last executing test programs:

2m19.504486606s ago: executing program 1 (id=178):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000080)=0x1, 0xff79)

2m18.603845964s ago: executing program 1 (id=185):
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0), 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)

2m18.573986359s ago: executing program 1 (id=186):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="8b", 0x1}], 0x1}}], 0x1, 0x48800)
r1 = socket(0x2, 0x1, 0x0)
r2 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpid()
kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r4, 0xab00, r1)
shutdown(r0, 0x2)
recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x10143, 0x0)

2m18.346673338s ago: executing program 1 (id=188):
syz_open_procfs(0x0, 0x0)
io_setup(0x400e, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x11, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000480)={[{@errors_remount}, {@mblk_io_submit}, {@orlov}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@noinit_itable}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020)

2m18.255060661s ago: executing program 1 (id=189):
r0 = fanotify_init(0x1a, 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x124)
fanotify_mark(r0, 0x1, 0x4000001a, r1, 0x0)
r2 = inotify_init1(0x80000)
inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000726)
r3 = fanotify_init(0x2, 0x1)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fanotify_mark(r3, 0x451, 0x8, r4, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
r6 = fanotify_init(0x4, 0x101000)
fanotify_mark(r6, 0x541, 0x40001019, r5, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)

2m16.46603979s ago: executing program 1 (id=196):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", <r1=>0xffffffffffffffff})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x40000002, "fa02791d2a69a2610f02000000000000001100010000000800", <r3=>0xffffffffffffffff})
r4 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1b0, 0xa, 0x148, 0x1b0, 0x10, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0xffffffff, 'team_slave_0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x190, 0x1b0, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@recent0={{0xf8}, {0xfffffffa, 0x40e151, 0x2, 0x0, 'syz0\x00', 0xfa}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x6c}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x2, 0x7, [0x8, 0x2b, 0xe, 0x9, 0x40, 0x16, 0x1a, 0x25, 0x16, 0x28, 0x3a, 0x26, 0x23, 0x8022, 0x401a, 0x19], 0x0, 0x1000, 0x7}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3c8)
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, <r5=>0xffffffffffffffff})
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r7, <r8=>0xffffffffffffffff})
close(0x3)
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec50600", r8})

2m16.394230167s ago: executing program 32 (id=196):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", <r1=>0xffffffffffffffff})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x40000002, "fa02791d2a69a2610f02000000000000001100010000000800", <r3=>0xffffffffffffffff})
r4 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1b0, 0xa, 0x148, 0x1b0, 0x10, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0xffffffff, 'team_slave_0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x190, 0x1b0, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@recent0={{0xf8}, {0xfffffffa, 0x40e151, 0x2, 0x0, 'syz0\x00', 0xfa}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x6c}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x2, 0x7, [0x8, 0x2b, 0xe, 0x9, 0x40, 0x16, 0x1a, 0x25, 0x16, 0x28, 0x3a, 0x26, 0x23, 0x8022, 0x401a, 0x19], 0x0, 0x1000, 0x7}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3c8)
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, <r5=>0xffffffffffffffff})
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r7, <r8=>0xffffffffffffffff})
close(0x3)
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec50600", r8})

49.511015253s ago: executing program 3 (id=633):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r1=>0x0})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r1})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'})

48.973236247s ago: executing program 3 (id=635):
io_setup(0x8, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
socket(0xa, 0x3, 0xff)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

48.023792076s ago: executing program 3 (id=641):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp={0xd, 0x0, 0x0, 0x2, 0x5, 0x8000, 0xaf31, 0x81}}}}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

45.93872777s ago: executing program 3 (id=649):
syz_open_procfs(0x0, 0x0)
io_setup(0x400e, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x11, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000480)={[{@errors_remount}, {@mblk_io_submit}, {@orlov}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@noinit_itable}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020)

45.807472027s ago: executing program 3 (id=651):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)

45.624068815s ago: executing program 5 (id=653):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194)

44.941406401s ago: executing program 3 (id=656):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840)

44.869758009s ago: executing program 33 (id=656):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840)

44.733515154s ago: executing program 5 (id=658):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r1=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)

44.670998073s ago: executing program 5 (id=660):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194)

43.800653576s ago: executing program 5 (id=661):
syz_open_procfs(0x0, 0x0)
io_setup(0x400e, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x11, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000480)={[{@errors_remount}, {@mblk_io_submit}, {@orlov}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@noinit_itable}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020)

43.733797884s ago: executing program 5 (id=662):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

39.463434536s ago: executing program 5 (id=666):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES32], 0x44}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20000000}, 0x1c)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

39.400149625s ago: executing program 34 (id=666):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES32], 0x44}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20000000}, 0x1c)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

5.888064159s ago: executing program 4 (id=847):
r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xcaR4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0x0, 0x0)
r3 = fsmount(r0, 0x0, 0x0)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000180)=""/82, 0x52)

5.795232202s ago: executing program 6 (id=849):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
tkill(r3, 0x2e)
ptrace$peeksig(0x4209, r3, &(0x7f0000000340)={0x0, 0x0, 0x2e}, 0x0)

4.800432713s ago: executing program 6 (id=852):
syz_mount_image$exfat(0x0, &(0x7f0000000180)='./bus\x00', 0x2801cb0, 0x0, 0x0, 0x0, &(0x7f0000002980))
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414bb000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0)

4.018873253s ago: executing program 0 (id=853):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlinkprop={0x44, 0x6c, 0x701, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x400}, [@IFLA_MAP={0x24, 0xe, {0x3, 0x2, 0x4, 0x8, 0x7, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000003c0)={0x20, 0x21, 0x1, 0x70bd27, 0x25dfdbfc, "", [@nested={0x10, 0x121, 0x0, 0x1, [@typed={0xefc87e4c0f2f8e4e, 0xe0, 0x0, 0x0, @u64=0x6}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x40480c4}, 0x8000)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
unshare(0x22020600)
r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x14)
r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000140)=0x4, 0x12)

4.018653393s ago: executing program 7 (id=854):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, r1, 0x9, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r5, r4, 0x9, 0x0, @void}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)

4.018341283s ago: executing program 4 (id=856):
syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x101c402, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYBLOB="893be37427efef", @ANYRESHEX], 0x2, 0xa25, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
syz_mount_image$exfat(0x0, &(0x7f00000003c0)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300))
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x121d01, 0x82)
chdir(&(0x7f0000000140)='./file0\x00')
symlinkat(&(0x7f0000000100)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0)

3.919069475s ago: executing program 0 (id=857):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
ioctl$SIOCGSKNS(r3, 0x894c, 0x0)

3.918788925s ago: executing program 7 (id=858):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

3.858955264s ago: executing program 0 (id=859):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x2b, 0x1, 0x1)
socket$key(0xf, 0x3, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})

3.812288686s ago: executing program 2 (id=860):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10011, r2, 0x78e17000)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x32, 0xffffffffffffffff, 0x72a4c000)

3.810651376s ago: executing program 4 (id=861):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x50}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80)
r3 = socket$tipc(0x1e, 0x5, 0x0)
accept4$tipc(r3, &(0x7f0000000040)=@id, &(0x7f00000000c0)=0x10, 0x0)

3.350803713s ago: executing program 2 (id=862):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
tkill(r3, 0x2e)
ptrace$peeksig(0x4209, r3, &(0x7f0000000340)={0x0, 0x0, 0x2e}, 0x0)

3.305864284s ago: executing program 0 (id=863):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000))
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

3.305717664s ago: executing program 6 (id=864):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$key(0xf, 0x3, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x2, 0x3b9}, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1})

