ T8896] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  826.577304][ T9088] loop5: detected capacity change from 0 to 1024
[  827.655068][ T9088] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000]
[  827.749350][ T9088] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 2: comm syz.5.837: lblock 2 mapped to illegal pblock 2 (length 1)
[  827.763583][ T9088] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  827.771801][ T9088] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 48: comm syz.5.837: lblock 0 mapped to illegal pblock 48 (length 1)
[  827.786162][ T9088] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  827.795956][ T9088] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.837: Failed to acquire dquot type 0
[  828.211222][ T9088] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem
[  828.223431][ T9088] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #11: comm syz.5.837: mark_inode_dirty error
[  828.235604][ T9088] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  828.246106][ T9088] EXT4-fs (loop5): 1 orphan inode deleted
[  828.251889][ T9088] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  828.292498][ T4392] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  828.709589][ T9093] overlayfs: missing 'lowerdir'
[  828.759267][ T4392] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  828.862878][ T4392] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:10: Failed to release dquot type 0
[  828.898392][ T5702] EXT4-fs (loop5): unmounting filesystem.
[  828.911944][    T9] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  829.990447][    T9] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  830.140930][    T9] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0
[  830.154285][ T5702] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0
[  830.167789][ T5702] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem
[  830.177885][ T5702] EXT4-fs error (device loop5): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error
[  833.064372][ T9132] trusted_key: encrypted_key: insufficient parameters specified
[  834.082327][ T9140] loop8: detected capacity change from 0 to 32768
[  834.094833][ T9142] overlayfs: failed to clone upperpath
[  834.351750][ T9140] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.851 (9140)
[  834.479941][ T9140] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  834.490952][ T9140] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[  834.499829][ T9140] BTRFS info (device loop8): enabling disk space caching
[  834.506963][ T9140] BTRFS info (device loop8): force clearing of disk cache
[  834.514598][ T9140] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  834.524846][ T9140] BTRFS info (device loop8): use zstd compression, level 3
[  834.532102][ T9140] BTRFS info (device loop8): disk space caching is enabled
[  835.762542][ T9166] loop5: detected capacity change from 0 to 512
[  835.903892][ T9166] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  835.981481][ T8898] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  836.101968][ T9174] netlink: 48 bytes leftover after parsing attributes in process `syz.4.855'.
[  836.299018][ T9140] BTRFS info (device loop8): enabling ssd optimizations
[  836.314825][ T9140] BTRFS info (device loop8): rebuilding free space tree
[  836.752582][ T9140] BTRFS info (device loop8): disabling free space tree
[  836.759762][ T9140] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  836.770922][ T9140] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  838.543571][ T9206] xt_CT: You must specify a L4 protocol and not use inversions on it
[  840.982872][ T8812] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  841.186240][ T9217] hub 8-0:1.0: USB hub found
[  841.191158][ T9217] hub 8-0:1.0: 1 port detected
[  845.195126][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  845.201496][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  846.824410][ T9239] loop7: detected capacity change from 0 to 256
[  846.949707][ T9239] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001)
[  846.960371][ T9239] exFAT-fs (loop7): failed to load upcase table
[  846.966892][ T9239] exFAT-fs (loop7): failed to recognize exfat type
[  848.475858][ T9254] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  849.390687][ T9267] loop7: detected capacity change from 0 to 512
[  849.416935][ T9267] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal
[  850.038216][ T8898] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  855.884149][ T4278] Bluetooth: hci2: command 0x0411 tx timeout
[  857.893676][ T8896] udevd[8896]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  857.989067][ T8896] udevd[8896]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  860.595447][ T9330] block device autoloading is deprecated and will be removed.
[  863.145700][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  863.157921][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  863.167183][ T4272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  863.176654][ T4272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  863.184255][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  863.191890][ T4272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  865.445864][ T4272] Bluetooth: hci0: command 0x0409 tx timeout
[  869.839072][ T4272] Bluetooth: hci0: command 0x041b tx timeout
[  872.895562][ T4278] Bluetooth: hci0: command 0x040f tx timeout
[  873.425260][ T4759] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  874.049318][ T4759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.098236][ T9374] loop7: detected capacity change from 0 to 1024
[  875.648725][ T4278] Bluetooth: hci0: command 0x0419 tx timeout
[  875.762973][ T9374] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  876.931842][ T8864] EXT4-fs (loop7): unmounting filesystem.
