last executing test programs:

4m49.674771696s ago: executing program 3 (id=756):
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x9, 0x2)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f000059c000/0x3000)=nil, &(0x7f00007c7000/0x1000)=nil, 0x3000, 0x2})
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4)

4m44.55181192s ago: executing program 3 (id=780):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

4m44.346988097s ago: executing program 3 (id=783):
r0 = socket(0x2b, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x20179e01})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xd000, 0x0, 0xbf})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m44.137738914s ago: executing program 3 (id=785):
r0 = socket(0x10, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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")
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffffffffffb)

4m42.519004236s ago: executing program 3 (id=796):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000001800811a0681f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8007e38a3fd8705df0100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000b607a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4e95367a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9eebee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4b43a3d93000000000000000000", 0xd8}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xffffffffffffff92, &(0x7f0000000080), 0x1}, 0x8100)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx  \x00'}, 0x20)
r3 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r3, &(0x7f0000000380)={&(0x7f0000000000)=@ethernet={0x306, @random="65abfea8bf5d"}, 0x80, 0x0, 0xffffff53}, 0x20000000)
fstat(r0, &(0x7f0000000300))
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1, r2}, 0xc)

4m40.805710141s ago: executing program 3 (id=807):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

4m40.582940458s ago: executing program 32 (id=807):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

4m12.950543177s ago: executing program 5 (id=1023):
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r3, 0x202}, 0x8)

4m12.810889161s ago: executing program 5 (id=1024):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000000000402509668000000000000109022400010000100309040000010300020009210000080122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00\b\x00W'], 0x0}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={0xb})
setregid(0x0, 0xee00)
keyctl$session_to_parent(0x12)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)

4m10.65407432s ago: executing program 5 (id=1042):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r1, 0x6000000)
copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x100, 0x9, 0x0)

4m10.509709905s ago: executing program 5 (id=1045):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80049370, 0x0)

4m10.306051252s ago: executing program 5 (id=1047):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4000004, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xfff1}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4m9.850853456s ago: executing program 5 (id=1054):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
flock(0xffffffffffffffff, 0x2)
r1 = socket(0x2b, 0x1, 0x1)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c)

4m9.606763624s ago: executing program 33 (id=1054):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
flock(0xffffffffffffffff, 0x2)
r1 = socket(0x2b, 0x1, 0x1)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c)

4m8.644731295s ago: executing program 0 (id=1070):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

4m8.461603181s ago: executing program 0 (id=1071):
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$inet(0x2, 0x3, 0x81)
close(0x3)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2d, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
close(0x3)

4m8.347109465s ago: executing program 0 (id=1072):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

4m8.031246035s ago: executing program 0 (id=1073):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
open$dir(&(0x7f0000000140)='./file1\x00', 0x80001, 0x82)

4m7.832888081s ago: executing program 0 (id=1074):
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x94, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x77, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast}, 0x0, 0x0, @default, @val, @void, [{0xdd, 0x51, "5d923d4bdfcfb83c930cb6d06883434ba28ab214a944c18318696c59ee51bb88bb8c94c85941d6ac44e4d2aea91603213691b557b0f42b812c5c040fbe823eecc1805a2b2c120fcfa7c3ec7b8fc97e2d5f"}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x3aeb359a15da3ab0}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xfffffffe}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x980)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)

4m7.269693989s ago: executing program 0 (id=1078):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r0, 0x2)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
write$tun(r2, &(0x7f0000000180)={@void, @void, @mpls={[], @generic="17799570"}}, 0x4)
shutdown(r2, 0x1)

4m7.131074644s ago: executing program 34 (id=1078):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r0, 0x2)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
write$tun(r2, &(0x7f0000000180)={@void, @void, @mpls={[], @generic="17799570"}}, 0x4)
shutdown(r2, 0x1)

3m58.565619479s ago: executing program 2 (id=1121):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000180)="b861efb4", 0x4}], 0x1, 0x0, 0x0, 0x40005}, 0x40000)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "bbaeb286287dcf3e", "51dbda65f8ebf9de276880c9c23547d74fca736cb2b3b71295adff5cfbf02f71", "9675df08", "4936754361571648"}, 0x38)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
recvfrom(r0, &(0x7f0000002800)=""/4065, 0xfe1, 0x20017, 0x0, 0x0)

3m57.629805549s ago: executing program 2 (id=1125):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x10, 0x2000000002, 0x0)
sendmsg(r1, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r2, 0x0, 0x40844)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b02000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367b4fa51f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40)

3m57.379303217s ago: executing program 2 (id=1126):
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', <r3=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r3, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48000}, 0x840)
fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)

3m56.939447601s ago: executing program 2 (id=1127):
syz_mount_image$exfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[], 0x7f, 0x1519, &(0x7f00000021c0)="$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")
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
mlock(&(0x7f000068d000/0x1000)=nil, 0x1000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3m55.877306795s ago: executing program 2 (id=1133):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)

3m55.376928951s ago: executing program 2 (id=1136):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xfffffc6d}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000002f80)="a66554178426362975b882a7d6b43fe537b6b0036a966a05363793ec2f6830cc5b81e514b9cbe4c27c3f3a581556b832100a4233e3e80fda14dd84611893300a863a8a6f6d8e0c7633e168ad7e25d4bd14ba6812101488e9444165b8100d576a996fec019ae11a03498329bcbacd0e8a206bd0de0c7e09f64a57d56974599f09aa148b4224dcffe1b5a1e55bbc1fdae8bf2f72437cf399c4cda11554b21158e3ddb00ddb71a1bd1daa50d631b027238397d692214223af1d685e7a3318da65c9233eba674ff72097411ef3ee19b892b1b36eeb925a6698f4d455b02163a3504ee6accffad7aaf9d19763d886272559ef0501594ea23d45a43e13bba05d7d332750ce5d9d3b37d234f46464fcc5f495e0fae02a24efd67db315c92f9483196bd38b38b3675bc0de5873f9d7b01ee5c564f5573b474e3c9f3b955929d9112007049e4245d68b93f365a90d35c837cc13999f2d6a23be87786e4234d74b1160669c7962b3b413201192565fb93252c153dd735e280e01d13dc34468f67684a4308c7dbe07687e0f56fa54f44b0141895ad75781ca026d813e8c17794b9d87d97136d29aced71b1f526dfab6301b78f1deab7949c97cce6616f4afd46a331e2fb54342dd1964c70a2717f4239c9e5157ac93c42d05f230da440a9227f0f82ee95cc79ca2d3da3f889b37f85f50d75711a910a57d213edb4b981cde33e01ec960885f31511ed7f8e01ddd36d76e1b1e40e81cd21ef9c34134400fdd94e34e5d77f4b7ca3612663e0f6b364be4a9dc775f3b12386ec04960524a9a5e6879e50db657c89a7dc7ec1f919ba8c77e926538599e7969868a5ef3e92817a3402c13de0efcb9fef445ee49f4b0ed26c5dbadff51459d5229661e4b7d2548c9ea4ce89b828daf5f5873e1d9e693ba037fc00ccc3dd74096c0f1ea508ee96ad7d85664947193e011e2f037917af7716d7f27cac25c9785f13baddfeba40997af5f6f4029cf5b781b654a635ee8696078d99025012cbad5af13bc26e2d100726fc98c11f8f16057a8506f29cf30bcf9ab7883ad1708d11bf70ee54fced84c69d90eb302e8aff586c0b25893e09868426cb4649145ede32035c47360fba7fe863cb00b86f583090c5b8d8549ba62cb822ed182fc07f029a826b5c86dccd603408bfc060c80c8ae21be086998f45923e1fe36eea10a66a55cc9f3cb6a296535dabc831fefe26b80ee47c723c596c51e1d7c073df20874eef79a291934c4c6a7c6b656595fc76b25d0d50590c1df29d59842a19a6acd60e783069aa0c21d792129132d59d12cd4417583dc967d7d44f392770da18e30a70a330e7b05aebf09e93aa545ca382a29f810e8a4efc0fffd3660f76892c2027daccfd743734c359bacaec86e4f15ca31b83894b67b3a3539cb5567bbcacd9a52c9b8d87252ddab0dbdd373f7150b87893fa4b6c5e6016f2146471f092a2cf4c75b6ed08a2f27f9f68d1817d7e782c0fa3026fd4e283b6b23bff2a9d84f5cdea217ce396080b623fe6d5da91fcab0e563b8c54af99007f6680efc9fdcd35d1d2ad8539ee04744e38c750114de55b80192c5d6aee8cbc34a47426bb22a9e3e2fcb87530c418a65fad7d5fbb15f569a69fc2cb92dad8f574330fdf2aa6033d1be037d5e3e964ff01329c43401bc86a72025288100ce86c053b922e9a7a692912bca4dabfc0e3a8966a65c96d3a420809c2d600928546a4ea26ff7100081f3ca8a70c64b3a4fc33b3e2546ff4a43502d448f2c0b274a244d32c955b02d897b1c53a2724ff886a1ccc91ea3a22dbd1f5f3f2e33db9ac9aae458a27e2a529ac2d8671f0e30df63a5d1a579b8f5a68f4a53fb4f3f76d41bee8e10635606f2a7fde9af7bd0df3ab9750b0c6c962fbc36e9474e3efac01ea98a4fe6e0f819d62dcde2b9b77fb0d430495ee042d1e70a52debb0d13b09906f77327dd4ccfe2b6796f9aa5e5b2fa9b2249c66b49cd7e1cbdb194c239d7e2e0928a45c8c55904cd345c5d8b92a5526ff51b5c2e477089eeb16cb3996c243c66a82f4349370ac26bef5d900ec582f274cc38b0258993de6cc79574fdacb895721fd4d04f84c4d89e109629f48a24fb3241882f154a35ae6659e0bb35af409c51cb11a26413be88a1e5ae1e8d2b1333a6c80c42c654f269dd875aa7f19517f62b8e031f11bdb11bafcf4b4f06496142579f7769ee41dd24701cd3ed016030f7d5cf24a4cfdcd9b05e38524cd1a81e16b948672329bd111f7442bdc81b68b36495b5f4aa44d7c2fdea8703849a17f7d3327086355ca3b36c10eb38556bf95b3575ba32b97f268af1f1347ed28368828124361f6c1e6b64e6ba9efc3094d50bb049c35db5ea2b3c76576b1a8f37da0711436048ae443523032497e542c04458f04cfffd11c53c431065c20e8add72c0c31caeec12d0bf391fa1c0a75e23d39c31da409083f768f545090b05c54084ffc5d7fd85cea725807638f4ab0026204452a8c198cc60133ce00e9a2b9ebeb30d7f33a1bb25cb2948bf44288cce43b6ac13012d8860fce83d9a0f6f1886723f41130466186ac56d5384bfd04fe87c67528996c1ee1ad8e551dda563e75d5dc8ac6a47990a62c915dc23f4ae6596dcfdb44661de969aec7f6d3fa8f05e106a8db7abeb3682bdc8e87aefbb09e642b2cef2919ddc55ded8dbce0606d3c4a0747a293a991b8cd832381c30813b887a22c2df569c12c430cf7471578eb787acab65b54569bece6921805af9ac41b268ce329a25bacdb02f8f3c4ef930f1799ff940f42c21955ddd5496234d62447d1c9d8e0cc7bb8fd5ca5e9fa2ef99105a4d44d6ce37532407fcccc4e71103baa0c7ff1767e05762424d9301294daa95523792cb73b348c41ec713d19c2b917a4dc50be3f0742762e5055cd6ebb3afa2b89a94c6a921e039ddaee98fc7a961a5e415322bd4b333d83768ee8945f29556f94372a16285cb1ff103640d93b837861f1d0d9e65fe35583b6f76889e7d09a2cdf3c2ef305a0f6d205deedee94ac602974fa58284e33aee55947a7a042abf0759ec8c1410493114454320b5003f23dac1c600a471ff09bdbf5bb40be87a69d388592241d9989f0435eeede193e6994b80a2145eca4afb5e691341e37e4580b0c54d7fc506cc9641020cd342a85fe56946e49854756ae6534edd03de881481e11701851f0f30fedbfcf335c3855c8d9541ef234f8718fbb0d9f127093a3e7c1d49d8a20729ab41a0118683b7044ee490d7137bebbbbfb245d5e30356e102eda0052a37cca70c221475b5c596f68c745701dc6e31f7846270bcd516ded5d0b4666b249a32f0acb1b8a7de8e6f007ee740561f64b7f30b4764ec5116a1eda1526225ddd01b1d999ff17d0798be47e3a5957011aa6e03318897ce1c452b78f9badf89098fe696894953581b01ceffc4fa0eefd654df9ea70b1f2f1e287192a5a20a381e8fad0fb99814208970902fdd28cf6a6457d7873a76359e226e5b203bd6f85bea30cb0ab5817e1b32fbbbd33a4e67f3771b7256a3a9ec20dae8a248af32a909bb5ec28f0f85722b81151f0f0a500a5c39c36476ac42c30bcb68a61a13141541ec54d895f0d7ca1afb728202e77f2f85170a3c2de378f1cfa0c2d1b0353f5d2fd0537017dc5510232a7a27a444476bbca2b84394639cf8ded35568868f9dcfa445b33c694aa8696d899afdf0d98a542e6a3c0212480ef3063ae0b8bcaa133978e9ebd76a3ccf652b0022b3cc7f1c9f2731c1c08f45fc84f7dade8471f6855e3005d75390e36a6646b8ac0dd5da9f9ef4bc35639ac96280bc47a547c0941af4516278b66469c7fc22932cbb2ac92cc12745bdf4ab4411d48396120f0e397ff6c22c54873296a897928d0158a5e63e6d48016cb4af44a3d71296acffe59241a8537f8b2cbc88b8ee2f4090e8e16b8af4700a60d0c199cc45cedf8dfe9a78ddd8637f7a9cfc16b078b1f9acfb8cb35f94b7564b1e23904e40dd5bdef1c78397457c05dd1108c3257bfda2e36b31969e8642c825c9dafe2fa4ee2708023c26255e6c41c2c873923e98eb1397dbc51324dfbec7943a5564fa815b9492d53c6cf6d42cd07165ae54e81f7989f2e406a13bea4df4d4a6971d81a4492e5703b6ba1f21ca5ffd68cdb15a713abd70d411e64d873b9f36ced7f354273c5c9782dd8a410ac28fee250f4b82095f4ab7a5c5a7d57114b6196cc2accdb44e39351a5d7c2c519ff861db8e4a368fdc1c5459f2b4cef0076d9b57b9ba2e76b3d8b87a515fc5c777d7e8023ef898fcf31365abc3e0a1307fa85f29d3c8a7e70d58b1228e83", 0xbe8}, {&(0x7f0000000580)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}], 0x7}}], 0x1, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x40)