2.687225783s ago: executing program 7 (id=865):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x4040080)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
close(0x3)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)

2.639968785s ago: executing program 7 (id=866):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
socket(0x1, 0x803, 0x0)

2.197136095s ago: executing program 6 (id=867):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlinkprop={0x44, 0x6c, 0x701, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x400}, [@IFLA_MAP={0x24, 0xe, {0x3, 0x2, 0x4, 0x8, 0x7, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000003c0)={0x20, 0x21, 0x1, 0x70bd27, 0x25dfdbfc, "", [@nested={0x10, 0x121, 0x0, 0x1, [@typed={0xefc87e4c0f2f8e4e, 0xe0, 0x0, 0x0, @u64=0x6}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x40480c4}, 0x8000)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
unshare(0x22020600)
r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x14)
r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000140)=0x4, 0x12)

2.196989285s ago: executing program 4 (id=868):
r0 = socket$xdp(0x2c, 0x3, 0x0)
syslog(0x3, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x200c17a)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/58, 0x10c000, 0x800, 0x0, 0x1}, 0x20)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

2.193196804s ago: executing program 7 (id=877):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000))
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

2.192338464s ago: executing program 0 (id=869):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c)

2.192123254s ago: executing program 2 (id=870):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_io_uring_setup(0x123b, 0x0, 0x0, &(0x7f0000000380))
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setrlimit(0x9, 0x0)
r2 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c)
getrlimit(0x3, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x800)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x1, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x80000000, 0xe3]}}, 0x5c)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200)=0x6067, 0x8)

2.061012151s ago: executing program 2 (id=871):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
userfaultfd(0x1)
socket$netlink(0x10, 0x3, 0x9)
r0 = timerfd_create(0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f4800400020000000000080001000000000008"], 0x3c}}, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
socket$alg(0x26, 0x5, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x6, 0x100000001, 0x4e5, 0xffffffff, 0x2627bc41, 0xba4, 0x3, 0xfffffffffefffff8}, 0x0, &(0x7f00000000c0)={0x7ff, 0x7, 0x0, 0x4, 0x1, 0x16, 0x1, 0x200007f}, 0x0, 0x0)
signalfd4(r2, &(0x7f0000000100)={[0x5]}, 0x8, 0x800)

1.318870447s ago: executing program 4 (id=872):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

1.317555047s ago: executing program 7 (id=873):
syz_mount_image$exfat(0x0, &(0x7f0000000180)='./bus\x00', 0x2801cb0, 0x0, 0x0, 0x0, &(0x7f0000002980))
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414bb000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0)

1.317437277s ago: executing program 6 (id=874):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0)

731.791152ms ago: executing program 2 (id=875):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

34.573346ms ago: executing program 0 (id=876):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

33.451596ms ago: executing program 6 (id=878):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x50}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80)
r3 = socket$tipc(0x1e, 0x5, 0x0)
accept4$tipc(r3, &(0x7f0000000040)=@id, &(0x7f00000000c0)=0x10, 0x0)

30.671005ms ago: executing program 2 (id=879):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000002c0)='./file0\x00', 0x1000004, &(0x7f00000002c0)=ANY=[], 0x5, 0x11f4, &(0x7f0000002480)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil)
mlock(&(0x7f00000fc000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil)
mremap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
mremap(&(0x7f0000883000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004ce000/0x4000)=nil)
munmap(&(0x7f0000308000/0x4000)=nil, 0x4000)
mremap(&(0x7f000076c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000397000/0x1000)=nil)
munmap(&(0x7f0000866000/0x3000)=nil, 0x3000)
madvise(&(0x7f0000678000/0x14000)=nil, 0x14000, 0x12)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

0s ago: executing program 4 (id=880):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x9f09, 0x400, 0x1, 0x20e}, 0x0, &(0x7f0000000000))
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}]}}}]}, 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfe, {0xa, 0x40, 0x31, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x55}}, 0x0)

kernel console output (not intermixed with test programs):

