last executing test programs:

6m17.167963633s ago: executing program 2 (id=231):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x6, 0x7)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000)
ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1})
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r4, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0), 0x4}})
pipe2$9p(&(0x7f00000001c0), 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

6m14.696078112s ago: executing program 2 (id=240):
r0 = io_uring_setup(0xe67, &(0x7f0000000000)={0x0, 0xa14a, 0x40, 0x2, 0x3bd})
r1 = socket$rds(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2)
ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000001080)={0x98f904, 0x0, @value=0x9})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x8000)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002"], 0x18}}, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {0x0}], 0x3}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}], 0x3, 0x40000102, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000)
close_range(r0, 0xffffffffffffffff, 0x0)

6m13.762353285s ago: executing program 2 (id=242):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)

6m12.097624065s ago: executing program 2 (id=247):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc0000000000000000000000000000010000000000000000000000000000000000000004000000000a0060803b00", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00"/52], 0xb8}}, 0x4000)

6m9.880261318s ago: executing program 2 (id=250):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(r0, 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x20010, r5, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, 0x0)
fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0)

6m7.369258958s ago: executing program 2 (id=254):
recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{&(0x7f0000000180)=@ax25={{0x3, @default}, [@rose, @rose, @bcast, @rose, @rose, @rose, @remote, @null]}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000002540)=""/188, 0xbc}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x3, &(0x7f0000003640)=""/150, 0x96}, 0x1}], 0x1, 0x2, &(0x7f0000003740)={0x0, 0x989680})
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = gettid()
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8)
tkill(r3, 0x2a)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r5 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000009b80)={0x40000012})
read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020)
epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1a00048, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_lower}, {@rodir}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@rodir}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbaf}}, {@shortname_mixed}, {@fat=@check_strict}, {@utf8no}, {@shortname_mixed}]}, 0x83, 0x350, &(0x7f0000001f80)="$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")
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x459, r7, 0x4}, 0x38)

5m52.195365891s ago: executing program 32 (id=254):
recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{&(0x7f0000000180)=@ax25={{0x3, @default}, [@rose, @rose, @bcast, @rose, @rose, @rose, @remote, @null]}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000002540)=""/188, 0xbc}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x3, &(0x7f0000003640)=""/150, 0x96}, 0x1}], 0x1, 0x2, &(0x7f0000003740)={0x0, 0x989680})
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = gettid()
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8)
tkill(r3, 0x2a)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r5 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000009b80)={0x40000012})
read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020)
epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1a00048, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_lower}, {@rodir}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@rodir}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbaf}}, {@shortname_mixed}, {@fat=@check_strict}, {@utf8no}, {@shortname_mixed}]}, 0x83, 0x350, &(0x7f0000001f80)="$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")
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x459, r7, 0x4}, 0x38)

30.341390867s ago: executing program 3 (id=910):
socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
fallocate(r1, 0x0, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r7, 0x303, 0x70bd28, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ptrace$setregset(0x4205, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)

26.014604888s ago: executing program 4 (id=921):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b40, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f00000001c0))
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
fcntl$lock(r5, 0x5, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0xfffffffffffffffa})
add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r6 = socket(0x18, 0x0, 0x1)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})
keyctl$session_to_parent(0x12)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r8=>0x0})
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

23.003576687s ago: executing program 4 (id=923):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/keys\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000002080)=""/108, 0x6c, 0x100000000000055)
pselect6(0x40, &(0x7f0000000040)={0x8, 0x6, 0x0, 0x5, 0x6, 0x0, 0x5, 0x2}, &(0x7f0000000080)={0x8, 0x2, 0x100000000, 0x6, 0x1ff, 0x4, 0x4000000000, 0x9}, &(0x7f00000000c0)={0x7, 0x401, 0x2, 0x6, 0x6, 0xfffff00000000000, 0xd, 0x9}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8})
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4064840)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000)
syz_open_dev$usbfs(0x0, 0x205, 0x8401)
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6)
r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r6, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8j<K\x14B\xbcG\xf8\x02Q\xce\xd6\xfdi\x93\xbaT\xe3f\x01\x1c\b8jC5bi\x88h\x18\x92\xad\x16\xe0\xd2M[\x1f\xe3|\xc7\xd7\x06\x97\xba\xf2\x98\xe4G\xf9\xae?\xdaO\x94fn\xc1\x0e\xc4\xcei\xf4\xa8\xd7\xe5\xf9\x9f\x01W\xf5\xd2\xdc\xc4\xfd\xd9\x85\x15\x06\xef\x11\xef\t*\xc6\x88\xadxh\a\xa7\x9b\xd8;\xd6\x85K\xc6\vm\x10\x94\xe4\x94uk\x11\xba\xaaL\b8\xac4\xd3w\x1cP\xf8\x8bG(<\xe6\xd0\xb4\x0e\xbcQ\xc2\xc3\x030\xbc\xab\x8d\xe4\x05\x05E\bK\xd2\xf3\xb0\xbf1\xdc\xc1\x03t\xff\x94\x17', 0x3a, '/debus/usb/00#/00#\x00\x00\x00\'\xcc\xa0Xf\x88TJ\x00\x00\x00\x00\xf1\xbaqCn\xb5]3u\x0f\xf6v\xf6\xde\xe60\xc2\xc4\xd1K\xef\xffZ\a%xie\x1f\x00\x84\x00\x00\x00\x00\x00\x00\x00\x04\xeb\x94b\xb3*\xe6\x97\xd5\x98\x17~\x91\xb6E`\xf5R\xd7\x1aT\r\x8b\x9b\xbeL\\c\x15CS#LsK\xa4\xc7_\xc7\xef\xa9\xf7\x8a\x12\xcd\xc2\xac\x89N\xbf>N\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"', 0x3a, './file0'}, 0x2b0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000)

17.899938846s ago: executing program 0 (id=927):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x803, 0x0)
connect$netlink(r1, &(0x7f0000000280)=@unspec, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x401}}]}, 0x154}}, 0x24000058)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000002540)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002500)={&(0x7f0000002300)={0x1c8, r8, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd43}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @remote, 0x8001}}}}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x126}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x368}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x31a}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8d6}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4850}, 0x8000000)
fstat(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r10, &(0x7f0000000240)={0x2020, 0x0, <r11=>0x0, <r12=>0x0, <r13=>0x0}, 0x2020)
write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0x0, r11, {0x4000000000007, 0x0, 0x8, 0xe, 0x0, 0x1, {0x2000000002, 0x0, 0x6, 0x5, 0x8, 0x7, 0x7, 0x3, 0x7ff, 0x2000, 0x7, r12, r13, 0x5, 0xfff}}}, 0x90)
setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000300)={r0, r9, r13}, 0xc)
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)

16.124099007s ago: executing program 0 (id=929):
socket(0x10, 0x3, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x440500, 0x30)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
preadv2(r1, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0xfdef}], 0x1, 0x7fc, 0xffffffff, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000001a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ac4010000030a01020000000000000000000000060900010073797a300000000008000b400000000308000b4000000003fa54e6966dbd981375785dc3b699e042234555a4268e1f38b91f0b41a3ede1950d474773d5efdf84f1251c3ecd6a5704fb590aab198e0a84a655f75e2f44bcd1e221cf274c9506da1ba23b88c8505e549d8deea93fae7ec7600d9e372e72357effc2a84ff1151b84e3bcdd648808cf6f13ee607b550bd38bb8794ae3d34f7b95b1f1e459efa6dcca3d943a199c020000004b74e9c670ef7715be17db888c8ba80134f5ef863a2094b798dc59ecf4eb17c3c086b6afb4cf23566a58e537ce9c965d8e887c6d2ed769edb007509ee204f49826434c264d635cc4570e781d4dfc158716419af2aba436b2a45d3f22f4007c0008800c00014000000000000000090c000240000000ffdf0100010c000140fffffffffffffff80c00024000000000000000040c00014000000000000000030c00014000000000000000060c0002400000000000000cad4fd7014000000000000000080c00024000000000000100010c000240000000000000000d1c00048008000240037251cf0800014000000000080002402f9ce1fb28000000140a010400000000000000000a00000308000340000000060900020073797a300000000038000000160a05000000000000000000050000000900020073797a30000000000900020073797a32000000000900010073797a31000000001c000000080a010100000000000000000300000408000a4000000001140000001100010000000000000000000300000abbc578a4ff9c2db923032cb72a32456ac3d758b3c33aff7930bb49a7a0455dd039d863ce8da9ad45806f0207bd896398ca2f4298ffa729ea3410032c1266778a985d2fefa97fcad142f1916cb94d3ce1f2ab1f98dd72f9a3cf6094056d62e31063b369260093a483c382b53e540e80a2ba"], 0x268}, 0x1, 0x0, 0x0, 0xc880}, 0x200000c4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x64}}, 0x0)
socket$kcm(0x29, 0x7, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
fchownat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x58}, 0x28)
syz_io_uring_setup(0x4c5b, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
write(r4, &(0x7f0000000300)='sub:evt:mod:', 0xc)

15.939646131s ago: executing program 1 (id=930):
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)

15.763348005s ago: executing program 4 (id=931):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)

15.697947397s ago: executing program 5 (id=932):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SVE_SET_VL(0x32, 0x212f0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setreuid(0x0, 0xee01)
pipe2(&(0x7f0000000340), 0x90880)
setuid(0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
fanotify_mark(0xffffffffffffffff, 0x61, 0x40001002, 0xffffffffffffffff, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, 0x0, 0x0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='user.incfs.size\x00', &(0x7f0000000240)=""/178, 0xb2)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)=@random={'btrfs.', 'trusted.overlay.origin\x00'})

15.55589544s ago: executing program 1 (id=933):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b40, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f00000001c0))
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
fcntl$lock(r5, 0x5, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0xfffffffffffffffa})
add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r6 = socket(0x18, 0x0, 0x1)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})
keyctl$session_to_parent(0x12)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r8=>0x0})
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

15.455465492s ago: executing program 3 (id=934):
syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000200), 0x5, 0x180)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
open(&(0x7f00000001c0)='.\x00', 0x0, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$inet(0x2, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
io_uring_setup(0x178e, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000340)=ANY=[@ANYBLOB="1b98154200000900000086068e0d810982a4771b05881f2f756eda748c661e62680450ca331fb099f169a2742b233c2f6b2b6eed7ed6350d8250c34ce1b6b3800ddd6628bef11eac93fb884180d786"])
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff2e)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r1 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0)
creat(&(0x7f00000000c0)='./bus\x00', 0x102)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r4], 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x143041, 0x0)
utime(&(0x7f0000000140)='./file0/file0\x00', 0x0)

15.454905402s ago: executing program 0 (id=935):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)

13.703116092s ago: executing program 5 (id=936):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f0000000040)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000019080), 0x109100, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r5, 0xee01, 0x0)
keyctl$setperm(0x5, r5, 0x30925)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r6, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0xd, 0xffffffeffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0x3, 0xffffff7e}}, 0xe4)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0)

13.594291145s ago: executing program 0 (id=937):
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
time(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000f00)=""/102400, 0x19000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002882, 0x0)
dup(0xffffffffffffffff)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000100)=0xdfe1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20018085)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
r4 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x32, 0x0, &(0x7f00000000c0)="7a7f822c2aff88df53ef2a2d86dd5367f5fdfe81b4a31ec9fa80f7d278c24752114f5ac100931fc74757b5fe31fdec5ab57b", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)

13.570458706s ago: executing program 1 (id=938):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}}], 0x1c)
r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000100)=0x1000001, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="2bcb3102827b465534dcdbc7bc44604f63706573657420"], 0x8)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48)
r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r7, 0x5, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r8, 0x4)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
r10 = syz_open_dev$vim2m(0x0, 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000000)={0x26, 0x2, 0x3, "a677c17a067fd75f4600000069aece62bd255776000000000000004000", 0x31324d59})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x7ff, 0x5d, &(0x7f0000000340)=""/93, 0x41000, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x5, 0x5, 0x5}, 0x10, 0xac4d, r2, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
read$FUSE(r9, &(0x7f0000003d00)={0x2020}, 0x2020)
fsmount(r1, 0x0, 0x30)

10.172781174s ago: executing program 1 (id=939):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc)
r1 = dup(r0)
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110)
r2 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100)
ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x81, 0xfffffff7, 0x1, 0x100, 0xdbd})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r7, 0x400, 0x1)
truncate(&(0x7f0000000100)='./file1\x00', 0x7)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
close_range(r5, 0xffffffffffffffff, 0x2000000000000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)

10.161783555s ago: executing program 4 (id=940):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b40, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f00000001c0))
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
fcntl$lock(r5, 0x5, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0xfffffffffffffffa})
add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r6 = socket(0x18, 0x0, 0x1)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})
keyctl$session_to_parent(0x12)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r8=>0x0})
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

9.668220836s ago: executing program 0 (id=941):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmmsg(0xffffffffffffffff, &(0x7f0000003380), 0x0, 0x100, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x6800c101}, 0x40000)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c)
dup(r4)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
dup2(r3, r3)
sendmmsg$inet6(r7, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3e07b7b9}, 0x1c, 0x0}}], 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x9, 0x4, 0xffffffff, 0xe7, 0xd]}, 0x0)
recvmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x40000cb, 0x12141, 0x0)

9.642524247s ago: executing program 3 (id=942):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)

8.575237082s ago: executing program 5 (id=943):
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)