3m55.13334223s ago: executing program 35 (id=1136):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xfffffc6d}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000002f80)="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", 0xbe8}, {&(0x7f0000000580)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}], 0x7}}], 0x1, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x40)

6.606084498s ago: executing program 1 (id=2141):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x80, r2})
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r2})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r5, 0x533, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x4000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fd"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)

6.602494668s ago: executing program 1 (id=2142):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r3 = dup(r0)
r4 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x24, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x5, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

6.594419868s ago: executing program 1 (id=2143):
r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
wait4(r0, 0x0, 0x80000000, 0x0)
ptrace(0x10, r0)
r1 = syz_pidfd_open(r0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0)
ptrace$cont(0x7, r0, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004814)

5.410155236s ago: executing program 6 (id=2155):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r0], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7fc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x1)
recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1)
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

4.947536831s ago: executing program 6 (id=2157):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000, 0x8000000000}, @flat=@weak_handle={0x77682a85, 0x1001, 0x1}, @flat=@binder={0x73622a85, 0x10b}}, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002600)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0})

4.945220711s ago: executing program 4 (id=2158):
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

4.702460848s ago: executing program 4 (id=2161):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845"], 0x0}, 0x94)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000fdff070008"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/76}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={r1, 0x20, &(0x7f0000000b40)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/151, 0x97}}, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0xfe, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.543824673s ago: executing program 4 (id=2162):
syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b0000000000", 0xf, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa1}}], 0x1, 0x2040000, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

4.531395184s ago: executing program 6 (id=2163):
r0 = inotify_init()
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil)
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

4.431983057s ago: executing program 8 (id=2164):
socket$phonet_pipe(0x23, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x5d4a, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4)
close(0x3)

4.3501079s ago: executing program 7 (id=2165):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x401, 0x9, 0x8000, 0x32de, 0xc255}, [@TCA_NETEM_RATE={0x9, 0x6, {0x9, 0x7fffffff, 0x0, 0x3}}]}}}]}, 0x60}}, 0x0)

3.444536979s ago: executing program 7 (id=2166):
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000240)={[{@nobh}, {@nombcache}, {@resuid}, {@usrjquota}, {@barrier}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x1, 0x48f, &(0x7f0000000a00)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x60, r2, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @empty, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r4, 0x301, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x840)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

3.440736799s ago: executing program 1 (id=2167):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
fchown(0xffffffffffffffff, 0x0, 0xee01)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000})
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f)

3.4089982s ago: executing program 8 (id=2168):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x1000}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x4, 0x8, 0x8, 0x0, r0, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r3, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)

3.374419691s ago: executing program 6 (id=2169):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x8)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffc3, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}]}, 0x38}}, 0x8100)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)

3.227085306s ago: executing program 8 (id=2170):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x2000000, r2}, 0x10)

3.224624436s ago: executing program 4 (id=2171):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0xc0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
socket(0x2a, 0x800, 0x7)
openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0da6)
socket$can_raw(0x1d, 0x3, 0x1)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000)
setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100020062b2d8ab0400000000000000100006000000000020"], 0x24, 0x3)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60)

2.883075707s ago: executing program 6 (id=2172):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x2000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.691758833s ago: executing program 1 (id=2173):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000fdff070008"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/76}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={r1, 0x20, &(0x7f0000000b40)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/151, 0x97}}, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0xfe, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.691557964s ago: executing program 4 (id=2174):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)

2.264655947s ago: executing program 8 (id=2175):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x2, 0x6, 0x598, 0x2e0, 0x120, 0x120, 0x3d0, 0x120, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0xb}, [0x0, 0x0, 0xff], [], 'pimreg0\x00', 'virt_wifi0\x00', {}, {0xff}, 0x21}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000010000000}, [@common=@unspec=@cpu={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x36}, [0x0, 0xffffffff, 0x0, 0xff], [0x0, 0x0, 0xffffff00, 0xffffffff], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast1, 0x36, 0xe, 0x5}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@multicast2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x3c)

2.264319027s ago: executing program 7 (id=2176):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x11})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0xf, "0062007d82000000000000002240f7ffffff00"})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x17)

1.988137216s ago: executing program 1 (id=2177):
socket$nl_route(0x10, 0x3, 0x0)
r0 = timerfd_create(0x9, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timerfd_settime(r0, 0x3, &(0x7f0000000540)={{}, {0x77359400}}, 0x0)

963.302069ms ago: executing program 4 (id=2178):
r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
wait4(r0, 0x0, 0x80000000, 0x0)
ptrace(0x10, r0)
r1 = syz_pidfd_open(r0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0)
ptrace$cont(0x7, r0, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004814)

963.101109ms ago: executing program 8 (id=2187):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x11d04b8, 0x0, 0x85, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000240)='./file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x1000008, 0x0)

871.844012ms ago: executing program 6 (id=2179):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
io_setup(0x1, &(0x7f0000000100))
fsopen(0x0, 0x1)

785.707445ms ago: executing program 7 (id=2180):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

413.417857ms ago: executing program 7 (id=2181):
socket$alg(0x26, 0x5, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

350.768098ms ago: executing program 8 (id=2182):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r3)
umount2(&(0x7f00000001c0)='./mnt\x00', 0x8)

0s ago: executing program 7 (id=2183):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$nl_generic(0x10, 0x3, 0x10)
clock_adjtime(0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x10002, 0x0)

kernel console output (not intermixed with test programs):