ecomes ready
[   87.546718][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.563876][ T4919] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.565231][ T4919] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.566719][ T4919] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.568076][ T4919] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.577391][ T5064] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.597416][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   87.598867][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.604746][ T5064] 8021q: adding VLAN 0 to HW filter on device team0
[   87.620064][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.622147][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.623630][ T4901] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.624675][ T4901] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.626248][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.645200][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.646921][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.648289][ T4585] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.649371][ T4585] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.331724][ T4326] Bluetooth: hci1: command 0x0419 tx timeout
[   88.451996][ T4386] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.472825][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   88.485011][ T4986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.486385][ T4986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.493623][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   88.496204][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   88.573254][ T4386] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.587901][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   88.590080][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   88.606086][ T5064] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   88.607790][ T5064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.619252][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   88.635108][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   88.636960][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   88.642011][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.643652][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.647352][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.653546][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.716301][ T4386] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.722683][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   88.724025][ T4901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.725325][ T4901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.726707][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.805693][ T4386] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.924508][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.926162][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   88.936766][ T5064] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.150559][ T5241] netlink: 'syz.0.229': attribute type 4 has an invalid length.
[   90.173936][ T5241] netlink: 'syz.0.229': attribute type 17 has an invalid length.
[   90.188414][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   90.928304][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   90.930051][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   91.764104][ T5294] loop3: detected capacity change from 0 to 512
[   91.770320][ T5294] EXT4-fs: inline encryption not supported
[   91.780506][ T5294] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   91.785374][ T5294] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[   91.786794][ T5294] System zones: 1-12
[   91.788344][ T5294] EXT4-fs (loop3): 1 truncate cleaned up
[   91.789303][ T5294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   91.866595][ T5294] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full
[   92.105574][ T5286] netlink: 'syz.3.235': attribute type 6 has an invalid length.
[   92.155720][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   92.157556][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   92.160430][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   92.166270][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   92.170161][ T5064] device veth0_vlan entered promiscuous mode
[   92.180664][ T5064] device veth1_vlan entered promiscuous mode
[   92.205339][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   92.206911][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   92.208469][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   92.210018][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   92.214193][ T5064] device veth0_macvtap entered promiscuous mode
[   92.217184][ T5064] device veth1_macvtap entered promiscuous mode
[   92.224795][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.230278][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.253955][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.255651][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.257366][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.259091][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.260630][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.262584][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.265185][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.317243][ T5308] loop2: detected capacity change from 0 to 512
[   92.335736][ T5308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   92.599247][ T5308] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   93.266069][ T5308] overlayfs: statfs failed on './file0'
[   93.296480][ T4328] EXT4-fs (loop2): unmounting filesystem.
[   93.350883][    C1] sched: RT throttling activated
[   93.358255][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.360719][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.362570][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.364380][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.365849][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.367375][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.369591][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.373999][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   93.375532][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   93.377025][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   93.378534][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   93.380107][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   93.381729][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   93.774013][ T5315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.810235][ T5315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.815486][ T5315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.820255][ T5315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.835221][ T5064] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.836620][ T5064] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.838109][ T5064] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.842036][ T5064] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.918856][ T4621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.920134][ T4621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.924270][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   93.966762][ T4621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.968201][ T4621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.969638][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   94.149019][ T5338] loop5: detected capacity change from 0 to 32768
[   94.154270][ T5338] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.197 (5338)
[   94.188976][ T5338] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   94.190751][ T5338] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[   94.192259][ T5338] BTRFS info (device loop5): enabling disk space caching
[   94.193487][ T5338] BTRFS info (device loop5): force clearing of disk cache
[   94.194818][ T5338] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   94.196472][ T5338] BTRFS info (device loop5): use zstd compression, level 3
[   94.197656][ T5338] BTRFS info (device loop5): disk space caching is enabled
[   94.313828][ T5338] BTRFS info (device loop5): enabling ssd optimizations
[   94.317500][ T5338] BTRFS info (device loop5): rebuilding free space tree
[   94.329832][ T5338] BTRFS info (device loop5): disabling free space tree
[   94.331088][ T5338] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   94.332646][ T5338] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   94.488365][ T5064] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   95.529455][ T4386] device hsr_slave_0 left promiscuous mode
[   95.536746][   T27] audit: type=1326 audit(95.520:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85977ee8 code=0x7ffc0000
[   95.540388][   T27] audit: type=1326 audit(95.520:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85977ee8 code=0x7ffc0000
[   95.551264][   T27] audit: type=1326 audit(95.530:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=8 compat=0 ip=0xffff85977ee8 code=0x7ffc0000
[   95.561767][ T4386] device hsr_slave_1 left promiscuous mode
[   95.570765][   T27] audit: type=1326 audit(95.530:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85977ee8 code=0x7ffc0000
[   95.585117][   T27] audit: type=1326 audit(95.530:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85977ee8 code=0x7ffc0000
[   95.588698][   T27] audit: type=1326 audit(95.530:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8595adac code=0x7ffc0000
[   95.611925][   T27] audit: type=1326 audit(95.530:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8595adac code=0x7ffc0000
[   95.617506][   T27] audit: type=1326 audit(95.530:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85977ee8 code=0x7ffc0000
[   95.623037][   T27] audit: type=1326 audit(95.530:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85977ee8 code=0x7ffc0000
[   95.628280][   T27] audit: type=1326 audit(95.530:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff85977ee8 code=0x7ffc0000
[   95.681328][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.682615][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.684436][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.685628][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.688456][ T4386] device bridge_slave_1 left promiscuous mode