[  877.098297][ T4759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.517130][ T4759] team0: Port device netdevsim0 removed
[  877.562173][ T4759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.946846][ T9339] chnl_net:caif_netlink_parms(): no params data found
[  878.357708][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.409327][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state
[  878.484128][ T9339] device bridge_slave_0 entered promiscuous mode
[  878.532798][ T9339] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.594134][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state
[  878.638660][ T9339] device bridge_slave_1 entered promiscuous mode
[  878.784119][ T9339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  878.878231][ T9339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  879.097608][ T9396] loop7: detected capacity change from 0 to 32768
[  879.162159][ T9396] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.897 (9396)
[  879.194428][ T9396] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  879.204673][ T9396] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  879.213435][ T9396] BTRFS info (device loop7): enabling disk space caching
[  879.220469][ T9396] BTRFS info (device loop7): force clearing of disk cache
[  879.227710][ T9396] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  879.237551][ T9396] BTRFS info (device loop7): use zstd compression, level 3
[  879.245538][ T9396] BTRFS info (device loop7): disk space caching is enabled
[  879.505925][ T9396] BTRFS info (device loop7): enabling ssd optimizations
[  879.514022][ T9396] BTRFS info (device loop7): rebuilding free space tree
[  879.530197][ T9396] BTRFS info (device loop7): disabling free space tree
[  879.537255][ T9396] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  879.547103][ T9396] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  883.832063][ T9457] loop5: detected capacity change from 0 to 128
[  884.646252][ T9457] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  884.660030][ T9457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  884.781156][ T9339] team0: Port device team_slave_0 added
[  884.826137][ T9339] team0: Port device team_slave_1 added
[  884.876735][ T8864] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  885.078756][ T9463] loop5: detected capacity change from 0 to 64
[  891.936860][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  892.069082][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  892.159621][ T9505] Bluetooth: MGMT ver 1.22
[  892.536790][ T9339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  894.274829][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  894.282184][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  894.392926][ T9339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  894.719610][ T9518] Device name cannot be null; rc = [-22]
[  894.748529][ T9518] loop5: detected capacity change from 0 to 256
[  895.965703][ T9339] device hsr_slave_0 entered promiscuous mode
[  896.006205][ T9339] device hsr_slave_1 entered promiscuous mode
[  896.071232][ T9339] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  896.081346][ T9522] Bluetooth: MGMT ver 1.22
[  896.112774][ T9339] Cannot create hsr debugfs directory
[  896.648778][ T9530] netlink: 20 bytes leftover after parsing attributes in process `syz.7.913'.
[  896.659535][ T9530] netlink: 20 bytes leftover after parsing attributes in process `syz.7.913'.
[  899.068427][ T9545] netlink: 60 bytes leftover after parsing attributes in process `syz.8.906'.
[  899.683777][ T9533] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  899.808430][ T9533] CIFS mount error: No usable UNC path provided in device string!
[  899.808430][ T9533] 
[  899.838700][ T9549] loop7: detected capacity change from 0 to 1024
[  899.860398][ T9533] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  899.892051][ T9549] EXT4-fs: Ignoring removed mblk_io_submit option
[  899.936876][ T9549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  901.354845][ T9549] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #11: comm syz.7.918: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  901.400442][ T9558] loop8: detected capacity change from 0 to 64
[  901.513836][ T9549] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.918: couldn't read orphan inode 11 (err -117)
[  901.583357][ T9549] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  902.119218][ T9557] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set
[  902.183417][ T9564] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.918: Invalid block bitmap block 0 in block_group 0
[  902.204131][ T9564] Quota error (device loop7): write_blk: dquota write failed
[  902.212272][ T9564] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  902.222747][ T9564] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.918: Failed to acquire dquot type 0
[  904.715212][ T9339] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  904.759382][ T9339] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  904.801046][ T9339] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  905.842221][ T8864] EXT4-fs (loop7): unmounting filesystem.