 `syz.4.881'.
[  166.220915][ T6903] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.887'.
[  166.338679][   T26] audit: type=1326 audit(1779933809.760:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206fdbde59 code=0x7ffc0000
[  166.421114][   T26] audit: type=1326 audit(1779933809.780:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f206fdbde59 code=0x7ffc0000
[  166.476662][   T26] audit: type=1326 audit(1779933809.780:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206fdbde59 code=0x7ffc0000
[  166.520941][   T26] audit: type=1326 audit(1779933809.780:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206fdbde59 code=0x7ffc0000
[  166.619766][   T26] audit: type=1326 audit(1779933809.780:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f206fdbde59 code=0x7ffc0000
[  166.665912][   T26] audit: type=1326 audit(1779933809.780:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206fdbde59 code=0x7ffc0000
[  166.704228][   T26] audit: type=1326 audit(1779933809.780:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206fdbde59 code=0x7ffc0000
[  166.707509][ T6918] device vlan2 entered promiscuous mode
[  166.764051][   T26] audit: type=1326 audit(1779933809.780:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f206fdbde59 code=0x7ffc0000
[  166.821870][   T26] audit: type=1326 audit(1779933809.780:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206fdbde59 code=0x7ffc0000
[  166.881273][   T26] audit: type=1326 audit(1779933809.780:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206fdbde59 code=0x7ffc0000
[  167.704943][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.897'.
[  168.238002][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'.
[  168.412438][ T6935] netlink: 14 bytes leftover after parsing attributes in process `syz.0.901'.
[  168.502296][ T6935] bond0 (unregistering): Released all slaves
[  169.618524][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.911'.
[  170.775318][ T6976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  170.943900][ T6976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.756661][ T6976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.876636][ T6997] loop5: detected capacity change from 0 to 256
[  171.927815][ T6976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.000141][ T6997] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  172.036426][ T6997] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  172.112182][ T6997] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  172.251065][ T7004] netlink: 'syz.2.928': attribute type 1 has an invalid length.
[  172.393544][ T7004] 8021q: adding VLAN 0 to HW filter on device bond1
[  172.516180][ T7005] bond1: (slave vlan2): Opening slave failed
[  172.746055][ T6976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.806719][ T6976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.027541][ T6976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.098344][ T6976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.203521][ T6988] chnl_net:caif_netlink_parms(): no params data found
[  173.267380][ T5325] Bluetooth: hci0: command 0x0409 tx timeout
[  173.373269][ T7034] loop5: detected capacity change from 0 to 4096
[  173.463525][ T7034] EXT4-fs (loop5): Test dummy encryption mode enabled
[  173.526374][ T7034] EXT4-fs (loop5): Ignoring removed bh option
[  173.553823][ T7034] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  173.587125][ T6988] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.594539][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.640161][ T6988] device bridge_slave_0 entered promiscuous mode
[  173.644019][ T7034] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,errors=remount-ro,nombcache,test_dummy_encryption,bsdgroups,bh,delalloc,jqfmt=vfsv0,. Quota mode: writeback.
[  173.728303][ T7045] netlink: 'syz.1.941': attribute type 12 has an invalid length.
[  173.902430][ T6976] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  173.938752][ T6976] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.971730][ T6988] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.987404][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.022693][ T6988] device bridge_slave_1 entered promiscuous mode
[  174.068222][ T6976] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.095474][ T6976] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.170004][ T6976] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.192022][ T6976] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.265484][ T6976] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.296289][ T6976] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.317723][ T6988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.344479][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'.
[  174.379426][ T6988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.475021][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'.
[  174.511534][ T6988] team0: Port device team_slave_0 added
[  174.559751][ T6988] team0: Port device team_slave_1 added
[  174.567340][ T7065] netlink: 'syz.4.948': attribute type 2 has an invalid length.
[  174.618375][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.949'.
[  174.659055][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.666096][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.732348][ T6988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.791400][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.822486][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.881918][ T7078] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2556277064/2556277065
[  174.902629][ T6988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.922952][ T7078] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2556277064/2556277065
[  175.092090][ T6988] device hsr_slave_0 entered promiscuous mode
[  175.121718][ T6988] device hsr_slave_1 entered promiscuous mode
[  175.151840][ T6988] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.167172][ T6988] Cannot create hsr debugfs directory
[  175.347174][ T5332] Bluetooth: hci0: command 0x041b tx timeout
[  175.545328][ T7099] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  176.177704][ T6988] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  176.202565][ T6988] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  176.255340][ T6988] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  176.339003][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  176.381075][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  176.400825][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  176.454822][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.466815][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.484629][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.498235][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.561142][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  176.589112][ T6988] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  176.845327][ T6988] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.899451][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  176.930143][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  176.950810][ T7133] fuse: Bad value for 'fd'
[  176.958985][ T6988] 8021q: adding VLAN 0 to HW filter on device team0
[  177.000328][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  177.036812][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  177.071591][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.078854][ T5449] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.137556][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  177.158825][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  177.190258][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  177.219524][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.226658][ T5449] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.272836][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  177.330755][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  177.346942][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  177.379711][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  177.408342][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  177.437525][ T5332] Bluetooth: hci0: command 0x040f tx timeout
[  177.451891][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  177.482744][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  177.504279][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.543582][ T6988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  177.578053][ T6988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  177.600847][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  177.610818][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  177.639870][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  178.036001][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  178.046744][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  178.075100][ T6988] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.163095][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  178.177869][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  178.240199][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  178.258579][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  178.288597][ T6988] device veth0_vlan entered promiscuous mode
[  178.308181][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  178.338243][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  178.353473][ T6988] device veth1_vlan entered promiscuous mode
[  178.467925][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  178.485002][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  178.504308][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  178.528168][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  178.569763][ T6988] device veth0_macvtap entered promiscuous mode
[  178.590049][ T6988] device veth1_macvtap entered promiscuous mode
[  178.632319][ T6988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.652147][ T6988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.705988][ T7163] loop2: detected capacity change from 0 to 128
[  178.706428][ T6988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.789791][ T6988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.831033][ T6988] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.847650][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  178.857835][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  178.891315][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  178.917957][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  179.023714][ T6988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.068564][ T6988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.091318][ T6988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.128363][ T6988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.162840][ T6988] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.216436][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  179.245504][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  179.299818][ T6988] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.324345][ T6988] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.355739][ T6988] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.376147][ T6988] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.517275][ T4366] Bluetooth: hci0: command 0x0419 tx timeout
[  179.692470][ T5451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.717504][ T5451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.807346][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  179.821396][ T5151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.890789][ T5151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.916523][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  180.083133][ T7181] netlink: 'syz.5.990': attribute type 12 has an invalid length.
[  180.491672][ T7193] netlink: 63 bytes leftover after parsing attributes in process `syz.0.994'.
[  181.027931][ T5327] Bluetooth: hci1: command 0x0406 tx timeout
[  181.031833][   T26] kauditd_printk_skb: 15 callbacks suppressed
[  181.031850][   T26] audit: type=1326 audit(1779933824.450:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.0.999" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65e91c8e59 code=0x0
[  181.040206][ T5327] Bluetooth: hci3: command 0x0406 tx timeout
[  181.096250][ T5081] device hsr_slave_0 left promiscuous mode
[  181.136432][ T5081] device hsr_slave_1 left promiscuous mode
[  181.157497][ T5081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.169874][ T5081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.203452][ T5081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.239926][ T5081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.268218][ T5081] device bridge_slave_1 left promiscuous mode
[  181.297486][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.337897][ T5081] device bridge_slave_0 left promiscuous mode
[  181.354465][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.420301][ T5081] device veth1_macvtap left promiscuous mode
[  181.446381][ T5081] device veth0_macvtap left promiscuous mode
[  181.463985][ T5081] device veth1_vlan left promiscuous mode
[  181.486518][ T5081] device veth0_vlan left promiscuous mode
[  181.737923][ T7208] loop5: detected capacity change from 0 to 512
[  182.421632][ T5081] team0 (unregistering): Port device team_slave_1 removed
[  182.460143][ T5081] team0 (unregistering): Port device team_slave_0 removed
[  182.484334][ T5081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.524236][ T5081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.683488][ T7151] Set syz1 is full, maxelem 65536 reached
[  182.695685][ T5081] bond0 (unregistering): Released all slaves
[  182.793913][ T7218] netlink: 'syz.4.1004': attribute type 1 has an invalid length.
[  182.805780][ T7218] netlink: 'syz.4.1004': attribute type 4 has an invalid length.
[  182.820947][ T7218] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1004'.
[  183.253561][ T7251] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  183.957090][ T5332] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  184.090672][ T7277] overlayfs: upper fs does not support file handles, falling back to index=off.
[  184.388164][ T5332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  184.411872][ T5332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.439848][ T5332] usb 6-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00
[  184.470940][ T5332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.503868][ T5332] usb 6-1: config 0 descriptor??
[  185.001035][ T5332] hid-generic 0003:0925:8066.0002: unknown main item tag 0x0
[  185.030007][ T5332] hid-generic 0003:0925:8066.0002: hidraw0: USB HID v0.00 Device [HID 0925:8066] on usb-dummy_hcd.5-1/input0
[  185.238607][ T5332] usb 6-1: USB disconnect, device number 2
[  185.290769][ T7309] fido_id[7309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  186.691394][ T7352] fuse: Bad value for 'fd'
[  186.873384][  T144] wlan1: Trigger new scan to find an IBSS to join
[  187.417037][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  187.427029][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  187.437008][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  187.447000][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  187.457007][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  187.467009][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  187.477006][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  187.512340][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'.
[  187.566034][ T5081] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.584641][ T7375] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  187.760043][ T5081] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.818651][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  187.818754][   T26] audit: type=1326 audit(1779933831.240:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.4.1068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  187.873196][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  187.912505][   T26] audit: type=1326 audit(1779933831.270:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.4.1068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  187.919554][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  187.944195][   T26] audit: type=1326 audit(1779933831.290:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.4.1068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  188.000070][ T7384] device bridge_slave_0 left promiscuous mode
[  188.014113][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.045287][   T26] audit: type=1326 audit(1779933831.290:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.4.1068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  188.072976][ T7384] device bridge_slave_1 left promiscuous mode
[  188.081114][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.103465][   T26] audit: type=1326 audit(1779933831.290:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.4.1068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  188.137272][ T7384] bond0: (slave bond_slave_0): Releasing backup interface
[  188.166528][ T7384] bond0: (slave bond_slave_1): Releasing backup interface
[  188.215628][   T26] audit: type=1326 audit(1779933831.290:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.4.1068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  188.304034][ T7384] team0: Port device team_slave_0 removed
[  188.311893][   T26] audit: type=1326 audit(1779933831.290:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.4.1068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  188.379809][   T26] audit: type=1326 audit(1779933831.290:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.4.1068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  188.410798][ T7384] team0: Port device team_slave_1 removed
[  188.428335][ T7384] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.435989][ T7384] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.455071][   T26] audit: type=1326 audit(1779933831.290:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.4.1068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  188.484877][ T7384] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.512173][ T7384] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.562434][   T26] audit: type=1326 audit(1779933831.290:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.4.1068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fea7993bbc2 code=0x7ffc0000
[  188.593558][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  188.659870][ T7384] bond1: (slave geneve2): Releasing active interface
[  188.806360][ T7384] team0: Port device bond2 removed
[  188.813649][ T7384] bond3: (slave bond4): Releasing backup interface
[  188.849223][ T7389] team0: Mode changed to "loadbalance"
[  188.963947][ T5081] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.050953][ T5081] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.122211][ T7366] chnl_net:caif_netlink_parms(): no params data found
[  189.152083][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1077'.
[  189.267489][ T5327] Bluetooth: hci4: command 0x0409 tx timeout
[  189.465490][ T7366] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.495066][ T7366] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.538208][ T7366] device bridge_slave_0 entered promiscuous mode
[  189.613137][ T7366] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.627615][ T7366] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.654061][ T7366] device bridge_slave_1 entered promiscuous mode
[  189.814351][ T7366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.929646][ T5148] wlan1: Trigger new scan to find an IBSS to join
[  190.010620][ T7366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.162231][ T7366] team0: Port device team_slave_0 added
[  190.219259][ T7366] team0: Port device team_slave_1 added