[   95.690209][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.864339][ T4386] device bridge_slave_0 left promiscuous mode
[   95.865878][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.211099][ T4386] device veth1_macvtap left promiscuous mode
[   96.212228][ T4386] device veth0_macvtap left promiscuous mode
[   96.213209][ T4386] device veth1_vlan left promiscuous mode
[   96.214147][ T4386] device veth0_vlan left promiscuous mode
[   96.648165][ T4919] EXT4-fs (loop3): unmounting filesystem.
[   98.669897][ T5467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.672573][ T5467] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.872988][ T4386] team0 (unregistering): Port device team_slave_1 removed
[  100.044583][ T4386] team0 (unregistering): Port device team_slave_0 removed
[  100.231351][ T4386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.432143][ T4386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.813336][ T4386] team0 (unregistering): Port device bond0 removed
[  101.941951][ T4386] bond0 (unregistering): Released all slaves
[  102.388186][ T5474] loop5: detected capacity change from 0 to 736
[  102.520708][ T5469] team0 (unregistering): Port device team_slave_0 removed
[  102.744819][ T5480] syz.0.270 uses obsolete (PF_INET,SOCK_PACKET)
[  102.769889][ T5469] team0 (unregistering): Port device team_slave_1 removed
[  102.916973][ T5493] binder: 5492:5493 tried to acquire reference to desc 0, got 1 instead
[  102.919914][ T5493] binder: 5492:5493 got new transaction with bad transaction stack, transaction 39 has target 5492:0
[  102.922376][ T5493] binder: 5492:5493 transaction call to 5492:0 failed 44/29201/-71, size 0-0 line 3105
[  102.924921][ T5493] binder: 5492:5493 ioctl c0306201 20000480 returned -14
[  102.926414][ T4371] binder: release 5492:5493 transaction 39 out, still active
[  102.927619][ T4371] binder: undelivered TRANSACTION_COMPLETE
[  102.928585][ T4371] binder: undelivered TRANSACTION_ERROR: 29201
[  102.981239][ T4371] binder: send failed reply for transaction 39, target dead
[  103.429966][ T5506] loop3: detected capacity change from 0 to 16
[  103.436940][ T5506] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  103.604449][ T5518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'.
[  103.689020][ T5522] capability: warning: `syz.5.279' uses deprecated v2 capabilities in a way that may be insecure
[  103.970555][ T5518] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  104.165212][ T5532] loop0: detected capacity change from 0 to 1024
[  104.267817][ T5518] device bond1 entered promiscuous mode
[  104.272110][ T5518] device bridge1 entered promiscuous mode
[  104.315585][ T5532] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  105.234907][ T4322] EXT4-fs (loop0): unmounting filesystem.
[  106.194750][ T5559] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.807607][   T27] kauditd_printk_skb: 20 callbacks suppressed
[  106.807627][   T27] audit: type=1326 audit(106.790:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.0.294" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90d77ee8 code=0x0
[  107.584972][ T5559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.600020][ T5559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.908066][ T5559] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.918841][ T5559] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.920322][ T5559] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.921869][ T5559] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.442309][ T5559] device bond1 left promiscuous mode
[  108.443276][ T5559] device bridge1 left promiscuous mode
[  108.565221][ T5628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.302'.
[  108.568134][ T5628] netlink: 24 bytes leftover after parsing attributes in process `syz.5.302'.
[  108.658171][ T5636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'.
[  108.684370][ T4334] block nbd0: Receive control failed (result -1)
[  108.899272][ T5660] Invalid ELF header magic: != ELF
[  109.173973][ T5658] batman_adv: batadv0: Adding interface: dummy0
[  109.177390][ T5658] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.181537][ T5658] batman_adv: batadv0: Interface activated: dummy0
[  109.208437][ T5658] net_ratelimit: 11 callbacks suppressed
[  109.208449][ T5658] batadv0: mtu less than device minimum
[  109.211970][ T5658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.215014][ T5658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.218172][ T5658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.221210][ T5658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.224134][ T5658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.227080][ T5658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.230062][ T5658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.233132][ T5658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.236068][ T5658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.529754][ T5655] Invalid option length (57448) for dns_resolver key
[  109.690283][ T5682] loop0: detected capacity change from 0 to 256
[  109.719072][ T5685] loop2: detected capacity change from 0 to 512
[  109.726235][ T5682] FAT-fs (loop0): Directory bread(block 64) failed
[  109.727314][ T5682] FAT-fs (loop0): Directory bread(block 65) failed
[  109.728428][ T5682] FAT-fs (loop0): Directory bread(block 66) failed
[  109.733825][ T5682] FAT-fs (loop0): Directory bread(block 67) failed
[  109.734888][ T5682] FAT-fs (loop0): Directory bread(block 68) failed
[  109.735811][ T5682] FAT-fs (loop0): Directory bread(block 69) failed
[  109.736882][ T5682] FAT-fs (loop0): Directory bread(block 70) failed
[  109.737969][ T5682] FAT-fs (loop0): Directory bread(block 71) failed
[  109.738914][ T5682] FAT-fs (loop0): Directory bread(block 72) failed
[  109.747284][ T5682] FAT-fs (loop0): Directory bread(block 73) failed
[  109.783115][ T5685] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  109.803523][ T5685] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 12: comm syz.2.316: lblock 17 mapped to illegal pblock 12 (length 17)
[  109.811000][ T5685] EXT4-fs (loop2): Remounting filesystem read-only
[  109.813025][ T5685] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.316: lblock 23 mapped to illegal pblock 18 (length 1)
[  109.823440][ T5685] EXT4-fs (loop2): Remounting filesystem read-only
[  109.826049][ T5685] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.316: lblock 23 mapped to illegal pblock 18 (length 1)
[  109.837708][ T5685] EXT4-fs (loop2): Remounting filesystem read-only
[  109.846902][ T5685] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.316: lblock 23 mapped to illegal pblock 18 (length 1)
[  109.879451][ T5685] EXT4-fs (loop2): Remounting filesystem read-only
[  109.882847][ T5685] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.316: lblock 23 mapped to illegal pblock 18 (length 1)
[  109.895888][ T5685] EXT4-fs (loop2): Remounting filesystem read-only
[  109.897650][ T5685] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.316: lblock 23 mapped to illegal pblock 18 (length 1)
[  109.905885][ T5685] EXT4-fs (loop2): Remounting filesystem read-only
[  109.907631][ T5685] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.316: lblock 23 mapped to illegal pblock 18 (length 1)
[  109.910051][ T5685] EXT4-fs (loop2): Remounting filesystem read-only
[  109.917339][ T5685] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.316: lblock 23 mapped to illegal pblock 18 (length 1)
[  109.921186][ T5685] EXT4-fs (loop2): Remounting filesystem read-only
[  110.232077][ T5685] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.316: lblock 23 mapped to illegal pblock 18 (length 1)
[  110.244971][ T5685] EXT4-fs (loop2): Remounting filesystem read-only
[  110.247992][ T5685] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.316: lblock 23 mapped to illegal pblock 18 (length 1)
[  110.374320][ T5704] device syzkaller1 entered promiscuous mode
[  111.620266][ T5715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'.
[  111.639063][ T5715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'.
[  112.514854][ T5741] netlink: 164 bytes leftover after parsing attributes in process `syz.2.327'.
[  113.192307][ T5762] loop2: detected capacity change from 0 to 128
[  113.234829][ T5762] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  113.918185][ T5778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.335'.
[  114.026041][ T4328] EXT4-fs (loop2): unmounting filesystem.
[  114.093541][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'.
[  114.095139][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'.
[  114.108927][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.110478][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.112043][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.113488][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.115553][ T5780] device geneve2 entered promiscuous mode
[  114.467530][ T5795] netlink: 164 bytes leftover after parsing attributes in process `syz.5.340'.
[  115.311010][ T4371] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  115.463642][ T4371] usb 1-1: device descriptor read/64, error -71
[  115.804451][ T5826] binder: 5825:5826 tried to acquire reference to desc 0, got 1 instead
[  115.809380][ T5826] binder: 5825:5826 got transaction with invalid offset (24, min 24 max 40) or object.
[  115.811081][ T5826] binder: 5825:5826 transaction call to 5825:0 failed 56/29201/-22, size 40-24 line 3346
[  115.821439][ T5380] binder: release 5825:5826 transaction 49 out, still active
[  115.822723][ T5380] binder: undelivered TRANSACTION_COMPLETE
[  115.823823][ T5380] binder: undelivered TRANSACTION_ERROR: 29201
[  115.824802][ T5380] binder: send failed reply for transaction 49, target dead
[  115.840962][ T4371] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  115.845630][ T5828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.350'.
[  116.056432][ T4371] usb 1-1: device descriptor read/64, error -71
[  116.173533][ T5831] loop3: detected capacity change from 0 to 128
[  116.227724][ T4371] usb usb1-port1: attempt power cycle