8.103684693s ago: executing program 4 (id=944):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x64, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x4}, @TCA_MQPRIO_MODE={0x6}]}}}]}, 0x94}}, 0x0)
r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08029078e599fd316000000000"], 0x0)
ioctl$XFS_IOC_GOINGDOWN(r3, 0x8004587d, &(0x7f0000000000)=0x7fffffff)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c626172726965722c6e6f626172726965722c6e6f626172726965722c6e6f626172726965722c706172743d307830303030303030303030303030301432e69e662c747970653d59ed131f2c6e6c733d63703933322c00848eaaddd079c76fd36bf0c60356f7e57cc3f41a16a91d1fd471573452234587622f881f05a186982dac6bf19e967a2aba2dcacd014001718700aced5a920fa2c5a9b29ceba32bd2bd9fd7c993f72d699b2cb3ed"], 0xfe, 0x5e5, &(0x7f0000001080)="$eJzs3UFvHGcZB/D/bGLHDlK6SZOmICSscgA1IrG9kQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFuv0I5mDMHTihIOXDmKxj1iODum9HMzno3ydZZJ8a7Cb+fNPs+s+/MO8/7aHYys1a0Af5vrX6QmUfzyeqV97bL9d2dVmd3p3W3Hyc5k6SRzCUpyrf/kuTL5EF6S77e7xhqn1J8vnpz/eFnl3trc/VSbV8ctt94DnJp9nKt2uMab/mFxxvMcCHJhbqFidvv++fI7hf8XAIA06xITo16v5mcrW/Wy+eA3l1x7x77pfZg0gkAAADACXhtL3vZzrlJ5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvk/r3/4t6afTjhRT93/+frd9LHb/UHk06AQAAAAAAAAA4Bt/ay162c66/vl9Uf/N/q1q5WL1+LR9nK+1s5mq2s5ZuutnMUpLm0ECz22vd7ubSGHsuj9xz+WTmCwAAAAAAAACvqN9ndfD3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAZFcqrXVMvFftxM43SSuSSz5XYPkof9+GX2aNIJAAAAwAl4bS972c65/vp+UT3zv1E998/l49xLNxvpppN2blXfBfSe+hu7O63O7k7rbrk8Pe5P/nOkNKoR0/vuYfSRF6stLh3ssZqf51e5koW8n81s5NdZSzftLOTdKlpLkWb97UWzn+fofH/82Nr7z8r1zSqT+dzORpXb1dzMR+nkVhrVHKptDj/i78rqFD+qjVmjW3VbzugXdTsdmlVFZg4qsljXvqzG+cMrccTz5MkjLaVx8B3UxeOr+Zl+cLZuy1q/O801n1keOvveOLwSyeLyv++vd+7dWb+9dWV6pvScnjwnWkOVuHzkSuzv7//2xKdwTGbravSuoke7Wr5V7XsuG/llPsqttHMji7mRlVxPKyv5QVaG6nppjM9a42jXt29/tw5mkvysbqdDWdfzQ3UdvtI1q77hdwZVunD8/wqc/kYdlCfrO1N3RTr/xLW5X4nXD6/EH/fL163OvTub62v3xzzed+q2rMBPn68Sp4++yzjK8+XCwfCPnx1l3+sj+5aqvosHfY2n+i4d9D3rkzpb38M9PdJy1Xd5ZF+r6ntzqG/UXQ4AU+/s22dn5/81/4/5L+b/ML8+/97cO2dunPnmbGb+fvqvp/7c+FPjh8Xb+SK/GTz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz2/rk0/vrHU67U2BYPLBXJJxN+7/7tOkc35FgwlfmID/uWvdu/evbX3y6fc27q592P6wfe/60sry9euLK9+/ce32Rqe92HuddJoAwDEa3PRPOhMAAAAAAAAAAAAAAOCrnMR/J570HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFfb6geZeZQiS4tXF8v13Z1Wp1z68WDLuSRFGfwtyZfJg/SWNIeGK77qOMXnqzfXH352eTDWXH/74rD9xvNYLo0ncnrR8ZZfeLzBDBeSXKhbmLj/BgAA//9gDAG4")
getdents(0xffffffffffffffff, &(0x7f0000000900)=""/194, 0xc2)
truncate(0x0, 0xae)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0xa9)
syz_io_uring_setup(0x121e, &(0x7f0000000bc0)={0x0, 0x5b46, 0x8, 0x0, 0xef}, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0))
io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1)
r5 = socket$unix(0x1, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
keyctl$clear(0x11, 0xfffffffffffffffd)
listen(r5, 0x58b)
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
listen(r5, 0x8)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc)
bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
write(r6, &(0x7f0000002080)='x', 0x1)
pwrite64(r4, &(0x7f0000000b80)="b6", 0x1, 0x260000)
ioctl$NILFS_IOCTL_GET_SUINFO(r3, 0x80186e84, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x10, 0x5, 0x3})
write$char_usb(r4, &(0x7f0000000180)="84be1f448e95d7929b72416eb8027d6cd8338667d94f10257a5f51", 0x1b)

7.866125178s ago: executing program 3 (id=945):
socket(0x10, 0x3, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x440500, 0x30)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
preadv2(r1, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0xfdef}], 0x1, 0x7fc, 0xffffffff, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0xc880}, 0x200000c4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x64}}, 0x0)
socket$kcm(0x29, 0x7, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
fchownat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x58}, 0x28)
syz_io_uring_setup(0x4c5b, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
write(r4, &(0x7f0000000300)='sub:evt:mod:', 0xc)

7.674450273s ago: executing program 5 (id=946):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='sele', 0x4)
write(r1, &(0x7f0000000100), 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000500)={{0x3, 0x0, 0x0, 0x4, 'syz0\x00', 0x7}, 0x4, 0x3, 0x4, 0x0, 0x0, 0x9, 'syz1\x00', 0x0})
socket$kcm(0x21, 0x2, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
epoll_create1(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000011c0)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x14)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, r4, 0x701, 0x70bd2b, 0x0, {0x19}}, 0x14}, 0x1, 0x0, 0x0, 0x20002080}, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8], 0x30}, 0x1, 0xff07, 0x0, 0x40000}, 0x2000000)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x4001af84, 0x0)
syz_usbip_server_init(0x1)

7.32782713s ago: executing program 3 (id=947):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x2, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r5 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x4, @loopback, 0x1c7a0000}}}, 0x30)
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_misc(r9, &(0x7f0000000980), 0xfdef)
splice(r6, 0x0, r9, 0x0, 0x80, 0x4)
r10 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040)
ioctl$VIDIOC_SUBDEV_S_FMT(r10, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}})
read(r6, &(0x7f0000000800)=""/217, 0xd9)
r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000200)="fd5bf16c0e5d5c9bd297917dcaea15508efea387286b18fa50efda902e5488efcd808bb2e7957e543c7fed831dcd245401893e1f")
r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r12, r11, &(0x7f00000000c0)=0x58, 0x5)
ioctl$NBD_SET_SIZE_BLOCKS(r11, 0xab07, 0x51000000)
read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x2020)
r13 = socket(0x11, 0x2, 0x10001)
ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000002c0)=@ethtool_coalesce={0x1, 0xd76c, 0x0, 0x4b, 0x9, 0x9, 0x8, 0x20c, 0x8001, 0x7, 0x40, 0xffffffc0, 0x0, 0x7, 0x5, 0x2, 0x3, 0xcc14d81, 0x5, 0x8, 0x80, 0xfffff000, 0x5}})
write$UHID_SET_REPORT_REPLY(r7, &(0x7f0000000380)=ANY=[], 0x45)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@can={{0x0, 0x1, 0x1, 0x1}, 0x3, 0x6, 0x0, 0x0, "c9095300"}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811)

4.672305742s ago: executing program 0 (id=948):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80)
ioctl$I2C_PEC(r3, 0x708, 0xb8f7)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x7, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xaaa9, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x4}, 0x94)
init_module(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/2456], 0xa99, &(0x7f0000001800)='GPL\x00')
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000000c0)={@mcast2}, 0x14)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
process_vm_writev(r0, &(0x7f0000002840)=[{&(0x7f0000000300)=""/242, 0xf2}, {&(0x7f0000000400)=""/12, 0xc}, {&(0x7f0000000440)=""/6, 0x6}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x4, &(0x7f0000002ac0)=[{&(0x7f0000002880)=""/106, 0x6a}, {&(0x7f0000002900)}, {&(0x7f0000002940)=""/126, 0x7e}, {&(0x7f00000029c0)=""/83, 0x53}, {&(0x7f0000002a40)=""/79, 0x4f}], 0x5, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, &(0x7f0000000940)="7d508242208c03888645efd3ba3ca66c54fc8d8c6b", 0x0, 0x1}, 0x50)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840)

4.599725594s ago: executing program 4 (id=949):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8)
r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r4, &(0x7f0000000040)={0x1a, 0x8, 0x0, 0x0, 0xf7, 0x42}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
listen(r4, 0x2)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = fanotify_init(0x8, 0x2)
write$P9_RSYMLINK(r8, &(0x7f0000000340)={0x14, 0x11, 0x0, {0x0, 0x4}}, 0x14)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004010)

4.485020897s ago: executing program 5 (id=950):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)

4.474002886s ago: executing program 1 (id=951):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x119000)
syz_emit_ethernet(0xaf, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00020008001086dd60122d9200793afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000b80aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202000100000005000000906d26efe393000000"], 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x88281, 0x126)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x4, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae41600005fea0c00", [0xfffffffffffffce8, 0xa]}})
ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000dc0)={0xd7, 0xf, &(0x7f00000009c0)="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"})
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x2000c000)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff0100"/28, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/444], 0x1d0}}, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000004780)={{0xffffffffffffffff, &(0x7f00000000c0)='&:&6[\x00', 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0, 0x0})
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r9=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000002c0)={r9, 0x6, 0x2, "a49f"}, 0xa)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000500)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="3bcf095f961ba17e0e8da144a45098358094df6da1ed98b3dc707fa6a6c241485c5f99a38eedfb2eb1bbb1868918829329dd503389601935c2a9c5ebd1a9af5172e5a85f4e2c6116f3d4087e3e85225e6592775ce607201e0fd899d8f9bb90b82a874a3d4bc84d39f72513ac0da5537c2597f434b2d7a9fe2d0c689e24eab7d55bf75285538469f964be43fc2e3ca78dbd25f271cf405d16722e66bc991a290e53c1a712e41fc74cfd903ae97a63f907726850931271fde0024d7e8a9bf85834e16501f7a78695a8eac4671d552d586f28f6175178e1c5bf1ccfb17fb6fdf8b0bd43"], 0x3, 0x23a, &(0x7f00000002c0)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x0, 0x44, 0x0, 0x0, 0x400000}, 0x28)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

923.394849ms ago: executing program 5 (id=952):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback, 0xffffffffffffffff, 0x2f, 0x2020, 0x4}, 0x20)
gettid()
writev(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file1\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/314], 0x1, 0x26f, &(0x7f0000000300)="$eJzs3c9qE1EUB+DTNMmEIti1uBhw46r4Z+M2SAUxIESy0JWB6qYVYbqJrvIYPoELH8nH6Kro4gqd2LQ1BrEdr02+D8oc+E0nZ3Jhbhb3Jq9vv9vfe3/4Nn39FL1eGe2IaUoR29GKzahtzI6tk7obZ00DALhuhg/H/dw98Pc+/8E5VdUfdyKi+CUZfWmkKQAAAAAAAAAAABq3aP1/HF9q/X+3+a4BgMsYDm/kboGGVVV/vDX7/Hae9f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAPscp3UxL/nL3BwBcPfM/AKwf8z8ArB/zPwCsnxcvXz3rDwa7w7LsRRxNJ6PJqD7W+ZOng9175Ynt+X8dTSajzdP8fp2X5/NObM3yBwvzbty9U+fl91Q+fj64kBex1/ztAwAAAAAAAAAAAAAAAAAAwH9hpzy1cH//ThG/yevqzPcDXNi/345b7X92GwAAAAAAAAAAAAAAAAAAAHCtHX74uD8+OHhT5Sq+pVrTr1XE8nOKyPcmdGaDcUUXjEeZx3RZsdHYlSPjCK5g8fMJ0cr3cAIAAAAAAAAAAAAAAAAAgDUz3/SbuxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyGf++//NFRExTbXctwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACssB8BAAD//0gem18=")
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = gettid()
tkill(r5, 0x2a)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
epoll_create(0x2)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)

93.923828ms ago: executing program 3 (id=953):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
dup(r1)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
pwrite64$ublk_bdev(r0, &(0x7f0000000180), 0x0, 0x7f)
ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000400))
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0)
pipe2(&(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x80000)
read$FUSE(r4, &(0x7f00000003c0)={0x2020}, 0x2020)
setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180)=0x7, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000000))
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)

0s ago: executing program 1 (id=954):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b40, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f00000001c0))
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
fcntl$lock(r5, 0x5, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0xfffffffffffffffa})
add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r6 = socket(0x18, 0x0, 0x1)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})
keyctl$session_to_parent(0x12)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r8=>0x0})
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

kernel console output (not intermixed with test programs):