[  190.305937][ T7366] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.337635][ T7366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.447261][ T7366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.503092][ T7366] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.526878][ T7366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.597131][ T7366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.851154][ T7366] device hsr_slave_0 entered promiscuous mode
[  190.917955][ T7366] device hsr_slave_1 entered promiscuous mode
[  190.925286][  T144] wlan1: Creating new IBSS network, BSSID a2:13:cf:80:85:00
[  190.945379][ T7366] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.967418][ T7366] Cannot create hsr debugfs directory
[  191.021489][ T7420] chnl_net:caif_netlink_parms(): no params data found
[  191.347136][ T5330] Bluetooth: hci4: command 0x041b tx timeout
[  191.464005][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.534487][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.587748][ T7420] device bridge_slave_0 entered promiscuous mode
[  191.677689][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.684824][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.723023][ T7420] device bridge_slave_1 entered promiscuous mode
[  191.748616][ T6467] Bluetooth: hci0: command 0x0409 tx timeout
[  191.805112][ T5081] device hsr_slave_0 left promiscuous mode
[  191.859478][ T5081] device veth1_macvtap left promiscuous mode
[  191.882207][ T5081] device veth0_macvtap left promiscuous mode
[  191.907348][ T5081] device veth1_vlan left promiscuous mode
[  191.920645][ T5081] device veth0_vlan left promiscuous mode
[  192.975012][ T5081] bond0 (unregistering): Released all slaves
[  193.065635][ T7420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.085620][ T7479] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  193.105236][ T7479] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  193.115655][ T7479] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  193.131743][ T7479] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  193.145325][ T7479] device geneve2 entered promiscuous mode
[  193.181759][ T7489] netlink: 'syz.1.1094': attribute type 10 has an invalid length.
[  193.243152][ T7489] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  193.259739][ T7420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.343067][ T7481] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  193.361675][ T7481] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.377725][ T7481] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  193.437302][ T5330] Bluetooth: hci4: command 0x040f tx timeout
[  193.505390][ T7420] team0: Port device team_slave_0 added
[  193.530742][ T7420] team0: Port device team_slave_1 added
[  193.552900][ T7481] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  193.572169][ T7481] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.593750][ T7481] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  193.649198][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.656194][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.699241][ T7420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.737402][ T7481] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  193.757789][ T7481] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.776859][ T7481] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  193.792491][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.800162][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.826534][ T7420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.827126][ T6467] Bluetooth: hci0: command 0x041b tx timeout
[  193.904822][ T7481] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  193.924475][ T7481] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.936722][ T7481] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  194.025505][ T7420] device hsr_slave_0 entered promiscuous mode
[  194.041820][ T7420] device hsr_slave_1 entered promiscuous mode
[  194.053043][ T7420] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.071503][ T7420] Cannot create hsr debugfs directory
[  194.219745][ T7481] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  194.237509][ T7481] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  194.266425][ T7481] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  194.319764][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.328712][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  194.388444][ T7481] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  194.427337][ T7481] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  194.454839][ T7481] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  194.515363][ T7481] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  194.531374][ T7481] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  194.548937][ T7481] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  194.590286][ T7481] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  194.609140][ T7481] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  194.634161][ T7481] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  194.679597][ T7366] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  194.721003][ T7366] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  194.778038][ T7366] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  194.817928][ T7366] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  194.916266][ T7420] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  194.972823][ T7420] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  195.040945][ T7420] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  195.071304][ T7420] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  195.245467][ T7366] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.304274][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  195.313868][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  195.334152][ T7366] 8021q: adding VLAN 0 to HW filter on device team0
[  195.375118][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  195.414465][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  195.448568][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.455728][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.489655][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  195.507319][ T6467] Bluetooth: hci4: command 0x0419 tx timeout
[  195.535609][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1102'.
[  195.570539][ T7520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1102'.
[  195.658344][ T7420] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.684478][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  195.708732][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  195.740772][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.747978][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.793172][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  195.811539][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  195.838344][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  195.863133][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  195.889597][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  195.907402][ T6467] Bluetooth: hci0: command 0x040f tx timeout
[  195.949305][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  195.970683][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  196.026507][ T7366] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  196.042247][ T7366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  196.060587][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  196.075427][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  196.109132][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  196.150708][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  196.172996][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  196.202218][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  196.216491][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  196.242667][ T7420] 8021q: adding VLAN 0 to HW filter on device team0
[  196.284593][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  196.317555][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  196.326244][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.333401][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.367647][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  196.378410][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  196.387820][ T2855] Bluetooth: hci2: command 0x0406 tx timeout
[  196.414332][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.421529][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.467553][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  196.502943][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  196.558878][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  196.602479][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  196.621408][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  196.661810][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  196.718203][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  196.767673][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  196.798074][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  196.842757][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  196.928475][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  197.005229][ T7553] bond0: (slave bond_slave_0): Releasing backup interface
[  197.056003][ T7553] bond0: (slave bond_slave_1): Releasing backup interface
[  197.243123][ T7553] team0: Port device team_slave_0 removed
[  197.286772][ T7553] team0: Port device team_slave_1 removed
[  197.399011][ T7420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  197.425564][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  197.444911][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  197.463890][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  197.489686][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  197.530501][ T7555] team0: Mode changed to "loadbalance"
[  197.549505][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  197.578952][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  197.625026][ T7366] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.988549][ T4196] Bluetooth: hci0: command 0x0419 tx timeout
[  198.125822][ T7597] xt_CT: No such helper "snmp_trap"
[  198.183960][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  198.197277][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  198.289643][ T7597] xt_time: unknown flags 0xc
[  198.619943][ T7420] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.637466][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  198.687328][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  198.764588][ T5081] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.858768][ T7366] device veth0_vlan entered promiscuous mode
[  198.915980][ T7366] device veth1_vlan entered promiscuous mode
[  198.986167][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  199.008168][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  199.070316][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  199.178734][ T5081] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.220463][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'.
[  199.267614][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  199.279087][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  199.293822][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  199.329433][ T5081] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.419293][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  199.458412][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  199.586219][ T7633] loop2: detected capacity change from 0 to 256
[  199.614891][ T5081] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.681756][ T7366] device veth0_macvtap entered promiscuous mode
[  199.687836][ T7633] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4f516b14, utbl_chksum : 0xe619d30d)
[  199.755788][ T7366] device veth1_macvtap entered promiscuous mode
[  199.800650][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  199.821625][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  199.916941][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.957018][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.004650][ T7366] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.035930][ T7420] device veth0_vlan entered promiscuous mode
[  200.092839][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  200.118272][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  200.171615][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  200.190613][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  200.202590][ T7645] netlink: 'syz.4.1130': attribute type 11 has an invalid length.
[  200.234200][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.276104][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.304896][ T7366] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.347544][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  200.368163][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  200.400020][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  200.425863][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  200.459661][ T7420] device veth1_vlan entered promiscuous mode
[  200.489515][ T7366] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.506783][ T7366] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.533145][ T7366] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.566044][ T7366] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.650492][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  200.668467][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  200.930674][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  200.948107][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  200.981734][ T7420] device veth0_macvtap entered promiscuous mode
[  201.065080][ T7420] device veth1_macvtap entered promiscuous mode
[  201.073396][   T26] kauditd_printk_skb: 60 callbacks suppressed
[  201.073413][   T26] audit: type=1326 audit(1779933844.490:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.1135" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  201.178056][   T26] audit: type=1326 audit(1779933844.500:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.1135" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  201.227113][   T26] audit: type=1326 audit(1779933844.500:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.1135" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  201.308831][ T7420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.309457][   T26] audit: type=1326 audit(1779933844.500:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.1135" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  201.334967][ T7420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.380715][ T7420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.421328][ T7420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.426524][   T26] audit: type=1326 audit(1779933844.500:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.1135" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  201.455146][ T7420] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.522942][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  201.538137][   T26] audit: type=1326 audit(1779933844.500:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.1135" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  201.548842][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  201.581769][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  201.596519][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  201.607122][   T26] audit: type=1326 audit(1779933844.500:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.1135" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  201.661337][   T26] audit: type=1326 audit(1779933844.500:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.1135" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  201.664551][ T7420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.701144][ T5449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.704906][   T26] audit: type=1326 audit(1779933844.500:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.1135" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  201.733592][ T5449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.733677][   T26] audit: type=1326 audit(1779933844.500:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.1135" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7993be59 code=0x7ffc0000
[  201.752163][ T7420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.780851][ T7420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.793300][ T7420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.813105][ T7420] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.849641][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  201.865724][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  201.876159][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  201.899502][ T7420] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.930255][ T7420] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.945763][ T7420] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.954952][ T7420] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.993309][ T5150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.045441][ T5150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.115897][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  202.262192][ T5150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.285643][ T5150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.343196][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'.
[  202.395575][ T7695] device team1 entered promiscuous mode
[  202.414816][ T7695] 8021q: adding VLAN 0 to HW filter on device team1
[  202.500378][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  202.515184][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'.
[  202.544443][ T7693] device team2 entered promiscuous mode
[  202.554602][ T7693] 8021q: adding VLAN 0 to HW filter on device team2
[  202.594998][ T7708] tipc: New replicast peer: 255.255.255.255
[  202.606493][ T7708] tipc: Enabled bearer <udp:syz2>, priority 10
[  202.630780][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1150'.
[  202.665865][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.685640][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.704690][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1151'.
[  202.811586][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  202.919087][ T7679] chnl_net:caif_netlink_parms(): no params data found
[  203.202006][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.266762][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.303971][ T7679] device bridge_slave_0 entered promiscuous mode
[  203.446034][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.455947][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.484758][ T7679] device bridge_slave_1 entered promiscuous mode
[  203.605604][ T5081] device hsr_slave_0 left promiscuous mode
[  203.624706][ T5081] device hsr_slave_1 left promiscuous mode
[  203.663752][ T5081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.679385][ T5081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.706046][ T5081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.744360][ T5081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.777872][ T5081] device bridge_slave_1 left promiscuous mode
[  203.803072][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.827546][ T6468] Bluetooth: hci1: command 0x0409 tx timeout
[  203.840805][ T5081] device bridge_slave_0 left promiscuous mode
[  203.864440][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.897156][ T5081] device veth1_macvtap left promiscuous mode
[  203.903333][ T5081] device veth0_macvtap left promiscuous mode
[  203.915791][ T5081] device veth1_vlan left promiscuous mode
[  203.924149][ T5081] device veth0_vlan left promiscuous mode