[  116.264809][ T5831] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  116.851109][ T4371] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  116.883562][ T4371] usb 1-1: device descriptor read/8, error -71
[  117.047946][ T4919] EXT4-fs (loop3): unmounting filesystem.
[  117.212797][ T4371] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  117.349926][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.355'.
[  117.351468][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.355'.
[  117.354718][ T5863] device geneve2 entered promiscuous mode
[  117.681589][ T4371] usb 1-1: device descriptor read/8, error -71
[  117.801207][ T4371] usb usb1-port1: unable to enumerate USB device
[  118.019895][ T5873] loop5: detected capacity change from 0 to 2048
[  118.056365][ T5873] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  118.467154][ T5873] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.357: bg 0: block 234: padding at end of block bitmap is not set
[  118.473280][ T5873] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  118.477819][ T5873] EXT4-fs (loop5): This should not happen!! Data will be lost
[  118.477819][ T5873] 
[  118.482938][ T5873] EXT4-fs (loop5): Total free blocks count 0
[  118.484983][ T5873] EXT4-fs (loop5): Free/Dirty block details
[  118.485894][ T5873] EXT4-fs (loop5): free_blocks=0
[  118.488956][ T5873] EXT4-fs (loop5): dirty_blocks=3440
[  118.489721][ T5873] EXT4-fs (loop5): Block reservation details
[  118.501081][ T5873] EXT4-fs (loop5): i_reserved_data_blocks=215
[  118.871507][ T5889] loop4: detected capacity change from 0 to 256
[  118.885681][ T5889] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  118.958107][ T5873] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1024 with error 28
[  119.592373][ T5905] netlink: 'syz.4.368': attribute type 39 has an invalid length.
[  119.616487][ T5899] loop0: detected capacity change from 0 to 32768
[  119.626583][ T5899] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.365 (5899)
[  119.642745][ T5899] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  119.644504][ T5899] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[  119.647268][ T5899] BTRFS info (device loop0): setting nodatasum
[  119.650744][ T5899] BTRFS info (device loop0): enabling auto defrag
[  119.654579][ T5899] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  119.656617][ T5899] BTRFS info (device loop0): use zstd compression, level 3
[  119.662292][ T5899] BTRFS info (device loop0): force clearing of disk cache
[  119.665689][ T5899] BTRFS info (device loop0): max_inline at 4096
[  119.678163][ T5899] BTRFS info (device loop0): disabling free space tree
[  120.587503][ T5899] BTRFS info (device loop0): enabling ssd optimizations
[  120.589077][ T5899] BTRFS info (device loop0): rebuilding free space tree
[  120.601271][ T5899] BTRFS info (device loop0): disabling free space tree
[  120.602403][ T5899] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  120.604668][ T5899] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  121.072435][ T5903] loop5: detected capacity change from 0 to 131072
[  121.079440][ T5903] F2FS-fs (loop5): Wrong NAT boundary, start(2560) end(5) blocks(1024)
[  121.088277][ T5903] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  121.115992][ T5903] F2FS-fs (loop5): Found nat_bits in checkpoint
[  121.145214][ T5903] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  121.146522][ T5903] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b
[  121.303573][ T5903] fscrypt: Adiantum using implementation "adiantum(xchacha12-neon,aes-ce,nhpoly1305-generic)"
[  121.339443][ T5959] fscrypt: loop5: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 4
[  121.960569][ T5983] loop4: detected capacity change from 0 to 2048
[  121.968412][ T4322] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  122.050814][ T5983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  122.157283][ T5983] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.377: bg 0: block 234: padding at end of block bitmap is not set
[  122.163618][ T5983] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 354 with error 28
[  122.165916][ T5983] EXT4-fs (loop4): This should not happen!! Data will be lost
[  122.165916][ T5983] 
[  122.168024][ T5983] EXT4-fs (loop4): Total free blocks count 0
[  122.169124][ T5983] EXT4-fs (loop4): Free/Dirty block details
[  122.170010][ T5983] EXT4-fs (loop4): free_blocks=0
[  122.173722][ T5983] EXT4-fs (loop4): dirty_blocks=368
[  122.174760][ T5983] EXT4-fs (loop4): Block reservation details
[  122.175844][ T5983] EXT4-fs (loop4): i_reserved_data_blocks=23
[  122.661528][ T6021] Invalid ELF header magic: != ELF
[  123.324438][ T6025] loop5: detected capacity change from 0 to 256
[  123.325649][ T4331] EXT4-fs (loop4): unmounting filesystem.
[  123.337283][ T6025] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  123.428763][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.383'.
[  123.668332][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.669660][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.196900][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.213994][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.891973][ T6037] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.893498][ T6037] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.895039][ T6037] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.896608][ T6037] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.381872][ T6060] loop3: detected capacity change from 0 to 128
[  125.409358][ T6060] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  125.931360][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  125.932477][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  126.204350][ T6060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.804840][ T6080] loop2: detected capacity change from 0 to 512
[  126.829644][ T6080] EXT4-fs (loop2): Test dummy encryption mode enabled
[  126.961402][ T6080] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  126.963359][ T6080] EXT4-fs (loop2): SIPHASH is not a valid default hash value
[  128.839336][ T6080] loop2: detected capacity change from 0 to 131072
[  128.858851][ T6080] F2FS-fs (loop2): Test dummy encryption mode enabled
[  128.867117][ T6080] F2FS-fs (loop2): invalid crc value
[  128.993430][ T6080] F2FS-fs (loop2): Found nat_bits in checkpoint
[  129.304125][ T6160] loop5: detected capacity change from 0 to 128
[  129.309092][ T6160] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  129.309343][ T6162] loop3: detected capacity change from 0 to 512
[  129.315195][ T6160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.329554][ T6162] EXT4-fs (loop3): Test dummy encryption mode enabled
[  129.446398][ T6162] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.411: invalid indirect mapped block 2185560079 (level 0)
[  129.449029][ T6162] EXT4-fs (loop3): Remounting filesystem read-only
[  129.450370][ T6162] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.411: invalid indirect mapped block 2683928664 (level 1)
[  129.884877][ T6162] EXT4-fs (loop3): Remounting filesystem read-only
[  129.886932][ T6162] EXT4-fs (loop3): 1 truncate cleaned up
[  129.888869][ T6162] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  129.918449][ T6162] netlink: 'syz.3.411': attribute type 1 has an invalid length.
[  129.965038][ T4919] EXT4-fs (loop3): unmounting filesystem.
[  130.093141][ T6179] Soft offlining pfn 0x143f22 at process virtual address 0x20000000
[  130.095190][ T6179] Soft offlining pfn 0x145f76 at process virtual address 0x20001000
[  130.095278][ T6179] Soft offlining pfn 0x149e09 at process virtual address 0x20002000
[  130.095338][ T6179] Soft offlining pfn 0x149e0a at process virtual address 0x20003000
[  130.095397][ T6179] Soft offlining pfn 0x149e0b at process virtual address 0x20004000
[  130.095455][ T6179] Soft offlining pfn 0x149e0c at process virtual address 0x20005000
[  130.095515][ T6179] Soft offlining pfn 0x149e0d at process virtual address 0x20006000
[  130.095578][ T6179] Soft offlining pfn 0x149e0e at process virtual address 0x20007000
[  130.095635][ T6179] Soft offlining pfn 0x149e0f at process virtual address 0x20008000
[  130.095695][ T6179] Soft offlining pfn 0x145ef0 at process virtual address 0x20009000
[  130.095755][ T6179] Soft offlining pfn 0x145ef1 at process virtual address 0x2000a000
[  130.095816][ T6179] Soft offlining pfn 0x145ef2 at process virtual address 0x2000b000
[  130.095875][ T6179] Soft offlining pfn 0x145ef3 at process virtual address 0x2000c000
[  130.095934][ T6179] Soft offlining pfn 0x145ef4 at process virtual address 0x2000d000
[  130.095994][ T6179] Soft offlining pfn 0x145ef5 at process virtual address 0x2000e000
[  130.096060][ T6179] Soft offlining pfn 0x1432a8 at process virtual address 0x2000f000
[  130.096120][ T6179] Soft offlining pfn 0x145ef7 at process virtual address 0x20010000
[  130.098150][ T6179] Soft offlining pfn 0x1432aa at process virtual address 0x20011000
[  130.379021][ T6180] netlink: 'syz.0.416': attribute type 1 has an invalid length.
[  130.400212][ T6180] device bond1 entered promiscuous mode
[  130.400319][ T6180] 8021q: adding VLAN 0 to HW filter on device bond1
[  130.444200][ T6180] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  130.444218][ T6180] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  130.444228][ T6180] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  130.852613][ T6202] loop3: detected capacity change from 0 to 512
[  130.854745][ T6202] EXT4-fs (loop3): Test dummy encryption mode enabled
[  130.855882][ T6202] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  130.857707][ T6202] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  130.859192][ T6202] EXT4-fs (loop3): The Hurd can't support 64-bit file systems
[  130.970039][ T6202] loop3: detected capacity change from 0 to 40427
[  130.977167][ T6202] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  130.978451][ T6202] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  130.985855][ T6202] F2FS-fs (loop3): Found nat_bits in checkpoint
[  131.004174][ T6202] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  131.005352][ T6202] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  131.749150][ T6215] Invalid option length (57448) for dns_resolver key
[  132.083358][ T6217] device syzkaller0 entered promiscuous mode