dge_slave_1: link becomes ready
[   84.243864][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.251250][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.259180][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.268318][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.279905][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.288986][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.299510][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   84.308639][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   84.318009][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   84.330883][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   84.340285][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.349816][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   84.358022][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   84.372043][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.383699][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.418661][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.426760][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   84.446142][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.461254][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.470383][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   84.487720][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.504353][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.514958][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.523658][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.539665][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.547960][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.560722][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   84.570914][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   84.584318][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.610294][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   84.618880][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   84.628166][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.637819][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.647015][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.694343][ T4287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.712245][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.741432][ T4276] device veth0_vlan entered promiscuous mode
[   84.762157][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.775429][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.784679][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.815993][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.828706][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.845394][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.854619][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.869563][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.917885][ T4276] device veth1_vlan entered promiscuous mode
[   84.942251][   T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.952339][   T79] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.960327][   T79] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.986396][ T4272] device veth0_vlan entered promiscuous mode
[   85.013288][ T4272] device veth1_vlan entered promiscuous mode
[   85.037312][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   85.057068][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.080146][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.096424][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   85.112128][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.162303][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.176966][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.195802][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   85.229918][ T4272] device veth0_macvtap entered promiscuous mode
[   85.260808][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.270731][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.281306][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.292933][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.302824][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.312170][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.327932][ T4272] device veth1_macvtap entered promiscuous mode
[   85.337675][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.347743][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.363415][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.391569][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.417137][ T4276] device veth0_macvtap entered promiscuous mode
[   85.438563][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.453488][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.473365][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.484204][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.501115][ T4276] device veth1_macvtap entered promiscuous mode
[   85.518943][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.530949][ T4282] device veth0_vlan entered promiscuous mode
[   85.548858][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.563191][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.574431][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.588080][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.601924][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.648948][ T4282] device veth1_vlan entered promiscuous mode
[   85.668094][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   85.677452][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.688055][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.699124][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.716110][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.723926][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.735224][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.747308][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.757155][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.765394][ T4283] Bluetooth: hci2: command 0x040f tx timeout
[   85.765431][ T4283] Bluetooth: hci1: command 0x040f tx timeout
[   85.765534][ T4283] Bluetooth: hci3: command 0x040f tx timeout
[   85.765563][ T4283] Bluetooth: hci4: command 0x040f tx timeout
[   85.775017][ T4283] Bluetooth: hci0: command 0x040f tx timeout
[   85.780824][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.807555][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.817677][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.844382][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.854413][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.864087][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.874304][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.896537][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.913293][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.926244][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.939490][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.948519][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.957497][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.967265][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.994653][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   86.003996][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.016084][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.103677][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.118539][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.134239][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.145390][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.156500][ T4282] device veth0_macvtap entered promiscuous mode
[   86.217269][ T4282] device veth1_macvtap entered promiscuous mode
[   86.239987][ T4287] device veth0_vlan entered promiscuous mode
[   86.254698][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.270926][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   86.279902][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.295488][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.358581][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.368303][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.384681][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.395820][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.421539][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.441305][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.442170][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.459983][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.470458][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.481136][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.493120][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.513076][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.521645][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.533330][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.543396][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.552746][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.562324][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.599283][ T4287] device veth1_vlan entered promiscuous mode
[   86.611981][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.622577][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.634165][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.646332][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.661555][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.695283][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.704371][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.713659][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.722233][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.731629][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.740564][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.755184][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.755884][ T4282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.763125][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.781081][ T4282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.789970][ T4282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.799880][ T4282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.816131][ T4278] device veth0_vlan entered promiscuous mode
[   86.829197][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.837129][ T4278] device veth1_vlan entered promiscuous mode
[   86.844346][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.853131][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   86.855660][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.862610][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   86.878142][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.904396][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.917993][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.943415][ T4278] device veth0_macvtap entered promiscuous mode
[   86.961281][   T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.971258][   T22] cfg80211: failed to load regulatory.db
[   86.996450][   T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.030219][ T4278] device veth1_macvtap entered promiscuous mode
[   87.039880][ T4287] device veth0_macvtap entered promiscuous mode
[   87.069999][   T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.086320][   T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.094650][   T79] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   87.209142][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.244894][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.275324][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.292003][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.309020][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.324402][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.351497][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.364818][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   87.469233][ T4287] device veth1_macvtap entered promiscuous mode
[   87.754716][ T4370] Zero length message leads to an empty skb
[   87.846242][   T49] Bluetooth: hci0: command 0x0419 tx timeout
[   87.852454][   T49] Bluetooth: hci4: command 0x0419 tx timeout
[   87.855011][ T4283] Bluetooth: hci3: command 0x0419 tx timeout
[   87.859272][   T49] Bluetooth: hci1: command 0x0419 tx timeout
[   87.864992][ T4289] Bluetooth: hci2: command 0x0419 tx timeout
[   87.878520][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   87.904079][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.913378][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.925349][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.941698][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.969416][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.980762][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.991290][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.003457][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.016209][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.029767][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.061509][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.074496][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.086411][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.099156][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.115111][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.129257][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.171165][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.225068][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.257829][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   88.276331][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   88.304194][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.325946][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.345564][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.350204][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.353504][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.362813][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.432148][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.466197][ T4376] ALSA: mixer_oss: invalid OSS volume ''
[   90.721639][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.741355][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   90.778613][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.796501][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.857636][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.894894][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.923750][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.939561][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.949924][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.965129][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.987470][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.012879][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   91.039101][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   91.081931][ T4287] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.108657][ T4287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.126631][ T4287] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.135835][ T4287] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.177036][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.237701][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.288992][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   91.482790][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.557506][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.602166][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   91.680935][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.726175][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.772047][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   91.815701][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.841304][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.897385][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   91.949708][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.018168][ T4392] futex_wake_op: syz.1.8 tries to shift op by 144; fix this program
[   92.101798][ T4392] loop1: detected capacity change from 0 to 256
[   92.180092][ T4392] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   92.361368][   T26] audit: type=1800 audit(1788991402.149:2): pid=4392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8" name="file1" dev="loop1" ino=1048592 res=0 errno=0
[   92.438710][ T4392] syz.1.8: attempt to access beyond end of device
[   92.438710][ T4392] loop1: rw=0, sector=184, nr_sectors = 120 limit=256
[   92.537579][ T4391] syz.1.8: attempt to access beyond end of device
[   92.537579][ T4391] loop1: rw=524288, sector=5352, nr_sectors = 256 limit=256
[   92.537698][ T4392] syz.1.8: attempt to access beyond end of device
[   92.537698][ T4392] loop1: rw=524288, sector=664, nr_sectors = 256 limit=256
[   92.552832][ T4391] syz.1.8: attempt to access beyond end of device
[   92.552832][ T4391] loop1: rw=0, sector=5480, nr_sectors = 8 limit=256
[   92.566945][ T4392] syz.1.8: attempt to access beyond end of device
[   92.566945][ T4392] loop1: rw=524288, sector=920, nr_sectors = 256 limit=256
[   92.579124][ T4391] syz.1.8: attempt to access beyond end of device
[   92.579124][ T4391] loop1: rw=0, sector=5480, nr_sectors = 8 limit=256
[   92.592871][ T4392] syz.1.8: attempt to access beyond end of device
[   92.592871][ T4392] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[   92.606276][ T4391] syz.1.8: attempt to access beyond end of device
[   92.606276][ T4391] loop1: rw=0, sector=5480, nr_sectors = 8 limit=256
[   92.619090][ T4392] syz.1.8: attempt to access beyond end of device
[   92.619090][ T4392] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[   92.632193][ T4391] syz.1.8: attempt to access beyond end of device
[   92.632193][ T4391] loop1: rw=0, sector=5480, nr_sectors = 8 limit=256
[   92.765052][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.914588][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   96.439145][ T4419] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[   98.918941][ T4433] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   99.514975][ T4430] netlink: 'syz.3.11': attribute type 10 has an invalid length.
[   99.698914][ T4425] Process accounting resumed
[   99.746118][ T4430] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  103.404798][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  103.424810][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  103.434801][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  103.444802][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  103.454797][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  103.464808][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  103.474803][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  103.484804][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  103.494805][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  104.337712][ T4455] sched: RT throttling activated