[  907.477167][ T9339] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  909.946673][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  909.953042][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  909.989853][ T4759] device hsr_slave_0 left promiscuous mode
[  910.012992][ T4759] device hsr_slave_1 left promiscuous mode
[  910.038777][ T4759] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  910.057657][ T4759] batman_adv: batadv0: Removing interface: batadv_slave_0
[  910.073697][ T4759] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  910.110331][ T4272] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  910.119267][ T4272] Bluetooth: hci1: Injecting HCI hardware error event
[  910.130874][ T4278] Bluetooth: hci1: hardware error 0x00
[  910.321704][ T4759] batman_adv: batadv0: Removing interface: batadv_slave_1
[  910.374622][ T4759] device bridge_slave_1 left promiscuous mode
[  910.381028][ T4759] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.699843][ T4759] device bridge_slave_0 left promiscuous mode
[  910.714006][ T4759] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.875187][ T4759] device veth1_macvtap left promiscuous mode
[  910.894555][ T4759] device veth0_macvtap left promiscuous mode
[  910.937440][ T4759] device veth1_vlan left promiscuous mode
[  910.958732][ T4759] device veth0_vlan left promiscuous mode
[  912.502148][ T4278] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  917.737928][ T9651] loop5: detected capacity change from 0 to 512
[  918.776936][ T9651] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  919.371323][ T9665] cifs: Unknown parameter 'cache_strategy'
[  920.222982][ T5702] EXT4-fs (loop5): unmounting filesystem.
[  920.937427][    C0] ------------[ cut here ]------------
[  920.943564][    C0] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x350
[  920.954805][    C0] WARNING: CPU: 0 PID: 15 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530
[  920.964704][    C0] Modules linked in:
[  920.968634][    C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0
[  920.975942][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  920.986051][    C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530
[  920.992587][    C0] Code: ef e8 98 ef bd fd 4c 8b 45 00 48 c7 c7 80 16 df 8a 48 c7 c6 40 13 df 8a 48 c7 c2 e0 17 df 8a 8b 0c 24 4d 89 e9 e8 b4 73 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 e5 90 0a
[  921.012281][    C0] RSP: 0018:ffffc900001478b0 EFLAGS: 00010246
[  921.018363][    C0] RAX: c11e30ebb36ec100 RBX: ffffffff96ef21a0 RCX: ffff88813febbb80
[  921.026521][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  921.034577][    C0] RBP: ffffffff8a8def40 R08: ffffc90000147527 R09: 1ffff92000028ea4
[  921.042586][    C0] R10: dffffc0000000000 R11: fffff52000028ea5 R12: ffff8880272dea00
[  921.050679][    C0] R13: ffffffff892a66b0 R14: ffff8880272de000 R15: ffff8880272de890
[  921.058763][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  921.067795][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  921.074429][    C0] CR2: 00007f13f923201d CR3: 00000000753aa000 CR4: 00000000003506f0
[  921.082478][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  921.090542][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  921.098608][    C0] Call Trace:
[  921.101948][    C0]  <TASK>
[  921.104938][    C0]  slab_free_freelist_hook+0xd2/0x1a0
[  921.110463][    C0]  ? rose_timer_expiry+0x4a7/0x5d0
[  921.115621][    C0]  __kmem_cache_free+0xb6/0x1f0
[  921.120566][    C0]  rose_timer_expiry+0x4a7/0x5d0
[  921.125555][    C0]  ? call_timer_fn+0x194/0x670
[  921.130425][    C0]  call_timer_fn+0x1ac/0x670
[  921.135065][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  921.140191][    C0]  ? call_timer_fn+0xcf/0x670
[  921.144918][    C0]  ? __run_timers+0x800/0x800
[  921.149677][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  921.155079][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  921.160364][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  921.165494][    C0]  __run_timers+0x53e/0x800
[  921.170066][    C0]  ? detach_timer+0x350/0x350
[  921.174844][    C0]  ? lock_chain_count+0x20/0x20
[  921.179751][    C0]  run_timer_softirq+0x63/0xf0
[  921.184618][    C0]  handle_softirqs+0x2a1/0x930
[  921.189440][    C0]  ? run_ksoftirqd+0xa4/0x100