[  132.342347][ T6228] netlink: 'syz.3.426': attribute type 39 has an invalid length.
[  133.346646][ T6244] netlink: 'syz.3.430': attribute type 1 has an invalid length.
[  133.364010][ T6244] device bond1 entered promiscuous mode
[  133.365344][ T6244] 8021q: adding VLAN 0 to HW filter on device bond1
[  133.379867][ T6244] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  133.382243][ T6244] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  133.383916][ T6244] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  133.472534][ T6250] netlink: 44 bytes leftover after parsing attributes in process `syz.5.441'.
[  133.696714][ T6191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  133.746620][ T6254] loop0: detected capacity change from 0 to 1024
[  133.779191][ T6254] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  133.826015][ T6258] binder: 6257:6258 tried to acquire reference to desc 0, got 1 instead
[  133.828945][ T6258] binder: 6257:6258 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  133.831943][ T6258] binder: 6258 RLIMIT_NICE not set
[  133.832879][ T6258] binder: 6258 RLIMIT_NICE not set
[  133.834191][ T6258] binder: 6257:6258 got new transaction with bad transaction stack, transaction 61 has target 6257:6258
[  133.836054][ T6258] binder: 6257:6258 transaction call to 6257:0 failed 62/29201/-71, size 0-0 line 3105
[  133.838152][ T5994] binder: release 6257:6258 transaction 61 out, still active
[  133.839513][ T5994] binder: undelivered TRANSACTION_COMPLETE
[  133.841752][ T4322] EXT4-fs (loop0): unmounting filesystem.
[  133.843319][ T5994] binder: undelivered TRANSACTION_ERROR: 29201
[  133.852780][ T5380] binder: release 6257:6258 transaction 61 in, still active
[  133.854037][ T5380] binder: send failed reply for transaction 61, target dead
[  134.083259][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'.
[  135.419518][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'.
[  135.496283][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'.
[  136.151939][ T6307] netlink: 44 bytes leftover after parsing attributes in process `syz.3.451'.
[  137.436464][   T27] audit: type=1326 audit(137.420:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.5.456" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b77ee8 code=0x0
[  138.127085][ T6342] device syzkaller0 entered promiscuous mode
[  138.150870][ T6342] tipc: Started in network mode
[  138.151731][ T6342] tipc: Node identity d2adc3f73733, cluster identity 4711
[  138.152996][ T6342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.165456][ T6340] tipc: Resetting bearer <eth:syzkaller0>
[  138.245726][ T6340] tipc: Disabling bearer <eth:syzkaller0>
[  138.255973][ T6355] binder: 6354:6355 tried to acquire reference to desc 0, got 1 instead
[  138.265293][ T6355] binder: 6355:6354 translate fd array failed
[  138.266401][ T6355] binder: 6354:6355 transaction async to 6354:0 failed 67/29201/-22, size 112-24 line 3486
[  138.268700][ T4366] binder: undelivered TRANSACTION_ERROR: 29201
[  138.324980][ T6357] binder: 6356:6357 tried to acquire reference to desc 0, got 1 instead
[  138.327285][ T6357] binder: 6357:6356 translate fd array failed
[  138.386981][ T6345] loop0: detected capacity change from 0 to 40427
[  138.387395][ T6366] loop2: detected capacity change from 0 to 1024
[  138.399356][ T6345] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x3ffff
[  138.401549][ T6345] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe4
[  138.405226][ T6345] F2FS-fs (loop0): invalid crc value
[  138.413311][ T6345] F2FS-fs (loop0): Found nat_bits in checkpoint
[  138.418419][ T6345] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884
[  138.447261][ T6345] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  138.485414][ T6345] F2FS-fs (loop0) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x64c/0x1b9c
[  138.549573][ T6373] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  138.550768][ T6373] hfsplus: xattr searching failed
[  138.554617][ T6345] F2FS-fs (loop0) : inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0xe4/0x9c0
[  138.557635][ T6366] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  138.558855][ T6366] hfsplus: xattr searching failed
[  138.563715][ T6373] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  138.564817][ T6373] hfsplus: xattr searching failed
[  138.588786][ T4322] syz-executor: attempt to access beyond end of device
[  138.588786][ T4322] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  139.014849][ T4328] hfsplus: bad catalog entry type
[  139.213683][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.477'.
[  139.412637][ T6396] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  139.448505][ T6400] binder: 6398:6400 tried to acquire reference to desc 0, got 1 instead
[  139.450678][ T6400] binder_debug: 2 callbacks suppressed
[  139.450684][ T6400] binder: 6400:6398 translate fd array failed
[  139.454012][ T6400] binder: 6398:6400 transaction async to 6398:0 failed 77/29201/-22, size 112-24 line 3486
[  139.456564][ T5380] binder: undelivered TRANSACTION_ERROR: 29201
[  139.964032][ T4386] hfsplus: b-tree write err: -5, ino 25
[  139.966179][ T4386] hfsplus: b-tree write err: -5, ino 4
[  139.970510][ T4386] hfsplus: b-tree write err: -5, ino 2
[  139.974321][ T4386] hfsplus: b-tree write err: -5, ino 26
[  139.975411][ T4386] hfsplus: b-tree write err: -5, ino 27
[  140.260700][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.487'.
[  140.284368][ T6421] tipc: Failed to remove unknown binding: 66,0,0/0:2708228307/2708228309
[  140.285792][ T6421] tipc: Failed to remove unknown binding: 66,0,0/0:2708228307/2708228308
[  140.287632][ T6421] tipc: Failed to remove unknown binding: 66,0,0/0:2708228307/2708228309
[  140.289270][ T6421] tipc: Failed to remove unknown binding: 66,0,0/0:2708228307/2708228308
[  140.295792][ T4326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  140.299315][ T4326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  140.301969][ T4326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  140.304053][ T4326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  140.305616][ T4326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  140.306986][ T4326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  140.384994][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.490'.
[  140.393788][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'.
[  140.471456][ T6433] 9pnet: p9_errstr2errno: server reported unknown error 18446
[  140.538689][ T6436] Soft offlining pfn 0x144236 at process virtual address 0x20000000
[  140.540870][ T6436] Soft offlining pfn 0x13ba82 at process virtual address 0x20001000
[  140.542281][ T6436] Soft offlining pfn 0x142afb at process virtual address 0x20002000
[  140.543566][ T6436] Soft offlining pfn 0x145f77 at process virtual address 0x20003000
[  140.544799][ T6436] Soft offlining pfn 0x142466 at process virtual address 0x20004000
[  140.546184][ T6436] Soft offlining pfn 0x142c46 at process virtual address 0x20005000
[  140.547453][ T6436] Soft offlining pfn 0x13bdd0 at process virtual address 0x20006000
[  140.548838][ T6436] Soft offlining pfn 0x146985 at process virtual address 0x20007000
[  140.550178][ T6436] Soft offlining pfn 0x142821 at process virtual address 0x20008000
[  140.551561][ T6436] Soft offlining pfn 0x145d9f at process virtual address 0x20009000
[  140.553011][ T6436] Soft offlining pfn 0x143111 at process virtual address 0x2000a000
[  140.554401][ T6436] Soft offlining pfn 0x13ad3e at process virtual address 0x2000b000
[  140.555603][ T6436] Soft offlining pfn 0x123082 at process virtual address 0x2000c000
[  140.556928][ T6436] Soft offlining pfn 0x148687 at process virtual address 0x2000d000
[  140.558254][ T6436] Soft offlining pfn 0x1218ee at process virtual address 0x2000e000
[  140.559529][ T6436] Soft offlining pfn 0x13b87d at process virtual address 0x2000f000
[  140.561008][ T6436] Soft offlining pfn 0x142abd at process virtual address 0x20010000
[  140.562483][ T6436] Soft offlining pfn 0x144edd at process virtual address 0x20011000
[  140.855990][ T6419] chnl_net:caif_netlink_parms(): no params data found
[  140.919105][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.921431][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.923119][ T6419] device bridge_slave_0 entered promiscuous mode
[  140.934603][ T6419] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.937902][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.942395][ T6419] device bridge_slave_1 entered promiscuous mode
[  140.984847][ T6419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.992807][ T6419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.044763][ T6419] team0: Port device team_slave_0 added
[  141.047368][ T6419] team0: Port device team_slave_1 added
[  141.055783][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.056992][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.063024][ T6419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.065849][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.067084][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.072297][ T6419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.255366][ T6419] device hsr_slave_0 entered promiscuous mode
[  141.291394][ T6419] device hsr_slave_1 entered promiscuous mode
[  141.331476][ T6419] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  141.332820][ T6419] Cannot create hsr debugfs directory
[  142.057714][ T6419] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.271550][ T6419] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.670707][ T4326] Bluetooth: hci3: command 0x0409 tx timeout
[  142.963908][ T6419] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.389940][ T6419] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.645053][ T6419] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  143.697658][ T6419] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  143.737006][ T6419] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  143.806849][ T6419] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  143.870213][ T6419] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.874427][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  143.875845][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  143.878643][ T6419] 8021q: adding VLAN 0 to HW filter on device team0