[  204.036708][ T6468] libceph: connect (1)[c::]:6789 error -101
[  204.050588][ T6468] libceph: mon0 (1)[c::]:6789 connect error
[  204.074923][ T7760] ceph: No mds server is up or the cluster is laggy
[  204.332797][ T6468] libceph: connect (1)[c::]:6789 error -101
[  204.349584][ T6468] libceph: mon0 (1)[c::]:6789 connect error
[  204.601136][ T5081] team0 (unregistering): Port device team_slave_1 removed
[  204.647313][ T5081] team0 (unregistering): Port device team_slave_0 removed
[  204.688377][ T5081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.728243][ T5081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.931559][ T5081] bond0 (unregistering): Released all slaves
[  205.024918][ T7773] netlink: 'syz.7.1163': attribute type 1 has an invalid length.
[  205.080726][ T7679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.123445][ T7679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.308777][ T7679] team0: Port device team_slave_0 added
[  205.356017][ T7679] team0: Port device team_slave_1 added
[  205.454652][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.540922][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.638024][ T7679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.688080][ T7801] netlink: 'syz.7.1173': attribute type 1 has an invalid length.
[  205.790485][ T7806] bridge0: port 3(veth3) entered blocking state
[  205.815613][ T7806] bridge0: port 3(veth3) entered disabled state
[  205.832452][ T7806] device veth3 entered promiscuous mode
[  205.883795][ T7811] bridge0: port 4(dummy0) entered blocking state
[  205.904865][ T7811] bridge0: port 4(dummy0) entered disabled state
[  205.907348][ T4196] Bluetooth: hci1: command 0x041b tx timeout
[  205.944085][ T7811] device dummy0 entered promiscuous mode
[  205.961333][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.979904][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.052750][ T7679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.076238][ T7801] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1173'.
[  206.104733][ T7801] device dummy0 left promiscuous mode
[  206.120845][ T7801] bridge0: port 4(dummy0) entered disabled state
[  206.280032][ T7679] device hsr_slave_0 entered promiscuous mode
[  206.309234][ T7679] device hsr_slave_1 entered promiscuous mode
[  206.337208][ T7679] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.363113][ T7679] Cannot create hsr debugfs directory
[  206.603049][ T7831] netlink: 'syz.7.1181': attribute type 4 has an invalid length.
[  206.701990][ T7834] netlink: 'syz.7.1181': attribute type 4 has an invalid length.
[  207.041416][ T7679] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  207.122844][ T7679] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  207.147909][ T7679] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  207.177945][ T7679] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  207.336662][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'.
[  207.566861][ T7679] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.630277][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  207.648862][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  207.697208][ T7679] 8021q: adding VLAN 0 to HW filter on device team0
[  207.772714][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  207.793651][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  207.828336][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.835523][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.885796][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  207.915645][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  207.966356][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.973556][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.987317][ T6467] Bluetooth: hci1: command 0x040f tx timeout
[  208.023761][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  208.078113][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  208.098350][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1188'.
[  208.180470][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  208.244595][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  208.267271][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  208.286261][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  208.378783][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  208.411021][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  208.433742][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  208.463147][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  208.512991][ T7679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  208.544670][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  208.559568][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  208.583830][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  208.627252][ T4196] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  208.928685][ T7894] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1198'.
[  209.025157][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  209.045550][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  209.047417][ T4196] usb 8-1: unable to get BOS descriptor or descriptor too short
[  209.081842][ T7679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.137372][ T4196] usb 8-1: not running at top speed; connect to a high speed hub
[  209.227313][ T4196] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  209.407487][ T4196] usb 8-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40
[  209.416589][ T4196] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.447181][ T7920] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.1203'.
[  209.457144][ T4196] usb 8-1: Product: syz
[  209.461369][ T4196] usb 8-1: Manufacturer: syz
[  209.466079][ T4196] usb 8-1: SerialNumber: syz
[  209.477432][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1203'.
[  209.583010][ T7925] device ip6gre1 entered promiscuous mode
[  209.780454][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  209.798260][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  209.828230][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  209.844802][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  209.870726][ T7679] device veth0_vlan entered promiscuous mode
[  209.883903][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  209.907511][ T4196] usb 8-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  209.918174][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  209.970839][ T7679] device veth1_vlan entered promiscuous mode
[  210.090370][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  210.104942][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  210.138079][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  210.147577][ T4196] usb 8-1: USB disconnect, device number 2
[  210.201315][ T4233] Bluetooth: hci1: command 0x0419 tx timeout
[  210.213858][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  210.276410][ T7679] device veth0_macvtap entered promiscuous mode
[  210.326105][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  210.355387][ T7679] device veth1_macvtap entered promiscuous mode
[  210.492214][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.533210][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.565610][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.603897][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.641672][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.657964][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  210.678104][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  210.730097][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.732373][ T7943] udevd[7943]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  210.761772][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.841854][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.901927][ T7973] loop6: detected capacity change from 0 to 1024
[  210.908735][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.980081][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.044106][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  211.063298][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  211.148447][ T7679] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.192838][ T7679] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.217036][ T7679] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.225886][ T7679] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.378462][ T7988] fuse: Bad value for 'fd'
[  212.620104][ T5449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.650886][ T5449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.714548][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  212.791369][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1227'.
[  212.848343][ T5449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.856225][ T5449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.862013][ T8010] netlink: 'syz.6.1227': attribute type 1 has an invalid length.
[  212.918385][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  213.041249][ T8010] netlink: 'syz.6.1227': attribute type 1 has an invalid length.
[  214.368404][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1240'.
[  214.456102][ T8064] 8021q: adding VLAN 0 to HW filter on device bond5
[  214.458075][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1241'.
[  214.937381][ T6467] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  215.112234][ T8090] device bridge0 entered promiscuous mode
[  215.527063][ T6467] usb 8-1: Using ep0 maxpacket: 16
[  215.687369][ T6467] usb 8-1: unable to get BOS descriptor or descriptor too short
[  215.773458][ T6467] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  216.157253][ T6467] usb 8-1: string descriptor 0 read error: -22
[  216.163776][ T6467] usb 8-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  216.203439][ T6467] usb 8-1: New USB device strings: Mfr=132, Product=132, SerialNumber=3
[  216.292861][ T6467] usb 8-1: Audio class v2/v3 interfaces need an interface association
[  216.360808][ T6467] snd-usb-audio: probe of 8-1:1.0 failed with error -22
[  216.593098][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  216.737377][ T8140] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1255'.
[  216.746599][ T8140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1255'.
[  216.801817][ T8145] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1258'.
[  216.811604][ T8145] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1258'.
[  217.376169][ T8170] loop8: detected capacity change from 0 to 2048
[  217.478034][ T8170] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  217.682873][ T4366] usb 8-1: USB disconnect, device number 3
[  218.083882][ T8203] loop7: detected capacity change from 0 to 256
[  218.206924][ T8203] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  218.589356][ T7679] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  219.097078][ T6467] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  219.347254][ T6467] usb 7-1: Using ep0 maxpacket: 32
[  219.467424][ T6467] usb 7-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.503440][ T6467] usb 7-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  219.567269][ T6467] usb 7-1: config 0 interface 0 has no altsetting 0
[  219.594409][ T6467] usb 7-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00
[  219.627912][ T6467] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.688892][ T6467] usb 7-1: config 0 descriptor??
[  220.169895][ T6467] hid-generic 0003:0458:5014.0003: item fetching failed at offset 5/39
[  220.197693][ T6467] hid-generic: probe of 0003:0458:5014.0003 failed with error -22
[  220.423794][ T8216] udc-core: couldn't find an available UDC or it's busy
[  220.437199][ T8216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  220.491345][ T2855] usb 7-1: USB disconnect, device number 2
[  221.317443][ T8265] netlink: 'syz.6.1289': attribute type 4 has an invalid length.
[  221.460370][ T8271] netlink: 'syz.6.1289': attribute type 17 has an invalid length.
[  221.567005][ T8271] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  222.534827][ T8304] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8304]
[  223.244528][ T8273] loop8: detected capacity change from 0 to 40427
[  223.398357][ T8328] team0: Device ipvlan1 failed to register rx_handler
[  223.400630][ T8273] F2FS-fs (loop8): invalid crc value
[  223.436905][ T8273] F2FS-fs (loop8): Found nat_bits in checkpoint
[  223.600748][ T8273] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  223.814401][ T8338] loop7: detected capacity change from 0 to 2048
[  223.963222][ T8338] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  224.193260][ T7679] attempt to access beyond end of device
[  224.193260][ T7679] loop8: rw=2049, want=45112, limit=40427
[  224.908308][ T7420] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  225.289650][ T8367] loop8: detected capacity change from 0 to 8192
[  225.359558][ T8367] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal
[  225.402413][ T8367] REISERFS (device loop8): using ordered data mode
[  225.432222][ T8367] reiserfs: using flush barriers
[  225.514137][ T8367] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  225.537202][ T4196] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  225.571499][ T8367] REISERFS (device loop8): checking transaction log (loop8)
[  225.617378][ T8367] REISERFS (device loop8): Using r5 hash to sort names
[  225.649723][ T8367] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  225.742145][ T8367] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage.
[  225.878820][ T8367] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  225.897427][ T4196] usb 8-1: config 0 has no interfaces?
[  225.977475][ T4196] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  225.996790][ T4196] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  226.010902][ T4196] usb 8-1: SerialNumber: syz
[  226.036043][ T4196] usb 8-1: config 0 descriptor??
[  226.177631][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.185174][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.339918][ T5330] usb 8-1: USB disconnect, device number 4
[  226.966299][ T8364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.073888][ T8364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.513665][ T8364] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.523065][ T8364] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.532375][ T8364] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.541483][ T8364] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.674410][ T8381] netlink: 'syz.1.1315': attribute type 1 has an invalid length.
[  227.836818][ T8384] device veth0_virt_wifi entered promiscuous mode
[  228.003278][ T8403] bond1: (slave ip6gretap1): making interface the new active one
[  228.039890][ T8403] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  229.028821][ T8420] ODEBUG: Out of memory. ODEBUG disabled
[  229.453334][ T8448] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  230.644069][ T8420] Set syz1 is full, maxelem 65536 reached
[  232.250212][ T8479] fuse: Bad value for 'fd'
[  232.654851][ T8442] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.663849][ T8442] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.673290][ T8442] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.682236][ T8442] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.884053][ T8452] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  232.904889][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1341'.
[  234.394195][ T8522] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  235.933819][ T8574] block device autoloading is deprecated and will be removed.
[  237.476976][    C1] hrtimer: interrupt took 46695 ns
[  237.870044][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1370'.
[  238.254307][ T8610] netlink: 'syz.8.1372': attribute type 3 has an invalid length.
[  238.331245][ T8610] netlink: 'syz.8.1372': attribute type 3 has an invalid length.
[  238.499001][ T8616] loop7: detected capacity change from 0 to 256
[  239.747265][ T4365] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  242.047186][ T4365] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  242.754917][ T4365] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  242.882068][ T4365] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  242.977295][ T8666] device wg1 entered promiscuous mode
[  242.987309][ T4365] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.105758][ T4365] usb 9-1: can't set config #27, error -71
[  243.124022][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1396'.
[  243.189406][ T4365] usb 9-1: USB disconnect, device number 2
[  243.544832][ T8681] bond1: (slave ip6gretap1): making interface the new active one
[  243.556043][ T8681] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  244.178547][ T8694] netlink: 'syz.7.1393': attribute type 1 has an invalid length.
[  244.624206][ T8699] bond2: (slave geneve2): Error -99 calling set_mac_address
[  246.572691][ T8714] device vlan2 entered promiscuous mode
[  246.582263][ T8724] loop7: detected capacity change from 0 to 512
[  246.611112][ T8714] device syz_tun entered promiscuous mode
[  246.697549][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'.
[  246.779704][ T8724] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  246.850070][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready
[  246.869996][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready
[  247.413940][ T8747] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1408'.
[  247.495871][ T8748] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1408'.
[  247.598655][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1408'.
[  247.682118][ T8754] loop6: detected capacity change from 0 to 136
[  248.415393][ T8774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1416'.
[  248.435270][ T8776] loop7: detected capacity change from 0 to 8
[  248.472546][ T8776] SQUASHFS error: lzo decompression failed, data probably corrupt
[  248.487512][ T8776] SQUASHFS error: Failed to read block 0x144: -5
[  248.494029][ T8776] SQUASHFS error: Unable to read metadata cache entry [142]
[  248.502036][ T8776] SQUASHFS error: Unable to read inode 0x11f
[  248.890718][   T26] kauditd_printk_skb: 23 callbacks suppressed
[  248.890737][   T26] audit: type=1804 audit(1779933892.310:137): pid=8781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1417" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=52122 res=1 errno=0
[  249.064545][   T26] audit: type=1804 audit(1779933892.370:138): pid=8784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1417" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=52122 res=1 errno=0
[  249.671399][ T8796] loop6: detected capacity change from 0 to 8192
[  249.820844][ T8796] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  249.888591][ T8796] REISERFS (device loop6): using ordered data mode
[  249.970933][ T8796] reiserfs: using flush barriers
[  250.125739][ T8796] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  250.213115][ T8796] REISERFS (device loop6): checking transaction log (loop6)
[  250.275872][ T8796] REISERFS (device loop6): Using r5 hash to sort names
[  250.304482][ T8796] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  250.395339][ T8796] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  250.704893][ T8796] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  251.054258][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.061777][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.945641][ T8834] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1429'.
[  252.136016][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.231336][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.210120][ T8793] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.227315][ T8793] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.246586][ T8793] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.267485][ T8793] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.512580][ T8811] bond1: option mode: unable to set because the bond device has slaves