[  921.194229][    C0]  ? do_softirq+0x210/0x210
[  921.198782][    C0]  run_ksoftirqd+0xa4/0x100
[  921.203339][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  921.208631][    C0]  ? preempt_schedule_thunk+0x16/0x18
[  921.214367][    C0]  ? takeover_tasklets+0x770/0x770
[  921.219532][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  921.224796][    C0]  smpboot_thread_fn+0x64a/0xa40
[  921.229948][    C0]  ? smpboot_thread_fn+0x4c/0xa40
[  921.235052][    C0]  kthread+0x29d/0x330
[  921.239251][    C0]  ? cpu_report_death+0x240/0x240
[  921.244338][    C0]  ? kthread_blkcg+0xd0/0xd0
[  921.249061][    C0]  ret_from_fork+0x1f/0x30
[  921.253549][    C0]  </TASK>
[  921.256635][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  921.263973][    C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0
[  921.271302][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  921.281404][    C0] Call Trace:
[  921.284732][    C0]  <TASK>
[  921.287701][    C0]  dump_stack_lvl+0x188/0x24e
[  921.292475][    C0]  ? memcpy+0x3c/0x60
[  921.296520][    C0]  ? show_regs_print_info+0x12/0x12
[  921.301795][    C0]  ? load_image+0x400/0x400
[  921.306396][    C0]  panic+0x2e5/0x730
[  921.310349][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  921.314896][    C0]  ? ret_from_fork+0x1f/0x30
[  921.319523][    C0]  __warn+0x2f8/0x4f0
[  921.323530][    C0]  ? debug_check_no_obj_freed+0x43c/0x530
[  921.329278][    C0]  ? debug_check_no_obj_freed+0x43c/0x530
[  921.335028][    C0]  report_bug+0x2ba/0x4f0
[  921.339455][    C0]  ? debug_check_no_obj_freed+0x43c/0x530
[  921.345203][    C0]  handle_bug+0x3a/0x70
[  921.349393][    C0]  exc_invalid_op+0x16/0x40
[  921.353919][    C0]  asm_exc_invalid_op+0x16/0x20
[  921.358791][    C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530
[  921.365141][    C0] Code: ef e8 98 ef bd fd 4c 8b 45 00 48 c7 c7 80 16 df 8a 48 c7 c6 40 13 df 8a 48 c7 c2 e0 17 df 8a 8b 0c 24 4d 89 e9 e8 b4 73 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 e5 90 0a
[  921.384770][    C0] RSP: 0018:ffffc900001478b0 EFLAGS: 00010246
[  921.390868][    C0] RAX: c11e30ebb36ec100 RBX: ffffffff96ef21a0 RCX: ffff88813febbb80
[  921.398864][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  921.406855][    C0] RBP: ffffffff8a8def40 R08: ffffc90000147527 R09: 1ffff92000028ea4
[  921.414863][    C0] R10: dffffc0000000000 R11: fffff52000028ea5 R12: ffff8880272dea00
[  921.422949][    C0] R13: ffffffff892a66b0 R14: ffff8880272de000 R15: ffff8880272de890
[  921.431062][    C0]  ? rose_transmit_link+0x730/0x730
[  921.436338][    C0]  slab_free_freelist_hook+0xd2/0x1a0
[  921.441757][    C0]  ? rose_timer_expiry+0x4a7/0x5d0
[  921.446897][    C0]  __kmem_cache_free+0xb6/0x1f0
[  921.451786][    C0]  rose_timer_expiry+0x4a7/0x5d0
[  921.456748][    C0]  ? call_timer_fn+0x194/0x670
[  921.461536][    C0]  call_timer_fn+0x1ac/0x670
[  921.466155][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  921.471201][    C0]  ? call_timer_fn+0xcf/0x670
[  921.475905][    C0]  ? __run_timers+0x800/0x800
[  921.480616][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  921.485835][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  921.491057][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  921.496107][    C0]  __run_timers+0x53e/0x800
[  921.500641][    C0]  ? detach_timer+0x350/0x350
[  921.505344][    C0]  ? lock_chain_count+0x20/0x20
[  921.510225][    C0]  run_timer_softirq+0x63/0xf0
[  921.515017][    C0]  handle_softirqs+0x2a1/0x930
[  921.519806][    C0]  ? run_ksoftirqd+0xa4/0x100
[  921.524510][    C0]  ? do_softirq+0x210/0x210
[  921.529037][    C0]  run_ksoftirqd+0xa4/0x100
[  921.533566][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  921.538784][    C0]  ? preempt_schedule_thunk+0x16/0x18
[  921.544188][    C0]  ? takeover_tasklets+0x770/0x770
[  921.549316][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  921.554528][    C0]  smpboot_thread_fn+0x64a/0xa40
[  921.559491][    C0]  ? smpboot_thread_fn+0x4c/0xa40
[  921.564546][    C0]  kthread+0x29d/0x330
[  921.568634][    C0]  ? cpu_report_death+0x240/0x240
[  921.573690][    C0]  ? kthread_blkcg+0xd0/0xd0
[  921.578296][    C0]  ret_from_fork+0x1f/0x30
[  921.582765][    C0]  </TASK>
[  921.586267][    C0] Kernel Offset: disabled
[  921.590729][    C0] Rebooting in 86400 seconds..