[  143.898658][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  143.900448][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  143.905717][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.906954][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.908768][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  143.912245][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  143.913832][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  143.915265][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.916384][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.932689][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  143.934671][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  143.936427][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  143.940238][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  143.947921][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  143.949629][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  143.952448][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  143.954150][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  143.955825][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  143.957361][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  143.960367][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  143.965656][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  144.035330][ T6419] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.036943][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  144.038347][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  144.048235][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  144.049984][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  144.065108][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  144.066946][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  144.070206][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  144.071935][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  144.080023][ T6419] device veth0_vlan entered promiscuous mode
[  144.088993][ T6419] device veth1_vlan entered promiscuous mode
[  144.099915][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  144.101635][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  144.103025][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  144.104566][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  144.110786][ T6419] device veth0_macvtap entered promiscuous mode
[  144.117518][ T6419] device veth1_macvtap entered promiscuous mode
[  144.128198][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.130045][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.132536][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.134291][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.136652][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.138307][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  144.139892][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  144.144450][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  144.145994][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  144.148897][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.151374][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.153600][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.156079][ T6419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.157455][ T6419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.159217][ T6419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.160628][ T6419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.167298][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  144.168797][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  144.220853][ T4585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.222262][ T4585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.224276][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  144.235552][ T4585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.236965][ T4585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.238390][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  144.293453][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'.
[  144.670439][ T6506] loop3: detected capacity change from 0 to 8
[  144.741848][ T4334] Bluetooth: hci3: command 0x041b tx timeout
[  145.461639][ T6517] Soft offlining pfn 0x13ad79 at process virtual address 0x20000000
[  145.463542][ T6517] Soft offlining pfn 0x145497 at process virtual address 0x20001000
[  145.464775][ T6517] Soft offlining pfn 0x13c1c0 at process virtual address 0x20002000
[  145.466107][ T6517] Soft offlining pfn 0x1454bd at process virtual address 0x20003000
[  145.467466][ T6517] Soft offlining pfn 0x1454be at process virtual address 0x20004000
[  145.468840][ T6517] Soft offlining pfn 0x1454bf at process virtual address 0x20005000
[  145.470089][ T6517] Soft offlining pfn 0x13c318 at process virtual address 0x20006000
[  145.471433][ T6517] Soft offlining pfn 0x13c319 at process virtual address 0x20007000
[  145.472954][ T6517] Soft offlining pfn 0x13c31a at process virtual address 0x20008000
[  145.474396][ T6517] Soft offlining pfn 0x13c31b at process virtual address 0x20009000
[  145.475711][ T6517] Soft offlining pfn 0x13c314 at process virtual address 0x2000a000
[  145.477010][ T6517] Soft offlining pfn 0x13c315 at process virtual address 0x2000b000
[  145.478395][ T6517] Soft offlining pfn 0x13c316 at process virtual address 0x2000c000
[  145.479765][ T6517] Soft offlining pfn 0x13c317 at process virtual address 0x2000d000
[  145.481289][ T6517] Soft offlining pfn 0x1454fc at process virtual address 0x2000e000
[  145.482709][ T6517] Soft offlining pfn 0x1454fd at process virtual address 0x2000f000
[  145.484088][ T6517] Soft offlining pfn 0x1454fe at process virtual address 0x20010000
[  145.485529][ T6517] Soft offlining pfn 0x1454ff at process virtual address 0x20011000
[  146.812004][ T4334] Bluetooth: hci3: command 0x040f tx timeout
[  146.992669][ T6537] block device autoloading is deprecated and will be removed.
[  147.005301][ T6531] binder: 6528:6531 tried to acquire reference to desc 0, got 1 instead
[  147.009160][ T6522] md2: error: bitmap file must open for write
[  147.025576][ T6531] binder: 6528:6531 got reply transaction with bad transaction stack, transaction 82 has target 6528:0
[  147.027411][ T6531] binder: 6528:6531 transaction reply to 0:0 failed 83/29201/-71, size 0-0 line 2961
[  147.031567][ T5994] binder: release 6528:6531 transaction 82 out, still active
[  147.032713][ T5994] binder: undelivered TRANSACTION_COMPLETE
[  147.033625][ T5994] binder: undelivered TRANSACTION_ERROR: 29201
[  147.061255][   T24] binder: send failed reply for transaction 82, target dead
[  147.103879][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'.
[  147.106759][ T6544] loop0: detected capacity change from 0 to 2048
[  147.116150][ T6540] loop4: detected capacity change from 0 to 256
[  147.179982][ T6546] device veth3 entered promiscuous mode
[  147.201822][ T6540] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  147.205714][ T6544] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  147.531651][ T6544] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.522: bg 0: block 234: padding at end of block bitmap is not set
[  147.563388][ T6544] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 592 with error 28
[  147.569667][ T6544] EXT4-fs (loop0): This should not happen!! Data will be lost
[  147.569667][ T6544] 
[  147.578307][ T6544] EXT4-fs (loop0): Total free blocks count 0
[  147.580493][ T6544] EXT4-fs (loop0): Free/Dirty block details
[  147.586063][ T6544] EXT4-fs (loop0): free_blocks=0
[  147.587853][ T6544] EXT4-fs (loop0): dirty_blocks=608
[  147.588941][ T6544] EXT4-fs (loop0): Block reservation details
[  147.590048][ T6544] EXT4-fs (loop0): i_reserved_data_blocks=38
[  147.659092][ T4322] EXT4-fs (loop0): unmounting filesystem.
[  148.443870][ T6570] loop2: detected capacity change from 0 to 8
[  148.901191][ T4334] Bluetooth: hci3: command 0x0419 tx timeout
[  150.364500][ T6596] Invalid option length (57448) for dns_resolver key
[  151.959001][ T6591] loop3: detected capacity change from 0 to 8192
[  151.989999][ T6619] loop0: detected capacity change from 0 to 2048
[  151.993776][ T6619] EXT4-fs: Ignoring removed mblk_io_submit option
[  152.029878][ T6619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  152.038473][ T6618] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.543: bg 0: block 234: padding at end of block bitmap is not set
[  152.046384][ T6618] EXT4-fs (loop0): Remounting filesystem read-only
[  152.067824][ T4322] EXT4-fs (loop0): unmounting filesystem.
[  152.743004][ T6630] loop0: detected capacity change from 0 to 8
[  154.361898][ T6656] binder: 6655:6656 tried to acquire reference to desc 0, got 1 instead
[  154.367843][ T4365] binder: undelivered TRANSACTION_COMPLETE
[  154.376630][ T4365] binder: undelivered transaction 88, process died.
[  155.621730][ T6673] loop4: detected capacity change from 0 to 8
[  156.648888][ T6688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.650294][ T6688] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.693833][ T6688] wlan0: renamed from ipvlan0
[  156.753269][   T27] audit: type=1326 audit(156.720:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.4.563" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff85977ee8 code=0x0
[  156.781855][ T6688] net_ratelimit: 11 callbacks suppressed
[  156.781865][ T6688] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  157.098524][ T6701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.570'.
[  157.359538][ T6709] loop3: detected capacity change from 0 to 4096
[  157.372516][ T6709] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing.
[  157.376252][ T6709] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  157.381658][ T6709] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  157.385389][ T6709] ntfs: volume version 3.1.
[  157.392838][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.394167][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.214342][ T4919] ntfs: (device loop3): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  158.270847][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.278706][ T6726] loop3: detected capacity change from 0 to 2048