[  253.604779][ T8813] bond1: (slave veth19): Enslaving as an active interface with a down link
[  253.616411][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1423'.
[  253.646345][ T8814] device bond1 entered promiscuous mode
[  253.652649][ T8814] device ip6gretap1 entered promiscuous mode
[  253.660579][ T8814] 8021q: adding VLAN 0 to HW filter on device bond1
[  253.672783][ T8819] device bond_slave_0 entered promiscuous mode
[  253.679514][ T8819] device bond_slave_1 entered promiscuous mode
[  253.750400][ T8819] device macvlan2 entered promiscuous mode
[  253.775414][ T8819] device bond0 entered promiscuous mode
[  253.809446][ T8819] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  254.041554][ T8844] loop6: detected capacity change from 0 to 4096
[  255.391862][ T8890] device macvlan2 entered promiscuous mode
[  255.435212][ T8890] device bond0 entered promiscuous mode
[  255.468669][ T8890] device bond_slave_0 entered promiscuous mode
[  255.506217][ T8890] device bond_slave_1 entered promiscuous mode
[  255.577258][ T8890] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  255.749671][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  255.757212][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  256.386962][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #206!!!
[  256.406971][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #206!!!
[  256.417102][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #286!!!
[  257.220766][ T8934] netlink: 'syz.4.1456': attribute type 1 has an invalid length.
[  257.402824][ T8934] 8021q: adding VLAN 0 to HW filter on device bond2
[  257.550552][ T8940] bond2: (slave veth21): Enslaving as an active interface with a down link
[  257.646676][ T8941] bond2: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  260.446410][ T8979] loop7: detected capacity change from 0 to 256
[  261.197529][ T8998] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1472'.
[  261.236281][   T26] audit: type=1804 audit(1779933904.650:139): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1471" name="/newroot/350/bus/file0" dev="overlay" ino=1851 res=1 errno=0
[  261.592242][ T9004] tipc: Started in network mode
[  261.617411][ T9004] tipc: Node identity bbbbbb01, cluster identity 4711
[  261.625330][ T9004] tipc: Enabled bearer <eth:rose0>, priority 10
[  262.403612][ T9025] netlink: 'syz.7.1479': attribute type 1 has an invalid length.
[  263.221694][ T9034] bond3: (slave bridge1): making interface the new active one
[  263.289324][ T9034] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  263.428418][ T4196] tipc: Node number set to 3149642497
[  264.697259][ T9054] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1486'.
[  264.742209][ T9057] tipc: Failed to remove unknown binding: 66,0,0/0:706083432/706083433
[  264.814992][ T9057] tipc: Failed to remove unknown binding: 66,0,0/0:706083432/706083433
[  265.227672][ T9069] tipc: Enabling of bearer <eth:rose0> rejected, already enabled
[  265.624546][ T9078] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  265.744494][ T9078] overlayfs: failed to set xattr on upper
[  265.801790][ T9078] overlayfs: ...falling back to index=off,metacopy=off.
[  266.657129][    T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  267.028176][    T7] usb 7-1: config 0 has an invalid interface number: 50 but max is 0
[  267.038596][    T7] usb 7-1: config 0 has no interface number 0
[  267.044755][    T7] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  267.297237][    T7] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  267.316357][    T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.362528][    T7] usb 7-1: Product: syz
[  267.386826][    T7] usb 7-1: Manufacturer: syz
[  267.415229][    T7] usb 7-1: SerialNumber: syz
[  267.461093][    T7] usb 7-1: config 0 descriptor??
[  267.574251][    T7] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0
[  267.833778][    T7] usb 7-1: USB disconnect, device number 3
[  267.878833][    T7] yurex 7-1:0.50: USB YUREX #0 now disconnected
[  268.336167][ T9132] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1505'.
[  268.423717][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  268.684244][ T9139] loop8: detected capacity change from 0 to 512
[  268.768538][ T9139] EXT4-fs (loop8): Unrecognized mount option "fsmagic=0x0000000000000002" or missing value
[  268.988575][   T26] audit: type=1326 audit(1779933912.410:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9144 comm="syz.1.1508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f206fdbde59 code=0x0
[  269.660739][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1513'.
[  271.166284][ T9179] loop6: detected capacity change from 0 to 128
[  271.222099][ T9184] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1520'.
[  271.296433][ T9179] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  271.322432][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1519'.
[  271.327517][ T9179] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  271.417864][ T9186] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1520'.
[  271.542146][ T9186] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1520'.
[  271.815488][ T9199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1522'.
[  272.140709][ T9202] overlayfs: workdir and upperdir must reside under the same mount
[  276.393040][ T9284] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  276.641925][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'.
[  277.683769][ T9300] fuse: Bad value for 'fd'
[  278.933449][ T9324] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  279.068292][ T9324] overlayfs: failed to set xattr on upper
[  279.074079][ T9324] overlayfs: ...falling back to index=off,metacopy=off.
[  279.218901][ T9324] overlayfs: conflicting lowerdir path
[  279.378463][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1566'.
[  279.447379][ T9341] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1566'.
[  279.578715][ T9346] unsupported nlmsg_type 40
[  279.587862][ T9342] bridge1: port 1(vlan2) entered blocking state
[  279.634927][ T9342] bridge1: port 1(vlan2) entered disabled state
[  279.748503][ T9349] netlink: 1320 bytes leftover after parsing attributes in process `syz.7.1567'.
[  279.812511][ T9351] netlink: 'syz.4.1569': attribute type 1 has an invalid length.
[  279.939672][ T9358] Set syz0 is full, maxelem 0 reached
[  279.974171][ T9351] device bond3 entered promiscuous mode
[  279.981843][ T9358] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  280.025302][ T9351] 8021q: adding VLAN 0 to HW filter on device bond3
[  280.071761][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1569'.
[  280.146304][ T9354] bond3 (unregistering): Released all slaves
[  280.425291][ T9368] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1577'.
[  280.500594][ T9366] loop8: detected capacity change from 0 to 4096
[  280.542079][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1576'.
[  280.741442][ T9366] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  280.780341][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1576'.
[  280.845926][ T9366] ntfs3: loop8: Failed to load $Extend.
[  281.004400][ T9382] fuse: Bad value for 'fd'
[  281.051066][ T9366] ntfs3: loop8: ino=5, "/" directory corrupted
[  281.106059][ T9383] ntfs3: loop8: ino=5, "/" directory corrupted
[  281.168366][ T9366] ntfs3: loop8: ino=5, "/" directory corrupted
[  281.208847][ T9366] ntfs3: loop8: ino=5, "/" directory corrupted
[  281.276545][ T9366] ntfs3: loop8: ino=5, "/" directory corrupted
[  281.300583][ T9366] ntfs3: loop8: ino=5, "/" directory corrupted
[  281.329693][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1582'.
[  281.342722][ T9383] ntfs3: loop8: ino=5, "/" directory corrupted
[  281.379869][ T9366] ntfs3: loop8: ino=5, "/" directory corrupted
[  281.392088][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1582'.
[  281.698721][ T9391] netlink: 'syz.8.1584': attribute type 1 has an invalid length.
[  281.771066][ T9391] device bond1 entered promiscuous mode
[  281.787697][ T9391] 8021q: adding VLAN 0 to HW filter on device bond1
[  281.899214][ T9394] device veth3 entered promiscuous mode
[  281.918530][ T9394] bond1: (slave veth3): Enslaving as an active interface with an up link
[  281.960927][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  282.996015][ T9418] __nla_validate_parse: 1 callbacks suppressed
[  282.996034][ T9418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1593'.
[  286.120571][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1596'.
[  287.282368][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1600'.
[  287.527395][ T9445] loop8: detected capacity change from 0 to 2048
[  287.709689][ T9445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  288.074805][   T26] audit: type=1800 audit(1779933931.490:141): pid=9445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1601" name="file1" dev="loop8" ino=1415 res=0 errno=0
[  290.342772][ T9444] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  290.352782][ T9444] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  290.362533][ T9444] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  290.371189][ T9444] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  290.418698][ T9444] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.427347][ T9444] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.435795][ T9444] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.444191][ T9444] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.630637][ T9444] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  290.642296][ T9444] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  290.651246][ T9444] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  290.660802][ T9444] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  291.145316][ T9484] loop8: detected capacity change from 0 to 512
[  291.226781][ T9484] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  291.266687][ T9484] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  291.401274][ T9484] EXT4-fs error (device loop8): __ext4_iget:4919: inode #11: block 1: comm syz.8.1616: invalid block
[  291.432188][ T9484] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.1616: couldn't read orphan inode 11 (err -117)
[  291.450325][ T9494] VFS: Mount too revealing
[  291.485228][ T9484] EXT4-fs (loop8): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,commit=0x0000000000000005,mblk_io_submit,stripe=0x0000000000000004,auto_da_alloc=0x0000000000000008,dioread_nolock,lazytime,quota,,errors=continue. Quota mode: writeback.
[  291.498218][   T26] audit: type=1804 audit(1779933934.900:142): pid=9499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1622" name="/newroot/84/bus/bus" dev="overlay" ino=463 res=1 errno=0
[  291.771995][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'.
[  294.158555][ T9524] device bridge2 entered promiscuous mode
[  294.342211][ T9530] tipc: Failed to remove unknown binding: 66,1,1/2099199:381125923/381125925
[  294.372898][ T9530] tipc: Failed to remove unknown binding: 66,1,1/2099199:381125923/381125925
[  294.410519][ T9527] loop8: detected capacity change from 0 to 4096
[  294.436208][ T9530] tipc: Failed to remove unknown binding: 66,1,1/2099199:381125923/381125925
[  294.817689][   T26] audit: type=1804 audit(1779933938.230:143): pid=9545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1630" name=2F6E6577726F6F742F37382F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop8" ino=34 res=1 errno=0
[  295.203469][ T9558] loop7: detected capacity change from 0 to 1024
[  295.263632][ T9558] EXT4-fs (loop7): Ignoring removed orlov option
[  295.344830][ T9558] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  295.682855][   T26] audit: type=1800 audit(1779933939.100:144): pid=9572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1641" name="bus" dev="loop7" ino=19 res=0 errno=0
[  295.995831][ T4365] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  296.247071][ T4365] usb 8-1: Using ep0 maxpacket: 32
[  296.618621][ T4365] usb 8-1: unable to get BOS descriptor or descriptor too short
[  296.694745][ T4365] usb 8-1: unable to read config index 0 descriptor/start: -71
[  296.714940][ T4365] usb 8-1: can't read configurations, error -71
[  297.241629][ T9594] loop8: detected capacity change from 0 to 8192
[  303.259757][ T9626] loop8: detected capacity change from 0 to 32768
[  303.594077][ T9626] XFS (loop8): Mounting V5 Filesystem
[  303.868545][ T9626] XFS (loop8): Ending clean mount
[  303.883929][ T9626] XFS (loop8): Quotacheck needed: Please wait.
[  304.115231][ T9626] XFS (loop8): Quotacheck: Done.
[  305.112362][ T4365] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  305.515176][ T9655] fuse: Bad value for 'fd'
[  305.517284][ T4365] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.555268][ T4365] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  305.605834][ T7679] XFS (loop8): Unmounting Filesystem
[  305.614602][ T4365] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  305.644964][ T4365] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.684856][ T4365] usb 7-1: config 0 descriptor??
[  306.246645][ T6452] usb 7-1: USB disconnect, device number 4
[  306.630451][ T9663] tmpfs: Unknown parameter 'quota'
[  307.137397][ T9666] loop7: detected capacity change from 0 to 8192
[  307.755122][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'.
[  307.814337][ T9689] device lo entered promiscuous mode
[  307.939125][ T9689] device tunl0 entered promiscuous mode
[  308.038149][ T9689] device gre0 entered promiscuous mode
[  308.078093][ T9689] device gretap0 entered promiscuous mode
[  308.121877][ T9689] device erspan0 entered promiscuous mode
[  308.159120][ T9689] device ip_vti0 entered promiscuous mode
[  308.190031][ T9689] device ip6_vti0 entered promiscuous mode
[  308.237825][ T9689] device sit0 entered promiscuous mode
[  308.271449][ T9689] device ip6tnl0 entered promiscuous mode
[  308.318628][ T9689] device ip6gre0 entered promiscuous mode
[  308.347791][ T9689] device syz_tun entered promiscuous mode
[  308.377690][ T9689] device ip6gretap0 entered promiscuous mode
[  308.407799][ T9689] device vcan0 entered promiscuous mode
[  308.417804][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  308.429211][ T9698] loop7: detected capacity change from 0 to 4096
[  308.497932][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  308.514063][ T9689] device bond0 entered promiscuous mode
[  308.531362][ T9689] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.554171][ T9689] device team0 entered promiscuous mode
[  308.599661][ T9698] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  308.600344][ T9689] 8021q: adding VLAN 0 to HW filter on device team0
[  308.620594][ T9689] device dummy0 entered promiscuous mode
[  308.630522][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  308.639283][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  308.725592][   T26] audit: type=1804 audit(1779933952.140:145): pid=9701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1690" name="/newroot/102/file0" dev="fuse" ino=1 res=1 errno=0
[  308.734031][ T9689] device nlmon0 entered promiscuous mode
[  308.832172][ T9698] ntfs3: loop7: failed to convert "0000" to iso8859-7
[  308.878184][ T9689] device caif0 entered promiscuous mode
[  308.885237][ T9689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  308.887619][ T9703] ntfs3: loop7: failed to convert "0000" to iso8859-7
[  308.917546][ T9698] ntfs3: loop7: failed to convert name for inode 1e.
[  308.986993][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'.
[  309.023607][ T9703] ntfs3: loop7: failed to convert name for inode 1e.
[  309.474096][ T9712] device bridge_slave_0 left promiscuous mode
[  309.519208][ T9712] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.545856][   T26] audit: type=1326 audit(1779933952.960:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.1.1696" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f206fdbde59 code=0x0
[  309.569578][    C0] vkms_vblank_simulate: vblank timer overrun
[  309.584428][ T9712] device bridge_slave_1 left promiscuous mode
[  309.639441][ T9712] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.691446][ T9712] bond0: (slave bond_slave_0): Releasing backup interface
[  309.718915][ T9712] bond0: (slave bond_slave_1): Releasing backup interface
[  309.743189][ T9712] team0: Port device team_slave_0 removed
[  309.775767][ T9712] team0: Port device team_slave_1 removed
[  309.788490][ T9712] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.796616][ T9712] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.125897][ T9722] loop6: detected capacity change from 0 to 8192
[  313.498759][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'.
[  313.851446][ T9757] fuse: Bad value for 'fd'
[  315.701629][ T4365] Bluetooth: hci4: command 0x0406 tx timeout
[  315.897495][ T4365] Bluetooth: hci0: command 0x0406 tx timeout
[  316.074446][ T9780] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1718'.
[  317.477365][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  317.484079][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  318.361909][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1728'.
[  318.737123][ T6452] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  318.987187][ T6452] usb 7-1: Using ep0 maxpacket: 8
[  319.017316][ T9824] netlink: 'syz.1.1734': attribute type 16 has an invalid length.
[  319.055641][ T9824] netlink: 'syz.1.1734': attribute type 17 has an invalid length.
[  319.078050][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  319.110888][ T6452] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  319.124271][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  319.127051][ T6452] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  319.178961][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  319.197375][ T6452] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  319.209791][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  319.246005][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  319.257146][ T6452] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  319.272672][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  319.297448][ T6452] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.306267][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): 
30ªî{X¹¦: link becomes ready
[  319.306537][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): 
30ªî{X¹¦: link becomes ready
[  319.384619][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  319.417568][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  319.420002][ T6452] usbtmc 7-1:16.0: bulk endpoints not found
[  319.454988][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  319.490907][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  319.527050][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  319.557508][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  319.588743][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready
[  319.648887][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready
[  319.684018][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready
[  319.740978][    T7] usb 7-1: USB disconnect, device number 5
[  319.760308][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready
[  319.870984][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  319.938069][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  319.987121][ T9824] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.994269][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  320.059595][ T9824] 8021q: adding VLAN 0 to HW filter on device team0
[  320.110471][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  320.149421][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready
[  320.187768][ T9824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  320.288809][    T7] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  320.662803][ T5325] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  322.328716][ T5325] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  322.611290][ T9850] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1742'.
[  322.680558][ T9850] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1742'.
[  323.018860][ T9863] overlayfs: failed to clone upperpath
[  323.362408][    T7] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  323.409951][    T7] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  324.399632][ T4365] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  324.408607][ T4365] Bluetooth: hci1: command 0x0406 tx timeout
[  325.578404][ T9892] fuse: Bad value for 'fd'
[  326.076962][   T26] audit: type=1326 audit(1779933969.490:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.1.1751" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206fdbde59 code=0x7fc00000
[  327.286398][ T9931] binder: BINDER_SET_CONTEXT_MGR already set
[  327.544680][ T9931] binder: 9930:9931 ioctl 4018620d 200000004a80 returned -16
[  327.907099][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  329.307262][ T9952] loop6: detected capacity change from 0 to 512
[  330.168497][ T9952] EXT4-fs (loop6): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  330.191127][ T9952] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.276803][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1774'.
[  332.883858][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1775'.
[  336.175671][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1775'.
[  336.669199][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1784'.
[  337.027066][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  337.305821][T10007] loop6: detected capacity change from 0 to 512
[  337.391634][T10007] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5
[  337.391634][T10007] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  337.391634][T10007] 
[  337.512367][T10007] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  337.577241][T10007] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  337.718237][T10007] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  337.726566][T10007] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e042a02c, mo2=0000]
[  337.735382][T10007] EXT4-fs (loop6): failed to initialize system zone (-117)
[  337.743273][T10007] EXT4-fs (loop6): mount failed
[  339.627114][ T5325] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  339.897132][ T5325] usb 7-1: Using ep0 maxpacket: 32
[  339.930254][T10055] netlink: 1319 bytes leftover after parsing attributes in process `syz.7.1800'.
[  340.037403][ T5325] usb 7-1: config 0 has no interfaces?
[  340.043685][ T5325] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  340.101897][ T5325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.534929][ T5325] usb 7-1: config 0 descriptor??
[  341.342220][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1804'.
[  341.352152][T10063] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  344.102061][T10073] netlink: 'syz.7.1807': attribute type 27 has an invalid length.
[  344.134434][T10073] netlink: 'syz.7.1807': attribute type 4 has an invalid length.
[  344.162045][T10073] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1807'.
[  344.435127][ T6452] usb 7-1: USB disconnect, device number 6
[  344.557683][T10087] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1812'.
[  344.566126][T10089] loop6: detected capacity change from 0 to 1024
[  344.590086][T10087] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.597554][T10087] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.726763][T10090] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1812'.
[  345.510065][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1816'.
[  346.288898][T10099] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1816'.
[  346.359587][T10099] HTB: quantum of class 8023000C is small. Consider r2q change.
[  347.777088][ T4365] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  348.317346][ T4365] usb 8-1: Using ep0 maxpacket: 32
[  348.457263][ T4365] usb 8-1: config 0 has no interfaces?
[  348.462838][ T4365] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  348.513315][T10128] ceph: No mds server is up or the cluster is laggy
[  348.537175][ T4365] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.609387][ T4365] usb 8-1: config 0 descriptor??
[  348.647713][    T7] libceph: connect (1)[c::]:6789 error -97
[  348.653677][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  349.044969][    T7] libceph: connect (1)[c::]:6789 error -97
[  349.052127][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  349.546651][T10141] loop8: detected capacity change from 0 to 1024
[  349.983361][ T4365] usb 8-1: USB disconnect, device number 7
[  350.209944][T10150] loop6: detected capacity change from 0 to 4096
[  350.277278][T10150] EXT4-fs (loop6): Test dummy encryption mode enabled
[  350.317156][T10150] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled
[  350.374215][T10150] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000001000000,resgid=0x0000000000000000,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,noblock_validity,usrjquota=wÅü5ÔTÕÔ)­`)Y�Fæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè,errors=continue. Quota mode: writeback.
[  350.938724][T10160] loop8: detected capacity change from 0 to 256
[  351.829910][T10160] netlink: 'syz.8.1835': attribute type 2 has an invalid length.
[  352.749287][T10178] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  355.587061][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  355.722623][T10196] loop8: detected capacity change from 0 to 32768
[  355.816106][T10196] (syz.8.1848,10196,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  355.917547][T10196] (syz.8.1848,10196,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  356.112004][T10224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1857'.
[  356.142696][T10196] JBD2: Ignoring recovery information on journal
[  356.360412][T10196] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  356.638429][T10230] xt_NFQUEUE: number of queues (8) out of range (got 65537)
[  356.878516][ T7679] ocfs2: Unmounting device (7,8) on (node local)
[  360.708512][T10278] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  360.776317][T10278] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  360.842477][T10278] bond1: (slave ip6gretap1): Releasing active interface
[  360.885518][T10278] device ip6gretap1 left promiscuous mode
[  360.957356][T10278] bond1: (slave veth19): Releasing active interface
[  361.030684][T10278] bond2: (slave veth21): Releasing active interface
[  361.776488][T10276] loop7: detected capacity change from 0 to 32768
[  361.783121][ T4365] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  361.869100][T10276] (syz.7.1871,10276,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  361.922368][T10276] (syz.7.1871,10276,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  362.037119][ T4365] usb 9-1: Using ep0 maxpacket: 8
[  362.050572][T10276] JBD2: Ignoring recovery information on journal
[  362.207071][ T4365] usb 9-1: unable to get BOS descriptor or descriptor too short
[  362.217713][ T4365] usb 9-1: too many configurations: 141, using maximum allowed: 8
[  362.299881][T10276] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  362.347221][ T4365] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  362.387129][ T4365] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  362.537189][ T4365] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  362.587244][ T4365] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  362.676342][ T7420] ocfs2: Unmounting device (7,7) on (node local)
[  362.767217][ T4365] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  362.801885][ T4365] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  362.948005][ T4365] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  362.988847][ T4365] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  363.127307][ T4365] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  363.169457][ T4365] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  363.450301][T10312] device macsec0 entered promiscuous mode
[  363.457272][ T4365] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  363.484847][ T4365] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  363.510963][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'.
[  364.149578][ T4365] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  364.175680][ T4365] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  364.347221][ T4365] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  364.377864][ T4365] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  364.537206][ T4365] usb 9-1: string descriptor 0 read error: -71
[  364.543491][ T4365] usb 9-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  364.644610][ T4365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.737255][ T4365] usb 9-1: can't set config #1, error -71
[  364.796486][ T4365] usb 9-1: USB disconnect, device number 3
[  366.104089][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1890'.
[  366.132630][T10335] loop6: detected capacity change from 0 to 1024
[  366.303140][T10335] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  370.072466][T10372] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  371.285886][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1908'.
[  371.584078][T10392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1910'.
[  371.633139][T10392] device ip6gre1 entered promiscuous mode
[  371.692200][T10392] netlink: 'syz.4.1910': attribute type 6 has an invalid length.
[  371.725016][T10392] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1910'.
[  375.065424][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[  375.146223][T10420] loop8: detected capacity change from 0 to 512
[  375.225719][T10424] netlink: 'syz.6.1918': attribute type 4 has an invalid length.
[  375.437118][T10429] netlink: 'syz.6.1921': attribute type 4 has an invalid length.
[  375.490915][T10431] netlink: 'syz.6.1921': attribute type 4 has an invalid length.
[  375.657501][T10395] chnl_net:caif_netlink_parms(): no params data found
[  375.757732][T10395] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.765280][T10395] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.782914][T10395] device bridge_slave_0 entered promiscuous mode
[  375.795598][T10395] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.803014][T10395] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.820836][T10395] device bridge_slave_1 entered promiscuous mode
[  375.893488][T10395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.916157][T10395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.015892][T10395] team0: Port device team_slave_0 added
[  376.044330][T10395] team0: Port device team_slave_1 added
[  376.235456][T10395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.248984][T10395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.286260][T10395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.327695][T10395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.340281][T10395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.482952][T10395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.791232][T10395] device hsr_slave_0 entered promiscuous mode
[  376.830038][T10395] device hsr_slave_1 entered promiscuous mode
[  376.869007][T10395] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  376.900841][T10395] Cannot create hsr debugfs directory
[  377.109582][    T7] Bluetooth: hci0: command 0x041b tx timeout
[  377.338793][T10395] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.459625][T10395] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.609168][T10395] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.744865][T10395] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.852921][T10456] x_tables: duplicate entry at hook 1
[  378.176988][T10395] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  378.218749][T10395] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  378.267987][T10395] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  378.352306][T10461] loop8: detected capacity change from 0 to 16
[  378.353672][T10395] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  378.442231][T10461] erofs: (device loop8): mounted with root inode @ nid 36.
[  378.517215][T10461] erofs: (device loop8): find_target_block_classic: corrupted dir block 8200 @ nid 36
[  378.581321][T10453] chnl_net:caif_netlink_parms(): no params data found
[  378.632694][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  378.639234][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  378.880799][T10395] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.012194][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  379.035314][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  379.067845][T10395] 8021q: adding VLAN 0 to HW filter on device team0
[  379.143028][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  379.155453][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  379.182110][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.189295][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.200341][ T5325] Bluetooth: hci0: command 0x040f tx timeout
[  379.216435][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  379.226085][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  379.245492][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.252652][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.282942][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  379.300022][T10453] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.316576][T10453] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.334842][T10453] device bridge_slave_0 entered promiscuous mode
[  379.357066][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  379.368966][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  379.379133][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  379.404364][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  379.421922][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  379.441122][T10453] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.450161][T10453] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.464680][T10453] device bridge_slave_1 entered promiscuous mode
[  379.524399][   T26] audit: type=1326 audit(1779934022.940:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.1.1935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f206fdbde59 code=0x0
[  379.549282][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  379.568242][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  379.591252][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  379.620393][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  379.648582][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  379.666120][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  379.691214][T10453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.704897][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  379.740522][T10453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.765439][    T7] Bluetooth: hci3: command 0x0409 tx timeout
[  379.886674][T10453] team0: Port device team_slave_0 added
[  379.920870][T10453] team0: Port device team_slave_1 added
[  379.966750][T10453] batman_adv: batadv0: Adding interface: batadv_slave_0
[  379.982231][T10453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  380.066267][T10453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  380.090574][T10453] batman_adv: batadv0: Adding interface: batadv_slave_1
[  380.107385][T10453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  380.146338][T10453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  380.223271][T10453] device hsr_slave_0 entered promiscuous mode
[  380.242875][T10453] device hsr_slave_1 entered promiscuous mode
[  380.257253][T10453] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  380.265133][T10453] Cannot create hsr debugfs directory
[  380.370803][T10485] loop6: detected capacity change from 0 to 32768
[  380.611117][T10485] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1938 (10485)
[  380.707235][T10485] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  380.716187][T10485] BTRFS info (device loop6): turning on sync discard
[  380.723172][T10485] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  380.733343][T10485] BTRFS info (device loop6): use zstd compression, level 3
[  380.740653][T10485] BTRFS info (device loop6): turning on async discard
[  380.747524][T10485] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  380.758320][T10485] BTRFS info (device loop6): trying to use backup root at mount time
[  380.766633][T10485] BTRFS info (device loop6): enabling auto defrag
[  380.773369][T10485] BTRFS info (device loop6): using free space tree
[  380.779938][T10485] BTRFS info (device loop6): has skinny extents
[  381.328354][    T7] Bluetooth: hci0: command 0x0419 tx timeout
[  381.514189][T10501] netlink: 'syz.8.1941': attribute type 29 has an invalid length.
[  381.531477][T10501] netlink: 'syz.8.1941': attribute type 29 has an invalid length.
[  381.563220][T10501] netlink: 'syz.8.1941': attribute type 29 has an invalid length.
[  381.606465][T10395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  381.820138][ T4365] Bluetooth: hci3: command 0x041b tx timeout
[  381.987972][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  382.011032][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  382.158131][ T5081] BTRFS warning (device loop6): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  382.201448][T10485] BTRFS warning (device loop6): failed to read root (objectid=2): -5
[  382.213989][    T9] BTRFS warning (device loop6): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  382.259021][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1943'.
[  382.269329][T10485] BTRFS warning (device loop6): couldn't read tree root
[  382.277751][T10485] BTRFS error (device loop6): parent transid verify failed on 5255168 wanted 5 found 7
[  382.290385][T10485] BTRFS warning (device loop6): couldn't read tree root
[  382.327513][T10485] BTRFS info (device loop6): enabling ssd optimizations
[  382.335785][T10485] BTRFS info (device loop6): clearing free space tree
[  382.343131][T10485] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  382.352801][T10485] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  382.386690][T10485] BTRFS info (device loop6): creating free space tree
[  382.395720][T10485] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  382.405464][T10485] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  382.792989][T10453] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  382.818184][T10485] netlink: 'syz.6.1938': attribute type 28 has an invalid length.
[  382.826372][T10485] netlink: 'syz.6.1938': attribute type 3 has an invalid length.
[  382.834203][T10485] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1938'.
[  382.884399][T10533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1945'.
[  383.331755][T10453] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  383.433569][T10453] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  383.521570][T10453] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  383.562062][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  383.585915][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  383.674924][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  383.718271][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  383.775449][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  383.822054][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  383.839718][ T4265] Bluetooth: hci3: command 0x040f tx timeout
[  383.847494][T10395] device veth0_vlan entered promiscuous mode
[  383.884438][T10395] device veth1_vlan entered promiscuous mode
[  384.019279][T10395] device veth0_macvtap entered promiscuous mode