[  104.795006][ T4464] Cannot find del_set index 4 as target
[  104.871230][ T4467] overlayfs: conflicting options: nfs_export=on,index=off
[  105.270566][ T4458] comedi comedi1: Minor 4 specified more than once!
[  110.166066][ T4502] null_blk: zone_size must be power-of-two
[  110.535264][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'.
[  110.627594][ T4506] loop2: detected capacity change from 0 to 128
[  110.676978][ T4506] FAT-fs (loop2): Directory bread(block 414) failed
[  110.684280][ T4506] FAT-fs (loop2): Directory bread(block 415) failed
[  110.691154][ T4506] FAT-fs (loop2): Directory bread(block 416) failed
[  110.698067][ T4506] FAT-fs (loop2): Directory bread(block 417) failed
[  110.704916][ T4506] FAT-fs (loop2): Directory bread(block 418) failed
[  110.711670][ T4506] FAT-fs (loop2): Directory bread(block 419) failed
[  110.718544][ T4506] FAT-fs (loop2): Directory bread(block 420) failed
[  110.725392][ T4506] FAT-fs (loop2): Directory bread(block 421) failed
[  110.770199][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888055c66000: rx timeout, send abort
[  113.152005][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'.
[  113.175572][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'.
[  113.186256][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'.
[  113.197551][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'.
[  113.211136][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'.
[  113.874994][ T4528] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  116.515721][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  119.149595][ T4554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.36'.
[  120.005922][ T4562] loop0: detected capacity change from 0 to 512
[  120.032963][ T4562] FAT-fs (loop0): Directory bread(block 199916) failed
[  120.040276][ T4562] FAT-fs (loop0): Directory bread(block 199917) failed
[  120.047608][ T4562] FAT-fs (loop0): Directory bread(block 199918) failed
[  120.054685][ T4562] FAT-fs (loop0): Directory bread(block 199919) failed
[  120.061934][ T4562] FAT-fs (loop0): Directory bread(block 199920) failed
[  120.069476][ T4562] FAT-fs (loop0): Directory bread(block 199921) failed
[  120.076575][ T4562] FAT-fs (loop0): Directory bread(block 199922) failed
[  120.083648][ T4562] FAT-fs (loop0): Directory bread(block 199923) failed
[  120.205212][ T4562] FAT-fs (loop0): FAT read failed (blocknr 128)
[  124.768955][ T4589] loop1: detected capacity change from 0 to 1024
[  126.797995][   T26] audit: type=1326 audit(1788991436.639:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.2.44" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebff9e159 code=0x7ffc0000
[  126.941236][ T4600] Bluetooth: MGMT ver 1.22
[  128.705987][   T26] audit: type=1326 audit(1788991436.669:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.2.44" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebff9e159 code=0x7ffc0000
[  128.790354][   T26] audit: type=1326 audit(1788991436.669:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.2.44" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebff9e159 code=0x7ffc0000
[  128.814844][   T26] audit: type=1326 audit(1788991436.669:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.2.44" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ebff5e98e code=0x7ffc0000
[  128.839080][   T26] audit: type=1326 audit(1788991436.669:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.2.44" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebff9e159 code=0x7ffc0000
[  128.863511][   T26] audit: type=1326 audit(1788991436.819:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.2.44" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8ebff9e159 code=0x7ffc0000
[  128.895553][ T4591] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[  128.907954][   T26] audit: type=1326 audit(1788991438.599:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.2.44" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebff9e159 code=0x7ffc0000
[  128.996795][   T26] audit: type=1326 audit(1788991438.599:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.2.44" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8ebff9e159 code=0x7ffc0000
[  129.045594][ T4592] sctp: failed to load transform for md5: -2
[  129.125141][   T26] audit: type=1326 audit(1788991438.599:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.2.44" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebff9e159 code=0x7ffc0000
[  130.182190][   T26] audit: type=1326 audit(1788991438.599:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.2.44" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebff9e159 code=0x7ffc0000
[  132.948948][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'.
[  133.058521][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  133.065319][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  135.246774][ T4637] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2
[  136.515639][ T4398] Bluetooth: hci5: Frame reassembly failed (-84)
[  137.294921][ T4289] Bluetooth: hci5: command 0x1003 tx timeout
[  137.294950][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  137.347890][ T4642] netlink: 'syz.3.54': attribute type 8 has an invalid length.
[  138.514912][ T4647] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0
[  138.828621][ T4651] =======================================================
[  138.828621][ T4651] WARNING: The mand mount option has been deprecated and
[  138.828621][ T4651]          and is ignored by this kernel. Remove the mand
[  138.828621][ T4651]          option from the mount to silence this warning.
[  138.828621][ T4651] =======================================================
[  138.891222][ T4651] 9pnet_fd: Insufficient options for proto=fd
[  141.152303][ T4678] loop1: detected capacity change from 0 to 16
[  141.264481][ T4679] loop0: detected capacity change from 0 to 512
[  141.282287][ T4679] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  142.942779][ T4679] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  142.961239][ T4679] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.63: bg 0: block 248: padding at end of block bitmap is not set
[  142.981557][ T4679] __quota_error: 28 callbacks suppressed
[  142.981608][ T4679] Quota error (device loop0): write_blk: dquota write failed
[  142.995486][ T4679] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  143.005754][ T4679] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.63: Failed to acquire dquot type 1
[  143.046133][ T4679] EXT4-fs (loop0): 1 truncate cleaned up
[  143.052008][ T4679] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  143.096329][ T4678] erofs: (device loop1): mounted with root inode @ nid 36.
[  144.010460][ T4691] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46
[  144.021418][ T4691] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 46
[  144.627183][ T4282] EXT4-fs (loop0): unmounting filesystem.
[  145.155053][ T4703] process 'syz.3.68' launched './file2' with NULL argv: empty string added
[  146.519588][ T4283] Bluetooth: Wrong link type (-22)
[  148.145288][ T4712] netlink: 64 bytes leftover after parsing attributes in process `syz.0.67'.
[  150.677426][ T4731] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  154.025637][ T4722] sctp: failed to load transform for md5: -2
[  154.757006][ T4739] bio_check_eod: 2748 callbacks suppressed
[  154.757021][ T4739] syz.1.77: attempt to access beyond end of device
[  154.757021][ T4739] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  155.068026][ T4752] comedi comedi0: 8255: I/O port conflict (0x5,4)
[  155.074708][ T4752] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  155.083223][ T4752] comedi comedi0: 8255: I/O port conflict (0x5,4)
[  155.089843][ T4752] comedi comedi0: 8255: I/O port conflict (0x4,4)
[  155.096743][ T4752] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4)
[  155.104936][ T4752] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4)
[  155.113213][ T4752] comedi comedi0: 8255: I/O port conflict (0x2,4)
[  155.127852][ T4752] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  155.135932][ T4752] comedi comedi0: 8255: I/O port conflict (0xc3,4)
[  155.142946][ T4752] comedi comedi0: 8255: I/O port conflict (0x1000007,4)
[  155.150469][ T4752] comedi comedi0: 8255: I/O port conflict (0x1,4)
[  155.161491][ T4752] comedi comedi0: 8255: I/O port conflict (0x10003,4)
[  155.168722][ T4752] comedi comedi0: 8255: I/O port conflict (0x801000,4)
[  155.175977][ T4752] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4)
[  155.183381][ T4752] comedi comedi0: 8255: I/O port conflict (0x3ff,4)
[  155.190262][ T4752] comedi comedi0: 8255: I/O port conflict (0x1001010,4)
[  155.197708][ T4752] comedi comedi0: 8255: I/O port conflict (0x1ff,4)
[  155.204531][ T4752] comedi comedi0: 8255: I/O port conflict (0x8,4)
[  155.211637][ T4752] comedi comedi0: 8255: I/O port conflict (0x3,4)
[  155.218382][ T4752] comedi comedi0: 8255: I/O port conflict (0x8001,4)
[  155.225520][ T4752] comedi comedi0: 8255: I/O port conflict (0x7,4)
[  155.232259][ T4752] comedi comedi0: 8255: I/O port conflict (0x3ff,4)
[  155.239194][ T4752] comedi comedi0: 8255: I/O port conflict (0x5,4)
[  155.245891][ T4752] comedi comedi0: 8255: I/O port conflict (0x6,4)
[  155.252540][ T4752] comedi comedi0: 8255: I/O port conflict (0x3,4)
[  155.259300][ T4752] comedi comedi0: 8255: I/O port conflict (0xfffd,4)
[  155.272935][ T4744] Process accounting resumed
[  155.885533][ T4324] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  156.144878][ T4324] usb 2-1: Using ep0 maxpacket: 8
[  156.185286][ T4757] syz.0.81: attempt to access beyond end of device
[  156.185286][ T4757] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[  156.198793][ T4757] gfs2: error 10 reading superblock
[  157.008852][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  157.042637][ T4324] usb 2-1: device descriptor read/all, error -71
[  157.377007][ T4768] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  159.586474][ T4769] loop4: detected capacity change from 0 to 1764
[  160.350505][ T4781] Bluetooth: MGMT ver 1.22
[  161.272209][ T4793] xt_CT: You must specify a L4 protocol and not use inversions on it
[  162.250111][   T26] audit: type=1326 audit(1788991472.059:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4796 comm="syz.3.90" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06bc99e159 code=0x0
[  163.975695][ T4803] loop3: detected capacity change from 0 to 2048
[  165.481403][ T4803] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.346495][ T4283] Bluetooth: hci4: command 0x0405 tx timeout
[  169.358461][ T4821] loop1: detected capacity change from 0 to 2048
[  170.176508][ T4821] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.167520][ T4834] loop2: detected capacity change from 0 to 1764
[  171.713860][ T4839] sctp: failed to load transform for md5: -2
[  171.721355][ T4840] sctp: failed to load transform for md5: -2
[  172.267676][ T4718] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  172.814487][ T4862] xt_CT: You must specify a L4 protocol and not use inversions on it
[  173.254831][ T4865] input: syz1 as /devices/virtual/input/input6
[  175.546770][ T4874] netlink: 'syz.0.104': attribute type 2 has an invalid length.
[  176.261561][ T4885] rtc_cmos 00:00: Alarms can be up to one day in the future
[  177.367680][ T4890] Attempt to restore checkpoint with obsolete wellknown handles
[  182.853604][ T4933] zram0: detected capacity change from 0 to 8
[  183.673059][ T4935] loop4: detected capacity change from 0 to 4096
[  183.683953][ T4935] ntfs3: Unknown parameter 'windows_names'
[  183.977918][ T4853] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  185.873619][ T4954] syz.3.118 uses obsolete (PF_INET,SOCK_PACKET)
[  186.223605][ T4958] x_tables: duplicate underflow at hook 3
[  186.625355][ T4962] capability: warning: `syz.0.119' uses 32-bit capabilities (legacy support in use)
[  191.889955][ T4995] xt_CT: You must specify a L4 protocol and not use inversions on it
[  192.247086][ T4973] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  193.521429][ T5006] loop4: detected capacity change from 0 to 512
[  193.566095][ T5006] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  193.703728][ T5006] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  193.721300][ T5006] Quota error (device loop4): write_blk: dquota write failed
[  193.728882][ T5006] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  193.738266][ T5006] Quota error (device loop4): write_blk: dquota write failed
[  193.746016][ T5006] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  193.755993][ T5006] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.129: Failed to acquire dquot type 1
[  193.775789][ T5006] EXT4-fs (loop4): 1 truncate cleaned up
[  193.781573][ T5006] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  193.828215][ T5006] Quota error (device loop4): write_blk: dquota write failed
[  193.836448][ T5006] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  193.846452][ T5006] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.129: Failed to acquire dquot type 1
[  193.880246][ T5006] Quota error (device loop4): write_blk: dquota write failed
[  193.888120][ T5006] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  193.898597][ T5006] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.129: Failed to acquire dquot type 1
[  193.914107][ T4498] rpcbind: server 127.0.0.1 not responding, timed out
[  194.287815][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  194.505288][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.513374][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  197.312678][ T5030] loop2: detected capacity change from 0 to 1764
[  198.315400][ T5018] sctp: failed to load transform for md5: -2
[  200.402640][ T5044] zram: Cannot change disksize for initialized device
[  201.685061][   T49] Bluetooth: hci3: command 0x0406 tx timeout
[  201.692156][ T4291] Bluetooth: hci1: command 0x0406 tx timeout
[  201.692904][ T4283] Bluetooth: hci2: command 0x0406 tx timeout
[  201.693268][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[  202.811068][ T5059] loop3: detected capacity change from 0 to 1764
[  203.236763][ T4853] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  210.216271][ T5094] xt_CT: You must specify a L4 protocol and not use inversions on it
[  214.638576][ T5120] loop1: detected capacity change from 0 to 1764
[  214.917828][ T4853] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  222.904184][ T5161] binder: 5152:5161 ioctl c0306201 0 returned -14
[  223.725595][ T5161] sctp: failed to load transform for md5: -2
[  224.267720][ T5175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.167'.
[  227.577177][ T5196] loop3: detected capacity change from 0 to 1764
[  231.403224][ T5214] overlayfs: missing 'lowerdir'
[  232.801384][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'.
[  234.514964][ T4754] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  234.945661][ T5232] netlink: 96 bytes leftover after parsing attributes in process `syz.3.184'.
[  234.984020][ T5232] loop3: detected capacity change from 0 to 512
[  235.116290][ T5232] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  235.129583][ T5232] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  235.411420][ T5232] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  235.436353][ T5232] EXT4-fs (loop3): Remounting filesystem read-only
[  235.444340][ T5232] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  235.461335][ T5232] EXT4-fs (loop3): 1 truncate cleaned up
[  235.467187][ T5232] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  235.524944][ T4754] usb 3-1: Using ep0 maxpacket: 32
[  235.589991][ T4754] usb 3-1: device descriptor read/all, error -71
[  235.832038][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  236.532063][ T5242] input: syz1 as /devices/virtual/input/input7
[  236.691776][ T5244] loop2: detected capacity change from 0 to 1024
[  236.751137][ T5244] hfsplus: invalid btree flag
[  236.757049][ T5244] hfsplus: failed to load catalog file
[  238.022368][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'.
[  243.147045][ T5303] binder: 5298:5303 ioctl c0306201 0 returned -14
[  243.730878][ T5303] sctp: failed to load transform for md5: -2
[  244.983893][ T5321] netlink: 'syz.0.201': attribute type 8 has an invalid length.
[  246.390981][ T5330] loop3: detected capacity change from 0 to 1764
[  246.471887][ T5170] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  247.517323][ T5338] loop4: detected capacity change from 0 to 128
[  247.655689][ T5338] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  247.705022][ T5338] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  248.693030][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  248.920582][ T5360] loop1: detected capacity change from 0 to 512
[  248.955844][ T5360] EXT4-fs: Ignoring removed nobh option
[  249.343416][ T5360] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  249.641970][ T5360] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  250.172598][ T5378] loop4: detected capacity change from 0 to 1764
[  250.247793][ T5379] netlink: 'syz.2.215': attribute type 8 has an invalid length.
[  252.306174][ T5380] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.214: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  252.510921][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  252.517262][ T5170] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  252.745247][ T5393] ubi0: attaching mtd0
[  252.758508][ T5393] ubi0: scanning is finished
[  252.763315][ T5393] ubi0: empty MTD device detected
[  252.966583][ T5392] binder: 5387:5392 ioctl c0306201 0 returned -14
[  253.223358][ T5393] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  253.231329][ T5393] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  253.238983][ T5393] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  253.246132][ T5393] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  253.254544][ T5393] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  253.254592][ T5393] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  253.270168][ T5393] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2539595174
[  253.280304][ T5393] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  253.293422][ T5396] ubi0: background thread "ubi_bgt0d" started, PID 5396
[  253.565191][   T26] audit: type=1800 audit(1788991563.399:42): pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.222" name="zoned" dev="configfs" ino=37053 res=0 errno=0
[  253.655478][   T26] audit: type=1800 audit(1788991563.439:43): pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.222" name="zone_nr_conv" dev="configfs" ino=37055 res=0 errno=0
[  255.015703][   T26] audit: type=1800 audit(1788991563.779:44): pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.222" name="zoned" dev="configfs" ino=36725 res=0 errno=0