[  384.068451][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  384.100559][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  384.130385][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  384.160408][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  384.191509][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  384.231229][T10395] device veth1_macvtap entered promiscuous mode
[  384.238855][T10563] netlink: 'syz.1.1956': attribute type 1 has an invalid length.
[  384.331507][T10563] 8021q: adding VLAN 0 to HW filter on device bond6
[  384.371758][T10453] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.402221][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  384.494931][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  384.564619][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.607776][T10395] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.629736][T10577] tipc: Started in network mode
[  384.635695][T10577] tipc: Node identity f25701acde45, cluster identity 4711
[  384.656335][T10577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.666555][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'.
[  384.676505][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1962'.
[  384.718017][T10586] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.741469][T10586] bond3: (slave bond0): making interface the new active one
[  384.761077][T10586] bond3: (slave bond0): Enslaving as an active interface with an up link
[  384.781308][T10583] bond3: option mode: unable to set because the bond device has slaves
[  384.845022][T10584] device syzkaller0 entered promiscuous mode
[  384.860738][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  384.878762][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  384.906756][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  384.938204][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  384.971743][T10453] 8021q: adding VLAN 0 to HW filter on device team0
[  384.991574][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.008674][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.048243][T10395] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.074275][T10575] tipc: Resetting bearer <eth:syzkaller0>
[  385.106332][T10590] overlayfs: failed to clone upperpath
[  385.155050][T10575] tipc: Disabling bearer <eth:syzkaller0>
[  385.195170][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  385.215441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  385.234134][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  385.257013][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  385.274237][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.281502][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.302235][T10395] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.341294][T10395] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.369314][T10395] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.388311][T10395] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.409847][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1964'.
[  385.470777][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  385.542475][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  385.571917][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  385.593598][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.600791][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  385.629292][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  385.758491][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  385.778334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  385.828309][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  385.867007][ T4265] Bluetooth: hci3: command 0x0419 tx timeout
[  385.885292][T10453] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  385.935809][T10453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  385.982212][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  386.008651][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  386.053578][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  386.092011][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  386.130993][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  386.170692][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  386.209516][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  386.339788][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  386.347424][ T5151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.365226][ T5151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.446506][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  386.478067][ T5151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.503236][ T5151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.548753][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  387.850088][T10594] loop6: detected capacity change from 0 to 32768
[  387.872576][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  387.880150][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  387.926748][T10453] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.991799][T10594] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1965 (10594)
[  388.103973][T10594] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  388.145543][T10594] BTRFS info (device loop6): turning on sync discard
[  388.152298][T10594] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  388.244768][T10594] BTRFS info (device loop6): use zstd compression, level 3
[  388.252056][T10594] BTRFS info (device loop6): turning on async discard
[  388.336096][T10594] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  388.382901][T10594] BTRFS info (device loop6): trying to use backup root at mount time
[  388.432767][T10594] BTRFS info (device loop6): enabling auto defrag
[  388.490591][T10594] BTRFS info (device loop6): using free space tree
[  388.547168][T10594] BTRFS info (device loop6): has skinny extents
[  389.282923][T10594] BTRFS error (device loop6): open_ctree failed: -12
[  389.729784][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  390.296739][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  390.392876][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  390.414556][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  390.483586][T10453] device veth0_vlan entered promiscuous mode
[  390.510299][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  390.543061][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  390.592615][T10453] device veth1_vlan entered promiscuous mode
[  391.566962][T10665] device veth0_virt_wifi left promiscuous mode
[  391.594090][T10665] device vti0 left promiscuous mode
[  391.599742][T10665] device bond2 left promiscuous mode
[  391.623870][T10665] device team1 left promiscuous mode
[  391.643392][T10665] device team2 left promiscuous mode
[  391.648945][T10665] device ip6gre1 left promiscuous mode
[  391.786180][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  391.807458][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  391.884063][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  391.907737][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  391.919837][T10453] device veth0_macvtap entered promiscuous mode
[  391.921268][T10681] syz.7.1982 (10681): drop_caches: 2
[  391.951327][T10453] device veth1_macvtap entered promiscuous mode
[  392.015054][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.027075][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.038721][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.050937][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.119842][T10453] batman_adv: batadv0: Interface activated: batadv_slave_0
[  392.171695][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  392.190639][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  392.239863][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  392.258231][T10696] loop6: detected capacity change from 0 to 8
[  392.270372][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  392.308574][T10696] SQUASHFS error: zlib decompression failed, data probably corrupt
[  392.318620][T10696] SQUASHFS error: Failed to read block 0x9b: -5
[  392.325584][T10696] SQUASHFS error: Unable to read metadata cache entry [99]
[  392.333459][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.347289][T10696] SQUASHFS error: Unable to read inode 0x127
[  392.356543][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.367089][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.379831][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.391849][T10453] batman_adv: batadv0: Interface activated: batadv_slave_1
[  392.404901][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  392.436111][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  392.550092][T10453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  392.578360][T10453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  392.615883][T10453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  392.648733][T10453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.858228][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1993'.
[  392.870553][ T4265] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  392.997051][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.024513][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.050472][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  393.073013][ T5150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.112371][ T5150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.145933][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  393.225159][ T4265] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  393.273340][ T4265] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  393.323836][ T4265] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.353219][T10717] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1998'.
[  393.377305][ T4265] usb 8-1: config 0 descriptor??
[  393.417504][T10717] device ip6gre1 entered promiscuous mode
[  393.475923][T10717] netlink: 'syz.6.1998': attribute type 6 has an invalid length.
[  393.518104][T10717] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1998'.
[  393.672696][T10724] kernel profiling enabled (shift: 9)
[  393.726538][T10726] loop6: detected capacity change from 0 to 128
[  393.803387][T10726] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  393.879834][ T4265] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[  393.929766][ T4265] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0004/input/input5
[  394.220898][ T4265] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0
[  394.311273][   T26] audit: type=1326 audit(1779934038.007:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10731 comm="syz.6.2003" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ace115e59 code=0x0
[  395.001828][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2007'.
[  395.071548][ T4365] usb 8-1: USB disconnect, device number 8
[  396.892795][T10771] loop7: detected capacity change from 0 to 128
[  396.909693][T10769] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2015'.
[  396.965553][T10769] 0ªX¹¦À: renamed from caif0
[  397.000802][T10769] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  397.066245][T10771] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  397.143053][T10776] netlink: 'syz.6.2017': attribute type 1 has an invalid length.
[  397.217251][T10776] device bond1 entered promiscuous mode
[  397.287575][T10776] 8021q: adding VLAN 0 to HW filter on device bond1
[  397.472254][T10781] bond1: (slave bridge4): making interface the new active one
[  397.521518][T10781] device bridge4 entered promiscuous mode
[  397.565138][T10781] bond1: (slave bridge4): Enslaving as an active interface with an up link
[  397.601772][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  399.798341][T10809] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  399.944962][T10809] netlink: 'syz.8.2025': attribute type 49 has an invalid length.
[  400.039553][T10813] loop6: detected capacity change from 0 to 512
Stopping sshd: [  400.147525][T10817] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
stopped /usr/sbin/sshd (pid 3947)
OK
[  400.381383][ T4365] usb 7-1: new high-speed USB device number 7 using dummy_hcd
Stopping crond: [  400.711357][T10813] loop6: detected capacity change from 0 to 256
stopped /usr/sbin/crond (pid 3927)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 3852)
[  402.500940][ T4365] usb 7-1: unable to get BOS descriptor or descriptor too short
[  402.589478][ T4365] usb 7-1: unable to read config index 0 descriptor/start: -71
[  402.641416][ T4365] usb 7-1: can't read configurations, error -71
[  402.852018][T10868] binder: 10866:10868 ioctl c0306201 200000000180 returned -14
[  403.960101][T10882] loop7: detected capacity change from 0 to 256
Stopping network: [  407.760172][T10918] tmpfs: Bad value for 'mpol'
[  408.075096][T10925] tipc: Failed to remove unknown binding: 66,0,0/0:4248405732/4248405734
[  408.191249][T10925] tipc: Failed to remove unknown binding: 66,0,0/0:4248405732/4248405733
[  408.211213][T10929] tipc: Failed to remove unknown binding: 66,0,0/0:4248405732/4248405734
[  410.116900][T10929] tipc: Failed to remove unknown binding: 66,0,0/0:4248405732/4248405733
OK
Stopping iptables: OK
Stopping system message bus: [  414.004697][   T21] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  414.383797][   T21] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  414.437046][   T21] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  414.479295][   T21] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  414.531216][   T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.579457][T10992] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  414.589328][T10980] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  415.086322][T10980] loop7: detected capacity change from 0 to 512
[  415.169701][   T21] usb 8-1: USB disconnect, device number 9
[  416.072489][T10980] EXT4-fs error (device loop7): ext4_orphan_get:1432: comm syz.7.2072: bad orphan inode 17
[  416.094765][T10980] ext4_test_bit(bit=16, block=4) = 1
[  416.159744][T10980] is_bad_inode(inode)=0
[  416.163960][T10980] NEXT_ORPHAN(inode)=0
[  416.221348][T10980] max_ino=32
[  416.229889][T10980] i_nlink=1
[  416.248592][T10980] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
done
[  416.577981][ T7941] udevd[7941]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  418.778858][T11052] device vlan2 entered promiscuous mode
[  418.844677][T11055] netlink: 'syz.1.2094': attribute type 1 has an invalid length.
[  419.260325][T11058] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  419.366947][T11058] bond7: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  419.427684][T11058] bond7: (slave vxcan1): Error -22 calling dev_set_mtu
[  419.743155][T11060] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  419.916003][T11060] bond7: (slave vxcan1): Error -22 calling dev_set_mtu
[  420.303757][T11073] sch_fq: defrate 53322 ignored.
[  420.638661][T11077] loop6: detected capacity change from 0 to 128
[  421.562941][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  421.625929][T11081] overlayfs: failed to clone upperpath
[  423.084595][T11098] loop6: detected capacity change from 0 to 1024
killall: can't kill pid 4181: No such process
killall: can't kill pid 7943: No such process
[  423.504459][T11098] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  423.699815][T11098] hfsplus: xattr searching failed
[  423.857744][   T26] audit: type=1800 audit(1779934067.740:150): pid=11098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2105" name="file1" dev="loop6" ino=20 res=0 errno=0
Stopping klogd: OK
[  425.024865][ T4289] hfsplus: b-tree write err: -5, ino 25
[  425.035971][ T4289] hfsplus: b-tree write err: -5, ino 4
[  425.077794][ T4289] hfsplus: b-tree write err: -5, ino 2
Stopping acpid: [  426.147895][T11121] loop7: detected capacity change from 0 to 32768
[  426.312321][T11121] JBD2: Ignoring recovery information on journal
[  426.671169][T11121] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  427.025785][T10395] ocfs2: Unmounting device (7,7) on (node local)
OK
[  427.547402][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2129'.
Stopping syslogd: [  427.572522][T11191] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2129'.
[  427.617216][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2129'.
[  427.671181][T11191] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2129'.
[  427.712220][T11189] netlink: 'syz.7.2126': attribute type 10 has an invalid length.
stopped /sbin/syslogd (pid 3542)
OK
[  427.828565][T11189] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  427.903708][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2132'.
[  429.994687][T11247] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2146'.
umount: can't remount debugfs read-only
[  430.411216][T11255] loop4: detected capacity change from 0 to 512
[  430.586659][T11255] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  430.604474][T11255] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  430.865955][T11263] netem: change failed
[  431.047020][T11265] netlink: 'syz.7.2152': attribute type 1 has an invalid length.
[  431.129727][T11265] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.2152'.
[  431.335545][T11276] loop7: detected capacity change from 0 to 2048
[  431.427930][T11276] UDF-fs: bad mount option "rootdir=00000000G00000000013" or missing value
[  431.600146][T11283] binder: BINDER_SET_CONTEXT_MGR already set
[  431.646676][T11283] binder: 11282:11283 ioctl 4018620d 200000004a80 returned -16
[  432.169363][T11304] netem: change failed
[  433.081603][T11311] loop7: detected capacity change from 0 to 512
[  433.088582][T11309] capability: warning: `syz.1.2167' uses deprecated v2 capabilities in a way that may be insecure
[  433.216867][T11311] EXT4-fs (loop7): Ignoring removed nobh option
[  433.227509][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2169'.
[  433.299849][T11311] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.2166: corrupted in-inode xattr
[  433.312761][T11311] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.2166: couldn't read orphan inode 15 (err -117)
[  433.325241][T11311] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobh,nombcache,resuid=0x0000000000000000,usrjquota=,barrier,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none.
[  433.457227][T11311] tipc: Started in network mode
[  433.479769][T11311] tipc: Node identity ac14142f, cluster identity 4711
[  433.521842][T11311] tipc: New replicast peer: 0.0.0.0
[  433.564935][T11311] tipc: Enabled bearer <udp:syz2>, priority 10
[  433.623263][T11323] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[  433.801689][    C0] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  434.650558][ T4365] tipc: Node number set to 2886997039
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Connection to 10.128.0.144 closed by remote host.
Sent SIGTERM to all processes
[  439.589045][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  439.595354][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
Sent SIGKILL to all processes
Requesting system poweroff
[  442.061523][ T5081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.132979][ T5081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.201305][ T5081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.260969][ T5081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.356535][ T5081] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.420515][ T5081] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.509816][ T5081] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.612520][ T5081] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.971868][ T5081] tipc: Left network mode
[  443.027164][ T5081] tipc: Disabling bearer <udp:syz2>
[  443.048650][ T5081] tipc: Left network mode
[  443.481651][T11364] kvm: exiting hardware virtualization
[  443.521455][T11364] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  443.541776][T11364] ACPI: PM: Preparing to enter system sleep state S5
[  443.555111][T11364] reboot: Power down
serialport: VM disconnected.