[  255.044429][   T26] audit: type=1800 audit(1788991563.779:45): pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.222" name="power" dev="configfs" ino=36726 res=0 errno=0
[  255.052790][ T5406] fuse: Bad value for 'fd'
[  255.914529][   T26] audit: type=1800 audit(1788991565.749:46): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.224" name="zoned" dev="configfs" ino=36744 res=0 errno=0
[  255.936085][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.942430][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  255.974472][ T5406] null_blk: zone_size must be power-of-two
[  256.014825][   T26] audit: type=1800 audit(1788991565.799:47): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.224" name="zone_nr_conv" dev="configfs" ino=36747 res=0 errno=0
[  256.093266][   T26] audit: type=1800 audit(1788991565.809:48): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.224" name="power" dev="configfs" ino=36748 res=0 errno=0
[  257.441171][ T5439] netlink: 'syz.1.233': attribute type 8 has an invalid length.
[  257.798875][ T5442] hub 8-0:1.0: USB hub found
[  257.814658][ T5442] hub 8-0:1.0: 1 port detected
[  259.045026][ T5448] FAULT_INJECTION: forcing a failure.
[  259.045026][ T5448] name failslab, interval 1, probability 0, space 0, times 1
[  259.136042][ T5448] CPU: 1 PID: 5448 Comm: syz.3.236 Not tainted syzkaller #0
[  259.143373][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  259.153705][ T5448] Call Trace:
[  259.157358][ T5448]  <TASK>
[  259.160325][ T5448]  dump_stack_lvl+0x188/0x24e
[  259.165077][ T5448]  ? show_regs_print_info+0x12/0x12
[  259.170382][ T5448]  ? load_image+0x410/0x410
[  259.174892][ T5448]  ? __might_sleep+0xd0/0xd0
[  259.179530][ T5448]  ? __lock_acquire+0x7c40/0x7c40
[  259.184570][ T5448]  should_fail_ex+0x390/0x4c0
[  259.189441][ T5448]  should_failslab+0x5/0x20
[  259.194033][ T5448]  slab_pre_alloc_hook+0x59/0x300
[  259.199324][ T5448]  kmem_cache_alloc_lru+0x49/0x2e0
[  259.204438][ T5448]  ? __d_alloc+0x2e/0x6e0
[  259.208792][ T5448]  __d_alloc+0x2e/0x6e0
[  259.212961][ T5448]  ? d_alloc_pseudo+0xe/0x70
[  259.217557][ T5448]  d_alloc_pseudo+0x19/0x70
[  259.222237][ T5448]  alloc_file_pseudo+0xe0/0x200
[  259.227164][ T5448]  ? alloc_empty_file_noaccount+0x80/0x80
[  259.232940][ T5448]  ? anon_inode_make_secure_inode+0xf7/0x160
[  259.238937][ T5448]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  259.244418][ T5448]  ? _raw_spin_unlock+0x24/0x40
[  259.249303][ T5448]  __se_sys_memfd_secret+0x125/0x2f0
[  259.254610][ T5448]  do_syscall_64+0x4c/0xa0
[  259.259048][ T5448]  ? clear_bhb_loop+0x60/0xb0
[  259.263742][ T5448]  ? clear_bhb_loop+0x60/0xb0
[  259.268456][ T5448]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  259.274361][ T5448] RIP: 0033:0x7f06bc99e159
[  259.278901][ T5448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.299197][ T5448] RSP: 002b:00007f06bd7dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  259.307648][ T5448] RAX: ffffffffffffffda RBX: 00007f06bcc25fa0 RCX: 00007f06bc99e159
[  259.315733][ T5448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  259.323739][ T5448] RBP: 00007f06bca3503b R08: 0000000000000000 R09: 0000000000000000
[  259.331757][ T5448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.339831][ T5448] R13: 00007f06bcc26038 R14: 00007f06bcc25fa0 R15: 00007fff6a1ede98
[  259.347917][ T5448]  </TASK>
[  259.562499][ T5448] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  259.727177][ T5460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'.
[  262.286019][ T5479] bridge0: port 3(erspan0) entered blocking state
[  262.292956][ T5479] bridge0: port 3(erspan0) entered disabled state
[  262.302530][ T5479] device erspan0 entered promiscuous mode
[  262.310348][ T5479] bridge0: port 3(erspan0) entered blocking state
[  262.317462][ T5479] bridge0: port 3(erspan0) entered forwarding state
[  262.331657][ T5479] device erspan0 left promiscuous mode
[  262.337444][ T5479] bridge0: port 3(erspan0) entered disabled state
[  263.300348][ T5485] 9pnet_virtio: no channels available for device syz
[  264.612637][ T5491] netlink: 'syz.4.249': attribute type 8 has an invalid length.
[  265.489347][ T5489] ip_tables: iptables: counters copy to user failed while replacing table
[  266.152377][ T5502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'.
[  266.449411][ T5504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'.
[  267.334170][ T5523] null_blk: zone_size must be power-of-two
[  267.404204][ T5525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[  267.433514][ T5525] device macsec0 entered promiscuous mode
[  268.462634][ T5529] CIFS mount error: No usable UNC path provided in device string!
[  268.462634][ T5529] 
[  268.473905][ T5529] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  268.605382][ T5530] loop2: detected capacity change from 0 to 256
[  268.751415][ T5530] FAT-fs (loop2): Directory bread(block 64) failed
[  268.758669][ T5530] FAT-fs (loop2): Directory bread(block 65) failed
[  268.765843][ T5530] FAT-fs (loop2): Directory bread(block 66) failed
[  268.773489][ T5530] FAT-fs (loop2): Directory bread(block 67) failed
[  268.781076][ T5530] FAT-fs (loop2): Directory bread(block 68) failed
[  268.787858][ T5530] FAT-fs (loop2): Directory bread(block 69) failed
[  268.794993][ T5530] FAT-fs (loop2): Directory bread(block 70) failed
[  268.801804][ T5530] FAT-fs (loop2): Directory bread(block 71) failed
[  268.808912][ T5530] FAT-fs (loop2): Directory bread(block 72) failed
[  268.815748][ T5530] FAT-fs (loop2): Directory bread(block 73) failed
[  269.977472][ T5542] netlink: 'syz.0.263': attribute type 8 has an invalid length.
[  271.322586][ T5548] loop3: detected capacity change from 0 to 512
[  271.690448][ T5558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'.
[  272.602370][ T5559] loop4: detected capacity change from 0 to 4096
[  272.612326][ T5559] EXT4-fs: inline encryption not supported
[  273.120354][ T5559] EXT4-fs (loop4): Test dummy encryption mode enabled
[  274.147114][ T5548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  274.321034][ T5565] tmpfs: Unknown parameter 'usrquota'
[  275.121796][ T5548] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.226145][ T5559] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  275.264285][ T5559] System zones: 0-5
[  275.281072][ T5559] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  275.356540][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  275.587293][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  279.712908][ T5611] xt_l2tp: v2 tid > 0xffff: 4294967294
[  281.175874][ T5624] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[  282.098472][ T5636] ubi: mtd0 is already attached to ubi0
[  283.153110][ T5644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.290'.
[  284.680026][ T5653] CIFS: Attempting to mount \\127.0.0.1\share
[  286.717008][ T5663] loop4: detected capacity change from 0 to 2048
[  286.782821][ T5663] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  287.207858][ T5655] CIFS: VFS: Invalid response size 0 for command 0
[  287.303029][ T5653] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)'
[  287.341046][ T5653] CIFS: VFS: cifs_mount failed w/return code = -5
[  289.317350][ T5681] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[  289.627148][   T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  289.754247][   T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  289.765072][   T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  289.774265][   T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  289.782319][   T49] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  289.795039][   T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  290.151275][ T5691] ubi: mtd0 is already attached to ubi0
[  291.320025][ T4375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.590942][ T4375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.816745][ T4375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.842265][ T5683] chnl_net:caif_netlink_parms(): no params data found
[  291.849870][ T4289] Bluetooth: hci5: command 0x0409 tx timeout
[  291.911221][ T4375] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.162823][ T5683] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.183141][ T5683] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.199789][ T5683] device bridge_slave_0 entered promiscuous mode
[  292.231821][ T5683] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.253326][ T5683] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.266631][ T5683] device bridge_slave_1 entered promiscuous mode
[  292.332240][ T5683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.344082][ T5683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.403198][ T5683] team0: Port device team_slave_0 added
[  292.414242][ T5683] team0: Port device team_slave_1 added
[  292.457806][ T5683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.465045][ T5683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.499969][ T5683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.535813][ T5683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.542905][ T5683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.569798][ T5683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.676304][ T5683] device hsr_slave_0 entered promiscuous mode
[  292.683697][ T5683] device hsr_slave_1 entered promiscuous mode
[  292.698717][ T5683] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  292.711360][ T5683] Cannot create hsr debugfs directory
[  293.038874][ T5683] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  293.058133][ T5683] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  293.085528][ T5683] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  293.191937][ T5683] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  293.424526][ T4375] device hsr_slave_0 left promiscuous mode
[  293.432193][ T4375] device hsr_slave_1 left promiscuous mode
[  293.441883][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.453547][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.470207][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.481506][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.493865][ T4375] device bridge_slave_1 left promiscuous mode
[  293.511069][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.538431][ T4375] device bridge_slave_0 left promiscuous mode
[  293.550998][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.589321][ T4375] device veth1_macvtap left promiscuous mode
[  293.604138][ T4375] device veth0_macvtap left promiscuous mode
[  293.613719][ T4375] device veth1_vlan left promiscuous mode
[  293.627293][ T4375] device veth0_vlan left promiscuous mode
[  293.925103][ T4289] Bluetooth: hci5: command 0x041b tx timeout
[  294.439118][ T4375] team0 (unregistering): Port device team_slave_1 removed
[  294.483534][ T4375] team0 (unregistering): Port device team_slave_0 removed
[  294.532955][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  294.578238][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  294.902233][ T4375] bond0 (unregistering): Released all slaves
[  294.984110][ T5683] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.021627][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  295.029819][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  295.047607][ T5683] 8021q: adding VLAN 0 to HW filter on device team0
[  295.076482][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  295.086315][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  295.097368][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.112813][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.150010][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  295.158366][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  295.180576][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  295.198970][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.206206][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.226029][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  295.242445][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  295.251805][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  295.268818][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  295.282310][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  295.297687][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  295.307066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  295.315990][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  295.331751][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  295.357628][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  295.371804][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  295.387618][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  295.831470][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  295.841652][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  295.857269][ T5683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.015399][ T4289] Bluetooth: hci5: command 0x040f tx timeout
[  296.341873][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  296.360280][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  296.391004][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  296.401172][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  296.413613][ T5683] device veth0_vlan entered promiscuous mode
[  296.428855][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  296.438211][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  296.461488][ T5683] device veth1_vlan entered promiscuous mode
[  296.487504][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  296.501101][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  296.512062][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  296.529351][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  296.546680][ T5683] device veth0_macvtap entered promiscuous mode
[  296.562885][ T5683] device veth1_macvtap entered promiscuous mode
[  296.584122][ T5683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.595333][ T5683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.605673][ T5683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.616507][ T5683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.627663][ T5683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.638488][ T5683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.648820][ T5683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.659688][ T5683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.671236][ T5683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.682113][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  296.690876][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  296.706017][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  296.722107][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  296.735801][ T5683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.747694][ T5683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.763775][ T5683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.774323][ T5683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.786917][ T5683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.797568][ T5683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.807964][ T5683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.818992][ T5683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.833239][ T5683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  296.848282][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  296.858535][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  296.872311][ T5683] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.881508][ T5683] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.890929][ T5683] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.900706][ T5683] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.985381][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.998831][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.008832][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  297.046387][ T4498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.054460][ T4498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.070759][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  297.559575][ T5776] loop1: detected capacity change from 0 to 40427
[  297.644106][ T5776] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  297.653541][ T5776] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  297.678180][ T5776] F2FS-fs (loop1): invalid crc value
[  298.086191][ T4289] Bluetooth: hci5: command 0x0419 tx timeout
[  299.879729][ T5779] device dummy0 entered promiscuous mode
[  299.929338][ T5776] F2FS-fs (loop1): Found nat_bits in checkpoint
[  300.034581][ T5790] loop4: detected capacity change from 0 to 64
[  302.254070][ T5800] netlink: 'syz.5.303': attribute type 8 has an invalid length.
[  305.076432][ T5812] random: crng reseeded on system resumption
[  305.325192][ T4362] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  305.558606][ T4362] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.653592][ T4362] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  305.663098][ T4362] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  305.672665][ T4362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.689248][ T4362] usb 1-1: config 0 descriptor??
[  305.793149][ T5831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.309'.
[  306.618902][ T5832] ubi: mtd0 is already attached to ubi0
[  306.850506][ T5842] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[  307.135492][   T22] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  307.323861][ T4261] usb 1-1: USB disconnect, device number 2
[  307.497380][   T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  307.584387][   T22] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  307.664042][   T22] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  307.704566][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.965621][   T22] usb 2-1: config 0 descriptor??
[  309.624778][ T4602] usb 2-1: USB disconnect, device number 4
[  310.994547][ T5881] netlink: 'syz.3.322': attribute type 8 has an invalid length.
[  312.976578][ T5936] ubi: mtd0 is already attached to ubi0
[  315.533650][ T5960] netlink: 48 bytes leftover after parsing attributes in process `syz.5.328'.
[  315.626351][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.325'.
[  317.395695][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.402303][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  318.001286][ T5984] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[  319.810794][ T6004] Cannot find add_set index 0 as target
[  320.408041][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'.
[  321.435556][ T6013] CIFS: Attempting to mount \\127.0.0.1\share
[  322.156908][ T6013] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)'
[  322.165203][ T6013] CIFS: VFS: cifs_mount failed w/return code = -512
[  322.251544][ T6030] netlink: 44 bytes leftover after parsing attributes in process `syz.0.338'.
[  322.261062][ T6030] netlink: 84 bytes leftover after parsing attributes in process `syz.0.338'.
[  323.069983][ T6027] loop1: detected capacity change from 0 to 4096
[  325.209813][ T6069] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.024972][ T6071] netlink: 'syz.4.346': attribute type 8 has an invalid length.
[  327.722041][ T6074] loop5: detected capacity change from 0 to 512
[  329.396470][ T5170] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  329.638040][ T6094] CIFS: iocharset name too long
[  329.733955][ T6099] binder_alloc: binder_alloc_mmap_handler: 6073 200000ffe000-200001000000 already mapped failed -16
[  329.940798][ T6100] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  330.311736][ T6100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  330.422801][ T6100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  331.101028][ T6100] device bridge_slave_0 left promiscuous mode
[  331.109737][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.330187][ T6111] loop5: detected capacity change from 0 to 512
[  331.392643][ T6111] EXT4-fs: Mount option(s) incompatible with ext2
[  331.393360][ T6100] device bridge_slave_1 left promiscuous mode
[  331.611155][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.666368][ T6122] netlink: 44 bytes leftover after parsing attributes in process `syz.1.357'.
[  332.516560][ T6100] bond0: (slave bond_slave_0): Releasing backup interface
[  332.879727][ T6100] bond0: (slave bond_slave_1): Releasing backup interface
[  333.568808][ T6100] team0: Port device team_slave_0 removed
[  333.761210][ T6100] team0: Port device team_slave_1 removed
[  333.779401][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  333.796106][ T6100] batman_adv: batadv0: Removing interface: batadv_slave_0
[  333.834631][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  333.855551][ T6100] batman_adv: batadv0: Removing interface: batadv_slave_1
[  334.095047][ T6133] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  335.996446][ T6121] netlink: 'syz.1.357': attribute type 10 has an invalid length.
[  336.304596][ T6146] netlink: 'syz.0.360': attribute type 8 has an invalid length.
[  338.174750][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'.
[  339.119967][ T6167] netlink: 72 bytes leftover after parsing attributes in process `syz.3.367'.
[  339.282015][   T26] audit: type=1326 audit(1788991648.124:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.5.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b19d9e159 code=0x7ffc0000
[  339.495249][   T26] audit: type=1326 audit(1788991648.174:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.5.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f2b19d9e159 code=0x7ffc0000
[  339.625979][   T26] audit: type=1326 audit(1788991648.174:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.5.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b19d9e159 code=0x7ffc0000
[  339.687982][ T6163] team0: Port device team_slave_0 removed
[  339.833286][ T6175] netlink: 316 bytes leftover after parsing attributes in process `syz.0.368'.
[  340.384903][   T26] audit: type=1326 audit(1788991648.174:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.5.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2b19d9e159 code=0x7ffc0000
[  341.204597][   T26] audit: type=1326 audit(1788991648.174:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.5.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b19d9e159 code=0x7ffc0000
[  341.231761][   T26] audit: type=1326 audit(1788991648.174:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.5.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2b19d9e159 code=0x7ffc0000
[  341.295569][   T26] audit: type=1326 audit(1788991648.174:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.5.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b19d9e159 code=0x7ffc0000
[  341.445838][ T6185] using random self ethernet address
[  341.451632][ T6185] using random host ethernet address
[  341.551038][   T26] audit: type=1326 audit(1788991648.174:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.5.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b19d9e159 code=0x7ffc0000
[  341.624793][   T26] audit: type=1326 audit(1788991648.174:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.5.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b19d9e159 code=0x7ffc0000
[  341.669649][   T26] audit: type=1326 audit(1788991648.174:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.5.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2b19d9e159 code=0x7ffc0000
[  341.701411][ T6183] loop3: detected capacity change from 0 to 32768
[  342.782283][ T6183] XFS (loop3): Mounting V5 Filesystem
[  343.062805][ T6214] netlink: 'syz.1.376': attribute type 8 has an invalid length.
[  343.471494][ T6183] XFS (loop3): AIL initialisation failed: error -12
[  344.696315][ T6183] XFS (loop3): log mount failed
[  345.274976][ T4754] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  345.504935][ T4754] usb 5-1: Using ep0 maxpacket: 32
[  345.519354][ T4754] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  345.686289][ T4754] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  345.958956][ T4754] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  346.042385][ T4754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.075522][ T4754] usb 5-1: config 0 descriptor??
[  346.322094][ T4754] usb 5-1: USB disconnect, device number 2
[  346.999012][ T6242] Cannot find add_set index 0 as target
[  348.441394][ T6253] UBIFS error (pid: 6253): cannot open "(null)", error -22
[  350.227249][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  350.242662][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  350.714931][ T6257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  353.658365][ T6285] loop3: detected capacity change from 0 to 512
[  353.668837][ T6285] EXT4-fs: Invalid want_extra_isize 7
[  354.376077][ T5170] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  356.782838][ T6303] SET target dimension over the limit!
[  358.157074][ T6303] sctp: failed to load transform for md5: -2
[  359.477382][ T6329] loop1: detected capacity change from 0 to 512
[  360.947384][ T6329] EXT4-fs: Ignoring removed orlov option
[  360.977530][ T6329] ext4: Bad value for 'data'
[  361.760674][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'.
[  361.769946][ T6340] device bridge_slave_1 left promiscuous mode
[  361.776819][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.791676][ T6338] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9
[  361.898093][ T6341] syz.0.395: attempt to access beyond end of device
[  361.898093][ T6341] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[  361.911418][ T6341] efs: cannot read volume header
[  361.934011][ T6340] device bridge_slave_0 left promiscuous mode
[  361.940767][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.520577][ T6345] loop3: detected capacity change from 0 to 128
[  362.606776][ T6345] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  362.621657][ T5171] udevd[5171]: incorrect ext4 checksum on /dev/loop3
[  363.101247][ T6356] block device autoloading is deprecated and will be removed.
[  363.109634][ T6356] syz.3.400: attempt to access beyond end of device
[  363.109634][ T6356] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  367.071543][ T6370] loop4: detected capacity change from 0 to 512
[  367.081777][ T6370] EXT4-fs: Invalid want_extra_isize 7
[  372.106830][ T6388] loop1: detected capacity change from 0 to 512
[  372.124057][ T6381] 9pnet_fd: p9_fd_create_tcp (6381): problem connecting socket to 127.0.0.1
[  372.201353][ T6388] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  372.238593][ T6388] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002]
[  372.279128][ T6388] System zones: 0-1, 15-15, 18-18, 34-34
[  372.293171][ T6388] EXT4-fs (loop1): orphan cleanup on readonly fs
[  372.355129][ T6388] __quota_error: 18 callbacks suppressed
[  372.355149][ T6388] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  372.465114][ T6399] loop3: detected capacity change from 0 to 1024
[  372.483026][ T6399] EXT4-fs (loop3): filesystem is read-only
[  372.490039][ T6399] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 1280
[  372.506540][ T6388] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  372.563502][ T6388] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  373.443018][ T6388] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.409: bad orphan inode 16
[  373.525531][ T6388] ext4_test_bit(bit=15, block=18) = 1
[  373.535025][ T6388] is_bad_inode(inode)=0
[  373.539425][ T6388] NEXT_ORPHAN(inode)=0
[  373.543542][ T6388] max_ino=32
[  373.578408][ T6388] i_nlink=2
[  373.581762][ T6388] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  374.147901][ T6420] fscrypt (loop1, inode 16): Error -61 getting encryption context
[  374.729888][ T6419] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  374.738240][ T6419] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  374.746846][ T6419] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  374.890209][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  377.139662][ T6455] ipt_REJECT: TCP_RESET invalid for non-tcp
[  378.029722][ T6467] using random self ethernet address
[  378.036153][ T6467] using random host ethernet address
[  378.561493][   T26] audit: type=1800 audit(1788991686.904:77): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.421" name="host_addr" dev="configfs" ino=39901 res=0 errno=0
[  378.875625][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.882715][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  380.865634][ T6490] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10
[  380.916821][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'.
[  380.925893][ T6492] device bridge_slave_1 left promiscuous mode
[  380.932516][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.106094][ T6493] syz.3.428: attempt to access beyond end of device
[  381.106094][ T6493] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  381.119495][ T6493] efs: cannot read volume header
[  381.558418][ T6492] device bridge_slave_0 left promiscuous mode
[  381.565162][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.068660][ T6497] loop4: detected capacity change from 0 to 1024
[  382.175064][ T6497] hfsplus: unable to parse mount options
[  384.574011][ T6520] loop0: detected capacity change from 0 to 4096
[  384.639358][ T6520] EXT4-fs: inline encryption not supported
[  384.738746][ T6520] EXT4-fs: Ignoring removed mblk_io_submit option
[  384.787220][ T6520] EXT4-fs: inline encryption not supported
[  384.808030][ T6520] ext4: Unknown parameter 'in'
[  385.766355][   T26] audit: type=1800 audit(1788991694.614:78): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.432" name="c_srate" dev="configfs" ino=40990 res=0 errno=0
[  393.545345][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'.
[  394.636223][ T6609] PKCS7: Unknown OID: [4] 0.0
[  394.641424][ T6609] PKCS7: Only support pkcs7_signedData type
[  394.678921][ T6609] xt_policy: output policy not valid in PREROUTING and INPUT
[  395.086457][ T6610] loop5: detected capacity change from 0 to 512
[  395.093917][ T6610] EXT4-fs: Invalid want_extra_isize 7
[  395.152926][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'.
[  395.243605][ T5170] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  395.323194][ T6611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.445'.
[  397.552300][ T6637] loop1: detected capacity change from 0 to 64
[  398.934138][ T6655] loop4: detected capacity change from 0 to 512
[  398.947645][ T6655] EXT4-fs: Ignoring removed orlov option
[  398.953548][ T6655] ext4: Bad value for 'data'
[  399.229062][ T6658] netlink: 96 bytes leftover after parsing attributes in process `syz.1.460'.
[  400.023919][ T6660] 9pnet_fd: p9_fd_create_tcp (6660): problem connecting socket to 127.0.0.1
[  402.982470][ T6690] binder: 6688:6690 ioctl c0306201 200000000080 returned -14
[  404.023338][ T6690] binder: 6688:6690 ioctl c0306201 2000000003c0 returned -14
[  404.316440][ T6699] loop5: detected capacity change from 0 to 64
[  405.040174][ T6705] netlink: 96 bytes leftover after parsing attributes in process `syz.4.474'.
[  405.076345][ T6705] loop4: detected capacity change from 0 to 512
[  405.316391][ T6705] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  405.807696][ T6705] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  405.823073][ T6705] EXT4-fs (loop4): Remounting filesystem read-only
[  405.830754][ T6705] EXT4-fs (loop4): 1 truncate cleaned up
[  405.836645][ T6705] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  406.158502][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  408.164520][ T6744] input: syz1 as /devices/virtual/input/input11
[  411.217230][ T6759] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  411.225924][ T6759] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  411.234882][ T6759] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  412.346578][ T6766] loop4: detected capacity change from 0 to 64
[  413.201027][ T6765] loop3: detected capacity change from 0 to 1024
[  413.297980][ T6765] hfsplus: unable to parse mount options
[  416.082655][ T6787] hub 8-0:1.0: USB hub found
[  416.109661][ T6792] loop4: detected capacity change from 0 to 1024
[  416.132242][ T6792] EXT4-fs (loop4): filesystem is read-only
[  416.138200][ T6792] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 1280
[  416.526786][ T6787] hub 8-0:1.0: 1 port detected
[  416.765147][ T6798] loop3: detected capacity change from 0 to 512
[  417.166475][ T6798] EXT4-fs: Mount option(s) incompatible with ext2
[  418.542424][ T6812] fuse: Bad value for 'fd'
[  418.583713][   T26] audit: type=1800 audit(1788991727.424:79): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.499" name="zoned" dev="configfs" ino=41493 res=0 errno=0
[  418.628291][ T6812] null_blk: zone_size must be power-of-two
[  418.674850][   T26] audit: type=1800 audit(1788991727.464:80): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.499" name="zone_nr_conv" dev="configfs" ino=41496 res=0 errno=0
[  418.742366][   T26] audit: type=1800 audit(1788991727.474:81): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.499" name="power" dev="configfs" ino=42319 res=0 errno=0
[  419.264136][ T6829] PKCS7: Unknown OID: [4] 0.0
[  419.269382][ T6829] PKCS7: Only support pkcs7_signedData type
[  419.309178][ T6829] xt_policy: output policy not valid in PREROUTING and INPUT
[  421.189454][ T6847] binder: 6834:6847 ioctl c0306201 0 returned -14
[  422.385521][ T6857] hub 8-0:1.0: USB hub found
[  422.390926][ T6857] hub 8-0:1.0: 1 port detected
[  423.059089][ T6861] loop3: detected capacity change from 0 to 128
[  423.136211][ T6861] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  423.241949][ T6861] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  423.490383][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  425.397424][ T6888] 9pnet_virtio: no channels available for device syz
[  426.328793][ T6892] loop3: detected capacity change from 0 to 512
[  426.425801][ T6892] EXT4-fs: Ignoring removed nobh option
[  426.509741][ T6892] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  426.615263][ T6892] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  427.019281][ T6900] ubi: mtd0 is already attached to ubi0
[  428.912220][ T6905] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.520: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  429.163752][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  429.799245][ T6916] binder: 6914:6916 ioctl c0306201 0 returned -14
[  430.847976][ T6925] hub 8-0:1.0: USB hub found
[  430.853297][ T6925] hub 8-0:1.0: 1 port detected
[  431.617009][ T6929] fuse: Bad value for 'fd'
[  431.658653][   T26] audit: type=1800 audit(1788991740.504:82): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.527" name="zoned" dev="configfs" ino=42556 res=0 errno=0
[  431.696837][ T6929] null_blk: zone_size must be power-of-two
[  431.901263][   T26] audit: type=1800 audit(1788991740.534:83): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.527" name="zone_nr_conv" dev="configfs" ino=42557 res=0 errno=0
[  431.990033][ T6946] PKCS7: Unknown OID: [4] 0.0
[  431.994927][ T6946] PKCS7: Only support pkcs7_signedData type
[  432.037823][ T6946] xt_policy: output policy not valid in PREROUTING and INPUT
[  433.036676][   T26] audit: type=1800 audit(1788991740.544:84): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.527" name="power" dev="configfs" ino=42560 res=0 errno=0
[  433.702314][ T6957] CIFS mount error: No usable UNC path provided in device string!
[  433.702314][ T6957] 
[  433.712948][ T6957] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  434.695077][ T5171] udevd[5171]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  435.057280][ T6966] loop5: detected capacity change from 0 to 1024
[  435.081566][ T6966] EXT4-fs (loop5): filesystem is read-only
[  435.087542][ T6966] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 1280
[  436.211675][ T6978] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  436.220189][ T6978] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  436.228946][ T6978] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  439.578470][ T6994] null_blk: zone_size must be power-of-two
[  439.650760][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'.
[  439.673618][ T6995] device macsec0 entered promiscuous mode
[  440.246736][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  440.253045][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  440.787317][ T7004] hub 8-0:1.0: USB hub found
[  440.792562][ T7004] hub 8-0:1.0: 1 port detected
[  443.011988][ T7020] CIFS mount error: No usable UNC path provided in device string!
[  443.011988][ T7020] 
[  443.022172][ T7020] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  443.947455][ T7028] binder: 7021:7028 ioctl c0306201 0 returned -14
[  444.993498][ T7033] tmpfs: Unknown parameter 'usrquota'
[  446.923537][ T7046] input: syz1 as /devices/virtual/input/input12
[  447.158397][ T7048] loop3: detected capacity change from 0 to 1024
[  448.897799][ T7048] hfsplus: invalid btree flag
[  448.902831][ T7048] hfsplus: failed to load catalog file
[  454.208986][ T7076] 9pnet_fd: Insufficient options for proto=fd
[  455.160517][ T7089] null_blk: zone_size must be power-of-two
[  455.237772][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.558'.
[  455.262136][ T7094] device macsec0 entered promiscuous mode
[  455.557032][ T7078] hub 8-0:1.0: USB hub found
[  455.586809][ T7078] hub 8-0:1.0: 1 port detected
[  456.374367][ T7107] loop3: detected capacity change from 0 to 4096
[  456.384220][ T7107] EXT4-fs: inline encryption not supported
[  456.907482][ T7107] EXT4-fs (loop3): Test dummy encryption mode enabled
[  458.115606][ T7107] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  458.140142][ T7107] System zones: 0-5
[  458.146960][ T7111] FAULT_INJECTION: forcing a failure.
[  458.146960][ T7111] name failslab, interval 1, probability 0, space 0, times 0
[  458.187496][ T7107] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  458.238823][ T7115] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  458.272530][ T7111] CPU: 0 PID: 7111 Comm: syz.5.562 Not tainted syzkaller #0
[  458.279985][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  458.290082][ T7111] Call Trace:
[  458.293464][ T7111]  <TASK>
[  458.296491][ T7111]  dump_stack_lvl+0x188/0x24e
[  458.301350][ T7111]  ? show_regs_print_info+0x12/0x12
[  458.306675][ T7111]  ? load_image+0x410/0x410
[  458.311283][ T7111]  ? __might_sleep+0xd0/0xd0
[  458.315977][ T7111]  ? __lock_acquire+0x7c40/0x7c40
[  458.321079][ T7111]  should_fail_ex+0x390/0x4c0
[  458.325862][ T7111]  should_failslab+0x5/0x20
[  458.330807][ T7111]  slab_pre_alloc_hook+0x59/0x300
[  458.336224][ T7111]  kmem_cache_alloc_lru+0x49/0x2e0
[  458.341399][ T7111]  ? __d_alloc+0x2e/0x6e0
[  458.345824][ T7111]  __d_alloc+0x2e/0x6e0
[  458.350026][ T7111]  ? d_alloc_pseudo+0xe/0x70
[  458.354658][ T7111]  d_alloc_pseudo+0x19/0x70
[  458.359202][ T7111]  alloc_file_pseudo+0xe0/0x200
[  458.364191][ T7111]  ? alloc_empty_file_noaccount+0x80/0x80
[  458.370162][ T7111]  ? anon_inode_make_secure_inode+0xf7/0x160
[  458.376358][ T7111]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  458.381848][ T7111]  ? _raw_spin_unlock+0x24/0x40
[  458.386761][ T7111]  __se_sys_memfd_secret+0x125/0x2f0
[  458.392126][ T7111]  do_syscall_64+0x4c/0xa0
[  458.396747][ T7111]  ? clear_bhb_loop+0x60/0xb0
[  458.401715][ T7111]  ? clear_bhb_loop+0x60/0xb0
[  458.406611][ T7111]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  458.412608][ T7111] RIP: 0033:0x7f2b19d9e159
[  458.417090][ T7111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.437017][ T7111] RSP: 002b:00007f2b1ad0d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  458.445519][ T7111] RAX: ffffffffffffffda RBX: 00007f2b1a025fa0 RCX: 00007f2b19d9e159
[  458.453603][ T7111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  458.461716][ T7111] RBP: 00007f2b19e3503b R08: 0000000000000000 R09: 0000000000000000
[  458.469805][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  458.477884][ T7111] R13: 00007f2b1a026038 R14: 00007f2b1a025fa0 R15: 00007ffe8d2dec78
[  458.485928][ T7111]  </TASK>
[  458.846558][ T7097] CIFS mount error: No usable UNC path provided in device string!
[  458.846558][ T7097] 
[  458.857271][ T7097] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  459.366227][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  461.607367][ T7149] loop3: detected capacity change from 0 to 4096
[  461.617678][ T7149] ntfs3: Unknown parameter 'ntfs3'
[  462.185781][ T5170] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  464.581895][ T7170] FAULT_INJECTION: forcing a failure.
[  464.581895][ T7170] name failslab, interval 1, probability 0, space 0, times 0
[  464.602341][ T7170] CPU: 1 PID: 7170 Comm: syz.4.579 Not tainted syzkaller #0
[  464.609831][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  464.620462][ T7170] Call Trace:
[  464.623782][ T7170]  <TASK>
[  464.626760][ T7170]  dump_stack_lvl+0x188/0x24e
[  464.631698][ T7170]  ? show_regs_print_info+0x12/0x12
[  464.636972][ T7170]  ? load_image+0x410/0x410
[  464.641717][ T7170]  ? __might_sleep+0xd0/0xd0
[  464.646354][ T7170]  ? __lock_acquire+0x7c40/0x7c40
[  464.651437][ T7170]  should_fail_ex+0x390/0x4c0
[  464.656173][ T7170]  should_failslab+0x5/0x20
[  464.660724][ T7170]  slab_pre_alloc_hook+0x59/0x300
[  464.665976][ T7170]  kmem_cache_alloc_lru+0x49/0x2e0
[  464.671139][ T7170]  ? __d_alloc+0x2e/0x6e0
[  464.675636][ T7170]  __d_alloc+0x2e/0x6e0
[  464.679857][ T7170]  ? d_alloc_pseudo+0xe/0x70
[  464.684497][ T7170]  d_alloc_pseudo+0x19/0x70
[  464.689042][ T7170]  alloc_file_pseudo+0xe0/0x200
[  464.694020][ T7170]  ? alloc_empty_file_noaccount+0x80/0x80
[  464.699801][ T7170]  ? anon_inode_make_secure_inode+0xf7/0x160
[  464.706378][ T7170]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  464.711887][ T7170]  ? _raw_spin_unlock+0x24/0x40
[  464.717251][ T7170]  __se_sys_memfd_secret+0x125/0x2f0
[  464.722600][ T7170]  do_syscall_64+0x4c/0xa0
[  464.727089][ T7170]  ? clear_bhb_loop+0x60/0xb0
[  464.731920][ T7170]  ? clear_bhb_loop+0x60/0xb0
[  464.736659][ T7170]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  464.742689][ T7170] RIP: 0033:0x7fc9ab99e159
[  464.747143][ T7170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.767389][ T7170] RSP: 002b:00007fc9ac83d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  464.775929][ T7170] RAX: ffffffffffffffda RBX: 00007fc9abc25fa0 RCX: 00007fc9ab99e159
[  464.783941][ T7170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  464.792066][ T7170] RBP: 00007fc9aba3503b R08: 0000000000000000 R09: 0000000000000000
[  464.800155][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  464.808225][ T7170] R13: 00007fc9abc26038 R14: 00007fc9abc25fa0 R15: 00007ffd8223d998
[  464.816228][ T7170]  </TASK>
[  465.209363][ T7184] binder: 7172:7184 ioctl c0306201 0 returned -14
[  465.627765][ T7170] overlayfs: unrecognized mount option "++-[&*'þ%*})" or missing value
[  465.845600][ T7187] loop5: detected capacity change from 0 to 4096
[  465.861086][ T7187] EXT4-fs: inline encryption not supported
[  465.873690][ T7187] EXT4-fs (loop5): Test dummy encryption mode enabled
[  467.398311][ T7187] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  467.406903][ T7187] System zones: 0-5
[  467.445287][ T7187] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  467.933041][ T5683] EXT4-fs (loop5): unmounting filesystem.
[  468.110398][ T7201] comedi comedi1: Minor 4 could not be opened
[  471.404740][ T4325] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  473.775402][ T4325] usb 4-1: Using ep0 maxpacket: 8
[  473.957116][ T4325] usb 4-1: device descriptor read/all, error -71
[  474.790867][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'.
[  481.746218][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'.
[  483.062297][ T7392] loop3: detected capacity change from 0 to 128
[  485.562245][ T7400] device dummy0 entered promiscuous mode
[  487.100690][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'.
[  489.385535][ T7433] CIFS: Attempting to mount \\127.0.0.1\share
[  489.527963][ T7443] CIFS: VFS: Invalid response size 0 for command 0
[  489.755773][ T7433] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)'
[  489.849882][ T7433] CIFS: VFS: cifs_mount failed w/return code = -5
[  490.619810][ T7472] ipt_REJECT: TCP_RESET invalid for non-tcp
[  491.331721][ T7474] device dummy0 entered promiscuous mode
[  491.825021][   T41] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  492.059004][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'.
[  492.576645][   T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  492.641671][   T41] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  492.651253][   T41] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  492.661096][   T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.971366][ T7495] loop4: detected capacity change from 0 to 4096
[  492.979069][ T7495] ntfs3: Unknown parameter 'ntfs3'
[  493.867092][   T41] usb 4-1: config 0 descriptor??
[  493.903916][ T5170] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  495.080769][ T7524] ipt_REJECT: TCP_RESET invalid for non-tcp
[  495.588318][   T41] usb 4-1: USB disconnect, device number 4
[  495.715835][ T7531] loop3: detected capacity change from 0 to 64
[  495.851701][ T7533] comedi comedi1: Minor 4 could not be opened
[  497.299922][ T4287] hfs: node 4:3 still has 1 user(s)!
[  499.136680][ T7558] loop4: detected capacity change from 0 to 32768
[  499.180631][ T7558] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.655 (7558)
[  499.219193][ T7558] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  499.230137][ T7558] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  499.239553][ T7558] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  499.249642][ T7558] BTRFS info (device loop4): use zstd compression, level 3
[  499.257026][ T7558] BTRFS info (device loop4): force clearing of disk cache
[  499.264379][ T7558] BTRFS info (device loop4): enabling disk space caching
[  499.271590][ T7558] BTRFS info (device loop4): disk space caching is enabled
[  500.556365][ T7558] BTRFS info (device loop4): enabling ssd optimizations
[  500.593381][ T7558] BTRFS info (device loop4): rebuilding free space tree
[  500.716273][ T7590] binder_alloc: binder_alloc_mmap_handler: 7578 200000ffe000-200001000000 already mapped failed -16
[  500.865351][ T7558] BTRFS info (device loop4): disabling free space tree
[  500.873297][ T7558] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  500.883894][ T7558] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  502.128917][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  502.138142][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  502.158720][ T7593] CIFS: Attempting to mount \\127.0.0.1\share
[  502.705062][ T7593] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)'
[  502.755380][ T7593] CIFS: VFS: cifs_mount failed w/return code = -112
[  502.986143][ T4278] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  503.423251][ T5170] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop4 scanned by udevd (5170)
[  503.884747][ T7631] comedi comedi1: Minor 4 could not be opened
[  505.605171][ T7634] loop5: detected capacity change from 0 to 4096
[  508.011852][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'.
[  509.723551][ T7677] ipt_REJECT: TCP_RESET invalid for non-tcp
[  510.349833][ T7670] CIFS: Attempting to mount \\127.0.0.1\share
[  511.341089][   T26] audit: type=1326 audit(1788991819.161:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219b9e159 code=0x7ffc0000
[  511.439816][   T26] audit: type=1326 audit(1788991819.161:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219b9e159 code=0x7ffc0000
[  511.621398][   T26] audit: type=1326 audit(1788991819.161:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f6219b9e159 code=0x7ffc0000
[  511.718821][   T26] audit: type=1326 audit(1788991819.161:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219b9e159 code=0x7ffc0000
[  511.868930][ T7670] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)'
[  511.894930][ T7670] CIFS: VFS: cifs_mount failed w/return code = -512
[  512.445101][   T26] audit: type=1326 audit(1788991819.161:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219b9e159 code=0x7ffc0000
[  512.470957][   T26] audit: type=1326 audit(1788991819.161:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f6219b9e159 code=0x7ffc0000
[  512.823045][   T26] audit: type=1326 audit(1788991819.161:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219b9e159 code=0x7ffc0000
[  513.651578][   T26] audit: type=1326 audit(1788991819.161:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219b9e159 code=0x7ffc0000
[  513.735935][   T26] audit: type=1326 audit(1788991819.161:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6219b9e159 code=0x7ffc0000
[  513.769354][   T26] audit: type=1326 audit(1788991819.171:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219b9e159 code=0x7ffc0000
[  515.323420][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.691'.
[  515.579950][ T7731] netlink: 404 bytes leftover after parsing attributes in process `syz.4.694'.
[  519.045199][ T7762] netlink: 404 bytes leftover after parsing attributes in process `syz.3.707'.
[  523.144000][ T7801] netlink: 404 bytes leftover after parsing attributes in process `syz.4.721'.
[  524.003713][ T7811] Cannot find add_set index 0 as target
[  526.196971][ T7846] netlink: 404 bytes leftover after parsing attributes in process `syz.3.733'.
[  529.494236][ T7882] CIFS: Attempting to mount \\127.0.0.1\share
[  530.439421][ T7882] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)'
[  530.446542][ T7882] CIFS: VFS: cifs_mount failed w/return code = -512
[  531.394395][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'.
[  532.469970][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'.
[  533.224928][ T7937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.756'.
[  533.234144][ T7937] netlink: 84 bytes leftover after parsing attributes in process `syz.1.756'.
[  537.867757][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'.
[  538.762404][ T7979] tipc: Failed to remove unknown binding: 66,0,0/0:3798462363/3798462364
[  538.975745][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  538.975877][   T26] audit: type=1326 audit(1788991846.821:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.768" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb375d9e159 code=0x7ffc0000
[  539.163033][ T7998] netlink: 44 bytes leftover after parsing attributes in process `syz.5.769'.
[  539.172152][ T7998] netlink: 84 bytes leftover after parsing attributes in process `syz.5.769'.
[  539.773584][   T26] audit: type=1326 audit(1788991846.851:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.768" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fb375d9e159 code=0x7ffc0000
[  539.986027][   T26] audit: type=1326 audit(1788991846.851:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.768" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb375d9e159 code=0x7ffc0000
[  540.242932][   T26] audit: type=1326 audit(1788991846.851:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.768" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb375d9e159 code=0x7ffc0000
[  540.323076][ T8013] netlink: 316 bytes leftover after parsing attributes in process `syz.5.772'.
[  541.059777][   T26] audit: type=1326 audit(1788991846.851:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.768" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb375d9e159 code=0x7ffc0000
[  541.089110][   T26] audit: type=1326 audit(1788991846.851:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.768" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb375d9e159 code=0x7ffc0000
[  541.114084][   T26] audit: type=1326 audit(1788991846.851:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.768" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb375d9e159 code=0x7ffc0000
[  541.146186][   T26] audit: type=1326 audit(1788991846.851:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.768" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb375d9e159 code=0x7ffc0000
[  541.242907][   T26] audit: type=1326 audit(1788991846.851:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.768" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb375d9e159 code=0x7ffc0000
[  541.483637][   T26] audit: type=1326 audit(1788991846.851:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.768" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb375d9e159 code=0x7ffc0000
[  542.379854][ T8026] loop5: detected capacity change from 0 to 1764
[  544.445835][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'.
[  545.370098][   T26] kauditd_printk_skb: 15 callbacks suppressed
[  545.370120][   T26] audit: type=1326 audit(1788991852.621:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.4.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ab99e159 code=0x7ffc0000
[  545.479739][ T8058] netlink: 316 bytes leftover after parsing attributes in process `syz.1.786'.
[  545.550154][   T26] audit: type=1326 audit(1788991853.251:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.4.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fc9ab99e159 code=0x7ffc0000
[  545.716162][   T26] audit: type=1326 audit(1788991853.251:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.4.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ab99e159 code=0x7ffc0000
[  545.795683][   T26] audit: type=1326 audit(1788991853.251:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.4.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc9ab99e159 code=0x7ffc0000
[  546.637961][   T26] audit: type=1326 audit(1788991853.251:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.4.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ab99e159 code=0x7ffc0000
[  546.771445][ T4289] Bluetooth: hci2: Malformed Event: 0x2f
[  547.511924][   T26] audit: type=1326 audit(1788991853.251:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.4.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc9ab99e159 code=0x7ffc0000
[  547.536751][   T26] audit: type=1326 audit(1788991853.251:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.4.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ab99e159 code=0x7ffc0000
[  547.562284][   T26] audit: type=1326 audit(1788991853.251:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.4.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9ab99e159 code=0x7ffc0000
[  547.589741][   T26] audit: type=1326 audit(1788991853.261:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.4.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ab99e159 code=0x7ffc0000
[  547.788589][   T26] audit: type=1326 audit(1788991853.261:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.4.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc9ab99e159 code=0x7ffc0000
[  548.260263][ T8081] fuse: Bad value for 'fd'
[  548.373568][ T8084] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  548.377490][ T8081] netlink: 32 bytes leftover after parsing attributes in process `syz.5.791'.
[  548.588297][ T8093] netlink: 404 bytes leftover after parsing attributes in process `syz.4.796'.
[  549.900710][ T8103] usb0: HOST MAC 5e:79:ae:89:d0:d5
[  549.906969][ T8103] usb0: MAC c6:e2:73:e9:8a:0e
[  551.064923][ T5693] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  551.324518][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  551.324535][   T26] audit: type=1326 audit(1788991859.161:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  551.435764][ T5693] usb 1-1: Dual-Role OTG device on HNP port
[  551.444732][ T5693] usb 1-1: New USB device found, idVendor=0000, idProduct=0104, bcdDevice= 6.01
[  551.453834][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.147259][   T26] audit: type=1326 audit(1788991859.301:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  552.261031][ T5693] cdc_ncm 1-1:1.0: MAC-Address: 5e:79:ae:89:d0:d5
[  552.302620][ T5693] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 5e:79:ae:89:d0:d5
[  552.333115][   T26] audit: type=1326 audit(1788991859.301:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  552.431044][   T26] audit: type=1326 audit(1788991859.301:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  553.923276][   T26] audit: type=1326 audit(1788991859.301:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  554.067632][   T26] audit: type=1326 audit(1788991859.301:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  554.145897][ T8155] netlink: 404 bytes leftover after parsing attributes in process `syz.0.811'.
[  554.178683][   T26] audit: type=1326 audit(1788991859.301:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  554.277415][   T26] audit: type=1326 audit(1788991859.311:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  554.384666][   T26] audit: type=1326 audit(1788991859.311:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  554.443422][ T8165] loop4: detected capacity change from 0 to 512
[  554.474523][ T8165] EXT4-fs: Mount option(s) incompatible with ext2
[  554.519286][   T26] audit: type=1326 audit(1788991859.671:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  556.525355][   T26] audit: type=1326 audit(1788991860.031:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  557.492543][   T26] audit: type=1326 audit(1788991860.031:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  557.539849][   T26] audit: type=1326 audit(1788991860.081:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  557.594165][   T26] audit: type=1326 audit(1788991860.081:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  557.701805][   T26] audit: type=1326 audit(1788991860.081:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  557.833260][   T26] audit: type=1326 audit(1788991860.081:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  557.961929][   T26] audit: type=1326 audit(1788991860.151:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  558.170659][   T26] audit: type=1326 audit(1788991860.151:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.801" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc99e159 code=0x7ffc0000
[  558.225616][ T8209] netlink: 404 bytes leftover after parsing attributes in process `syz.4.822'.
[  558.318904][ T8213] netlink: 44 bytes leftover after parsing attributes in process `syz.3.821'.
[  558.328250][ T8213] netlink: 84 bytes leftover after parsing attributes in process `syz.3.821'.
[  559.499883][   T26] audit: type=1326 audit(1788991867.341:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.0.825" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219b9e159 code=0x7ffc0000
[  560.250810][ T8226] loop3: detected capacity change from 0 to 1024
[  560.340411][   T26] audit: type=1326 audit(1788991868.091:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.0.825" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f6219b9e159 code=0x7ffc0000
[  560.419071][ T8226] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  560.845074][ T8240] netlink: 132 bytes leftover after parsing attributes in process `syz.3.828'.
[  561.325688][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  561.477415][ T8242] loop4: detected capacity change from 0 to 1764
[  563.127142][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  563.134211][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  568.335091][ T8271] netlink: 404 bytes leftover after parsing attributes in process `syz.1.837'.
[  569.581091][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'.
[  569.960048][ T8294] loop5: detected capacity change from 0 to 1024
[  570.444440][ T8294] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  570.687089][ T8282] team0: Port device team_slave_0 removed
[  570.977954][ T8309] netlink: 132 bytes leftover after parsing attributes in process `syz.5.843'.
[  571.454161][ T5683] EXT4-fs (loop5): unmounting filesystem.
[  572.331565][ T8324] loop4: detected capacity change from 0 to 512
[  572.343407][ T8324] ext4: Bad value for 'journal'
[  573.313750][ T8269] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  573.324093][ T8329] capability: warning: `syz.0.849' uses deprecated v2 capabilities in a way that may be insecure
[  573.418799][ T8330] netlink: 32 bytes leftover after parsing attributes in process `syz.5.850'.
[  575.436260][ T8344] netlink: 404 bytes leftover after parsing attributes in process `syz.5.854'.
[  577.617355][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'.
[  578.003909][ T8359] team0: Port device team_slave_0 removed
[  579.555430][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready
[  582.326114][ T8398] null_blk: zone_size must be power-of-two
[  582.398704][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'.
[  583.998644][ T8412] netlink: 404 bytes leftover after parsing attributes in process `syz.0.870'.
[  584.109382][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.871'.
[  584.391664][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'.
[  585.556078][ T8419] netlink: 132 bytes leftover after parsing attributes in process `syz.1.859'.
[  588.101537][ T8440] fuse: Bad value for 'fd'
[  588.177124][ T8440] netlink: 32 bytes leftover after parsing attributes in process `syz.3.863'.
[  588.792436][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.879'.
[  589.730780][ T8462] team0: Port device team_slave_0 removed
[  589.771327][ T8461] sctp: failed to load transform for md5: -2
[  589.827797][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'.
[  590.075483][ T8484] netlink: 404 bytes leftover after parsing attributes in process `syz.5.883'.
[  590.473499][ T8490] autofs4:pid:8490:autofs_fill_super: called with bogus options
[  592.889252][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'.
[  593.595607][ T8516] dlm: no local IP address has been set
[  593.601554][ T8516] dlm: cannot start dlm midcomms -107
[  593.944837][ T4378] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  594.314919][ T4378] usb 2-1: Using ep0 maxpacket: 32
[  594.327636][ T4378] usb 2-1: no configurations
[  594.332863][ T4378] usb 2-1: can't read configurations, error -22
[  594.494822][ T4378] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  594.714764][ T4378] usb 2-1: Using ep0 maxpacket: 32
[  594.727525][ T4378] usb 2-1: no configurations
[  594.775039][ T4378] usb 2-1: can't read configurations, error -22
[  594.812832][ T4378] usb usb2-port1: attempt power cycle
[  595.392240][ T8537] No such timeout policy "syz1"
[  595.816735][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.894'.
[  596.216747][ T4378] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  596.295396][ T4378] usb 2-1: Using ep0 maxpacket: 32
[  596.310135][ T4378] usb 2-1: no configurations
[  596.464680][ T4378] usb 2-1: can't read configurations, error -22
[  597.854792][ T4378] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  598.111462][ T8568] tipc: MTU too low for tipc bearer
[  599.002302][ T8571] loop4: detected capacity change from 0 to 1
[  599.007352][ T8571] squashfs: Unknown parameter 'threads'
[  599.659445][ T4378] usb 2-1: device descriptor read/8, error -71
[  599.804871][ T4378] usb usb2-port1: unable to enumerate USB device
[  600.037841][   T26] kauditd_printk_skb: 28 callbacks suppressed
[  600.037858][   T26] audit: type=1326 audit(1788991907.881:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.5.899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b19d9e159 code=0x0
[  600.166924][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.5.899'.
[  600.261606][ T8579] netlink: 404 bytes leftover after parsing attributes in process `syz.4.900'.
[  600.983134][ T8593] loop3: detected capacity change from 0 to 2048
[  602.161059][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.907'.
[  602.196004][ T8593] UDF-fs: bad mount option "0000000000000000000000000000000000000000" or missing value
[  602.608113][ T8609] xt_hashlimit: size too large, truncated to 1048576
[  602.615198][ T8609] xt_hashlimit: max too large, truncated to 1048576
[  602.633155][ T8609] Bluetooth: ISO socket layer initialized
[  603.677680][ T8609] tty tty26: ldisc open failed (-12), clearing slot 25
[  605.647958][ T8639] loop5: detected capacity change from 0 to 256
[  605.659476][ T8639] exfat: Deprecated parameter 'namecase'
[  605.665530][ T8639] exfat: Deprecated parameter 'namecase'
[  605.696826][ T8639] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  606.267152][ T8641] netlink: 132 bytes leftover after parsing attributes in process `syz.0.911'.
[  607.291426][ T8646] netlink: 404 bytes leftover after parsing attributes in process `syz.0.915'.
[  609.721530][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'.
[  609.775838][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'.
[  612.564973][ T4289] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  617.523102][ T8718] CUSE: unknown device info ""
[  617.528328][ T8718] CUSE: unknown device info ""
[  617.533414][ T8718] CUSE: unknown device info ""
[  617.538401][ T8718] CUSE: unknown device info ""
[  617.543341][ T8718] CUSE: unknown device info "ÿ"
[  617.591215][ T8718] CUSE: zero length info key specified
[  618.349506][ T8739] netlink: 404 bytes leftover after parsing attributes in process `syz.0.929'.
[  620.125810][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'.
[  624.568065][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.574578][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  625.031956][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'.
[  626.545894][ T8858] loop4: detected capacity change from 0 to 4096
[  626.608358][ T8860] netlink: 404 bytes leftover after parsing attributes in process `syz.3.945'.
[  626.636920][ T8862] snd_dummy snd_dummy.0: control 0:0:4:syz0:7 is already present
[  626.646581][ T8681] Bluetooth: hci5: command 0x0406 tx timeout
[  626.700943][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.946'.
[  626.710066][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.946'.
[  626.719016][ T8862] netlink: 'syz.5.946': attribute type 20 has an invalid length.
[  626.939499][ T8863] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13)
[  626.946803][ T8863] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  626.958039][ T8863] vhci_hcd vhci_hcd.0: Device attached
[  627.255000][ T7623] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  627.471820][ T8864] vhci_hcd: connection reset by peer
[  627.541084][ T4377] vhci_hcd: stop threads
[  627.651656][ T4377] vhci_hcd: release socket
[  627.832400][ T4377] vhci_hcd: disconnect device
[  629.434612][ T8858] NILFS (loop4): error -4 creating segctord thread
[  630.064027][ T8877] netlink: 'syz.4.949': attribute type 10 has an invalid length.
[  631.374805][ T8878] netlink: 'syz.3.947': attribute type 10 has an invalid length.
[  631.716140][ T8883] netlink: 96 bytes leftover after parsing attributes in process `syz.1.951'.
[  632.485190][ T7623] vhci_hcd: vhci_device speed not set
[  633.955020][ T8889] loop5: detected capacity change from 0 to 512
[  634.042625][ T8889] FAT-fs (loop5): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1)
[  634.617751][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'.
[  635.833928][ T8902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  635.834442][ T8902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  635.843236][ T8902] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19
[  635.843318][ T8902] caif:caif_disconnect_client(): nothing to disconnect
[  635.848950][ T8899] ==================================================================
[  635.849010][ T8899] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0
[  635.849137][ T8899] Write of size 4 at addr ffffc900047e9fc0 by task syz.5.952/8899
[  635.849181][ T8899] 
[  635.849187][ T8899] CPU: 1 PID: 8899 Comm: syz.5.952 Not tainted syzkaller #0
[  635.849232][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  635.849245][ T8899] Call Trace:
[  635.849255][ T8899]  <TASK>
[  635.849267][ T8899]  dump_stack_lvl+0x188/0x24e
[  635.849299][ T8899]  ? sys_imageblit+0x1ba8/0x25d0
[  635.849322][ T8899]  ? show_regs_print_info+0x12/0x12
[  635.849352][ T8899]  ? load_image+0x410/0x410
[  635.849378][ T8899]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  635.849406][ T8899]  ? __virt_addr_valid+0xbf/0x540
[  635.849468][ T8899]  ? sys_imageblit+0x1ba8/0x25d0
[  635.849489][ T8899]  print_report+0xa8/0x210
[  635.849523][ T8899]  kasan_report+0x10b/0x140
[  635.849575][ T8899]  ? sys_imageblit+0x1ba8/0x25d0
[  635.849600][ T8899]  sys_imageblit+0x1ba8/0x25d0
[  635.849629][ T8899]  ? sys_copyarea+0x2530/0x2530
[  635.849654][ T8899]  ? __sanitizer_cov_trace_pc+0x2c/0x60
[  635.849709][ T8899]  drm_fb_helper_sys_imageblit+0x2e/0x510
[  635.849777][ T8899]  ? drm_fbdev_fb_imageblit+0x184/0x200
[  635.849809][ T8899]  cw_putcs+0x15ef/0x18a0
[  635.849844][ T8899]  ? cw_clear+0x250/0x250
[  635.849866][ T8899]  ? drm_fb_helper_set_suspend_unlocked+0x190/0x190
[  635.849895][ T8899]  ? fb_get_color_depth+0x15e/0x280
[  635.849921][ T8899]  fbcon_putcs+0x358/0x510
[  635.849950][ T8899]  ? cw_clear+0x250/0x250
[  635.849970][ T8899]  do_update_region+0x4e5/0x640
[  635.850000][ T8899]  ? memcpy+0x3c/0x60
[  635.850023][ T8899]  ? hide_cursor+0x320/0x320
[  635.850056][ T8899]  redraw_screen+0xa2c/0x1000
[  635.850076][ T8899]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  635.850108][ T8899]  ? clear_buffer_attributes+0x320/0x320
[  635.850129][ T8899]  ? vc_do_resize+0x1222/0x17b0
[  635.850153][ T8899]  vc_do_resize+0x122c/0x17b0
[  635.850184][ T8899]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  635.850209][ T8899]  ? vc_resize+0x50/0x50
[  635.850227][ T8899]  ? prb_read_valid+0x39/0x60
[  635.850281][ T8899]  vt_resizex+0x3ec/0x5a0
[  635.850310][ T8899]  ? vt_disallocate+0x90/0x90
[  635.850335][ T8899]  ? security_capable+0x85/0xb0
[  635.850409][ T8899]  vt_ioctl+0xfd7/0x1ca0
[  635.850437][ T8899]  ? __vt_event_wait+0x260/0x260
[  635.850467][ T8899]  ? __fget_files+0x28/0x460
[  635.850497][ T8899]  ? tty_jobctrl_ioctl+0x164/0xb00
[  635.850521][ T8899]  tty_ioctl+0x7e6/0xba0
[  635.850563][ T8899]  ? security_file_ioctl+0x7c/0xa0
[  635.850586][ T8899]  ? tty_get_icount+0xa0/0xa0
[  635.850607][ T8899]  __se_sys_ioctl+0xfa/0x170
[  635.850636][ T8899]  do_syscall_64+0x4c/0xa0
[  635.850666][ T8899]  ? clear_bhb_loop+0x60/0xb0
[  635.850693][ T8899]  ? clear_bhb_loop+0x60/0xb0
[  635.850721][ T8899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  635.850749][ T8899] RIP: 0033:0x7f2b19d9e159
[  635.850768][ T8899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.850787][ T8899] RSP: 002b:00007f2b1accb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  635.850812][ T8899] RAX: ffffffffffffffda RBX: 00007f2b1a026180 RCX: 00007f2b19d9e159
[  635.850828][ T8899] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 000000000000000b
[  635.850842][ T8899] RBP: 00007f2b19e3503b R08: 0000000000000000 R09: 0000000000000000
[  635.850856][ T8899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  635.850869][ T8899] R13: 00007f2b1a026218 R14: 00007f2b1a026180 R15: 00007ffe8d2dec78
[  635.850890][ T8899]  </TASK>
[  635.850897][ T8899] 
[  635.850902][ T8899] The buggy address belongs to a vmalloc virtual mapping
[  635.850944][ T8899] Memory state around the buggy address:
[  635.850976][ T8899]  ffffc900047e9e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  635.850989][ T8899]  ffffc900047e9f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  635.851003][ T8899] >ffffc900047e9f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  635.851013][ T8899]                                            ^
[  635.851025][ T8899]  ffffc900047ea000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  635.851038][ T8899]  ffffc900047ea080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  635.851058][ T8899] ==================================================================
[  635.851076][ T8899] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  635.851085][ T8899] CPU: 1 PID: 8899 Comm: syz.5.952 Not tainted syzkaller #0
[  635.851105][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  635.851115][ T8899] Call Trace:
[  635.851123][ T8899]  <TASK>
[  635.851129][ T8899]  dump_stack_lvl+0x188/0x24e
[  635.851158][ T8899]  ? memcpy+0x3c/0x60
[  635.851177][ T8899]  ? show_regs_print_info+0x12/0x12
[  635.851204][ T8899]  ? load_image+0x410/0x410
[  635.851233][ T8899]  panic+0x2d3/0x710
[  635.851254][ T8899]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  635.851283][ T8899]  ? bpf_jit_dump+0xd0/0xd0
[  635.851307][ T8899]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  635.851332][ T8899]  ? _raw_spin_unlock+0x40/0x40
[  635.851357][ T8899]  check_panic_on_warn+0x80/0xa0
[  635.851407][ T8899]  ? sys_imageblit+0x1ba8/0x25d0
[  635.851427][ T8899]  end_report+0x66/0x110
[  635.851453][ T8899]  kasan_report+0x118/0x140
[  635.851481][ T8899]  ? sys_imageblit+0x1ba8/0x25d0
[  635.851505][ T8899]  sys_imageblit+0x1ba8/0x25d0
[  635.851531][ T8899]  ? sys_copyarea+0x2530/0x2530
[  635.851555][ T8899]  ? __sanitizer_cov_trace_pc+0x2c/0x60
[  635.851580][ T8899]  drm_fb_helper_sys_imageblit+0x2e/0x510
[  635.851609][ T8899]  ? drm_fbdev_fb_imageblit+0x184/0x200
[  635.851639][ T8899]  cw_putcs+0x15ef/0x18a0
[  635.851673][ T8899]  ? cw_clear+0x250/0x250
[  635.851693][ T8899]  ? drm_fb_helper_set_suspend_unlocked+0x190/0x190
[  635.851721][ T8899]  ? fb_get_color_depth+0x15e/0x280
[  635.851747][ T8899]  fbcon_putcs+0x358/0x510
[  635.851777][ T8899]  ? cw_clear+0x250/0x250
[  635.851796][ T8899]  do_update_region+0x4e5/0x640
[  635.851815][ T8899]  ? memcpy+0x3c/0x60
[  635.851838][ T8899]  ? hide_cursor+0x320/0x320
[  635.851862][ T8899]  redraw_screen+0xa2c/0x1000
[  635.851881][ T8899]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  635.851910][ T8899]  ? clear_buffer_attributes+0x320/0x320
[  635.851931][ T8899]  ? vc_do_resize+0x1222/0x17b0
[  635.851954][ T8899]  vc_do_resize+0x122c/0x17b0
[  635.851985][ T8899]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  635.852009][ T8899]  ? vc_resize+0x50/0x50
[  635.852027][ T8899]  ? prb_read_valid+0x39/0x60
[  635.852059][ T8899]  vt_resizex+0x3ec/0x5a0
[  635.852087][ T8899]  ? vt_disallocate+0x90/0x90
[  635.852112][ T8899]  ? security_capable+0x85/0xb0
[  635.852144][ T8899]  vt_ioctl+0xfd7/0x1ca0
[  635.852170][ T8899]  ? __vt_event_wait+0x260/0x260
[  635.852200][ T8899]  ? __fget_files+0x28/0x460
[  635.852228][ T8899]  ? tty_jobctrl_ioctl+0x164/0xb00
[  635.852251][ T8899]  tty_ioctl+0x7e6/0xba0
[  635.852271][ T8899]  ? security_file_ioctl+0x7c/0xa0
[  635.852292][ T8899]  ? tty_get_icount+0xa0/0xa0
[  635.852314][ T8899]  __se_sys_ioctl+0xfa/0x170
[  635.852341][ T8899]  do_syscall_64+0x4c/0xa0
[  635.852368][ T8899]  ? clear_bhb_loop+0x60/0xb0
[  635.852394][ T8899]  ? clear_bhb_loop+0x60/0xb0
[  635.852422][ T8899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  635.852448][ T8899] RIP: 0033:0x7f2b19d9e159
[  635.852464][ T8899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.852481][ T8899] RSP: 002b:00007f2b1accb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  635.852501][ T8899] RAX: ffffffffffffffda RBX: 00007f2b1a026180 RCX: 00007f2b19d9e159
[  635.852516][ T8899] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 000000000000000b
[  635.852530][ T8899] RBP: 00007f2b19e3503b R08: 0000000000000000 R09: 0000000000000000
[  635.852542][ T8899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  635.852554][ T8899] R13: 00007f2b1a026218 R14: 00007f2b1a026180 R15: 00007ffe8d2dec78
[  635.852575][ T8899]  </TASK>
[  635.852817][ T8899] Kernel Offset: disabled
[  636.675257][ T8899] Rebooting in 86400 seconds..