[  158.292051][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.314548][ T6726]  loop3: p1 p3 p4
[  158.319666][ T6726] loop3: p4 size 589824 extends beyond EOD, truncated
[  158.480028][ T5482] udevd[5482]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  158.483969][ T5478] udevd[5478]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  158.487502][ T5479] udevd[5479]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  158.502789][ T5482] udevd[5482]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  158.506932][ T5478] udevd[5478]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  158.510395][ T5479] udevd[5479]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  158.518865][ T5482] udevd[5482]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  158.521792][ T5478] udevd[5478]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  158.525660][ T5479] udevd[5479]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  158.648175][ T6705] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.649785][ T6705] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.651497][ T6705] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.652946][ T6705] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.740974][ T4326] Bluetooth: hci2: command 0x0406 tx timeout
[  158.924526][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.577'.
[  159.109927][ T6744] loop0: detected capacity change from 0 to 4096
[  159.129446][ T6744] EXT4-fs (loop0): Test dummy encryption mode enabled
[  159.310563][ T6744] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  159.311935][ T6744] System zones: 0-5
[  159.314434][ T6744] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  159.714297][ T6755] loop2: detected capacity change from 0 to 1024
[  159.751506][ T6755] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  159.798890][ T4322] EXT4-fs (loop0): unmounting filesystem.
[  159.808545][ T5479] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  159.823800][ T6755] binder: 6752:6755 tried to acquire reference to desc 0, got 1 instead
[  159.825720][ T6755] binder: 6752:6755 BC_FREE_BUFFER u757f7f5b00000001 no match
[  159.829329][ T5380] binder: release 6752:6755 transaction 99 out, still active
[  159.830470][ T5380] binder: undelivered TRANSACTION_COMPLETE
[  159.836069][ T6765] binder: 6764:6765 tried to acquire reference to desc 0, got 1 instead
[  159.839239][ T6765] binder_alloc: 6764: pid 6764 spamming oneway? 2 buffers allocated for a total size of 5120
[  159.851762][ T5380] binder: send failed reply for transaction 99, target dead
[  159.852441][ T6765] binder_alloc: 6764: pid 6764 spamming oneway? 3 buffers allocated for a total size of 5128
[  159.859808][ T5988] binder: undelivered TRANSACTION_COMPLETE
[  159.860788][ T5988] binder: undelivered TRANSACTION_COMPLETE
[  159.862287][ T5988] binder: undelivered TRANSACTION_COMPLETE
[  159.884145][ T5988] binder: undelivered transaction 105, process died.
[  159.885270][ T5988] binder: undelivered transaction 106, process died.
[  159.886483][ T5988] binder: undelivered transaction 104, process died.
[  161.012784][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.5.612'.
[  161.016441][ T6793] device ip6gre1 entered promiscuous mode
[  161.532702][ T6798] netlink: 'syz.5.612': attribute type 6 has an invalid length.
[  161.534025][ T6798] netlink: 72 bytes leftover after parsing attributes in process `syz.5.612'.
[  162.462667][ T6820] loop4: detected capacity change from 0 to 512
[  162.466678][ T6820] EXT4-fs: Ignoring removed mblk_io_submit option
[  162.468175][ T6820] EXT4-fs: Ignoring removed orlov option
[  162.470113][ T6820] EXT4-fs: Ignoring removed mblk_io_submit option
[  162.479642][ T6820] EXT4-fs (loop4): Test dummy encryption mode enabled
[  162.481873][ T6813] block nbd2: shutting down sockets
[  162.485779][ T6820] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  162.489212][ T6820] EXT4-fs (loop4): 1 truncate cleaned up
[  162.490309][ T6820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  162.529530][ T4331] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /128/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  162.534269][ T4331] EXT4-fs (loop4): Remounting filesystem read-only
[  162.535926][ T4331] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  162.539413][ T4331] EXT4-fs (loop4): Remounting filesystem read-only
[  162.540729][ T4331] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /128/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  162.544604][ T4331] EXT4-fs (loop4): Remounting filesystem read-only
[  162.545831][ T4331] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  162.549352][ T4331] EXT4-fs (loop4): Remounting filesystem read-only
[  162.554972][ T4331] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /128/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  162.565839][ T4331] EXT4-fs (loop4): Remounting filesystem read-only
[  162.567189][ T4331] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  162.574693][ T4331] EXT4-fs (loop4): Remounting filesystem read-only
[  162.576143][ T4331] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /128/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  162.579808][ T4331] EXT4-fs (loop4): Remounting filesystem read-only
[  162.581168][ T4331] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  162.591788][ T4331] EXT4-fs (loop4): Remounting filesystem read-only
[  162.593250][ T4331] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /128/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  162.605509][ T4331] EXT4-fs (loop4): Remounting filesystem read-only
[  162.606812][ T4331] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  162.704670][    C1] vcan0: j1939_tp_rxtimer: 0x0000000034a4de7d: rx timeout, send abort
[  162.744806][ T6829] dns_resolver: Unsupported server list version (6)
[  163.204699][    C1] vcan0: j1939_tp_rxtimer: 0x0000000002fbebe0: rx timeout, send abort
[  163.205985][    C1] vcan0: j1939_tp_rxtimer: 0x0000000034a4de7d: abort rx timeout. Force session deactivation
[  163.546746][ T4334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  163.549948][ T4334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  163.554273][ T4334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  163.559151][ T4334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  163.626954][ T4334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  163.642956][ T4334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  163.705955][    C1] vcan0: j1939_tp_rxtimer: 0x0000000002fbebe0: abort rx timeout. Force session deactivation
[  163.750488][ T6842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.751723][ T6842] IPv6: NLM_F_CREATE should be set when creating new route
[  164.044552][ T1587] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.622126][   T27] audit: type=1326 audit(164.610:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90d77ee8 code=0x7ffc0000
[  164.627478][   T27] audit: type=1326 audit(164.610:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=8 compat=0 ip=0xffff90d77ee8 code=0x7ffc0000
[  164.639455][   T27] audit: type=1326 audit(164.620:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90d77ee8 code=0x7ffc0000
[  164.654950][   T27] audit: type=1326 audit(164.620:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90d77ee8 code=0x7ffc0000
[  164.658436][   T27] audit: type=1326 audit(164.620:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff90d5adac code=0x7ffc0000
[  164.690309][   T27] audit: type=1326 audit(164.620:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff90d5adac code=0x7ffc0000
[  164.747186][   T27] audit: type=1326 audit(164.620:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90d77ee8 code=0x7ffc0000
[  164.774022][   T27] audit: type=1326 audit(164.620:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90d77ee8 code=0x7ffc0000
[  164.784971][   T27] audit: type=1326 audit(164.650:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff90d77ee8 code=0x7ffc0000
[  164.792721][   T27] audit: type=1326 audit(164.650:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90d77ee8 code=0x7ffc0000
[  165.198046][ T6843] chnl_net:caif_netlink_parms(): no params data found
[  165.779902][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.781333][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.785238][ T6843] device bridge_slave_0 entered promiscuous mode
[  165.788467][ T6843] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.790002][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.791927][ T6843] device bridge_slave_1 entered promiscuous mode
[  165.799725][ T6843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.802667][ T6843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.866034][ T4326] Bluetooth: hci4: command 0x0409 tx timeout
[  166.357657][ T6843] team0: Port device team_slave_0 added
[  166.467995][ T6843] team0: Port device team_slave_1 added
[  166.479509][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.484843][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.493325][ T6843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.957856][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.959060][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.971096][ T6843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.015173][ T6843] device hsr_slave_0 entered promiscuous mode
[  167.061294][ T6843] device hsr_slave_1 entered promiscuous mode
[  167.101064][ T6843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  167.102520][ T6843] Cannot create hsr debugfs directory
[  168.411023][ T4326] Bluetooth: hci4: command 0x041b tx timeout
[  168.472380][ T6976] loop0: detected capacity change from 0 to 128
[  168.490217][ T6976] hpfs: Bad version 183,140. Mount readonly to go around
[  168.493362][ T6976] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz
[  168.538012][ T6980] loop5: detected capacity change from 0 to 512
[  168.547271][ T6980] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  168.574927][ T6980] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  169.582048][ T6980] overlayfs: statfs failed on './file0'
[  169.988054][ T6992] loop3: detected capacity change from 0 to 512
[  169.989762][ T6992] EXT4-fs: Ignoring removed mblk_io_submit option
[  169.996456][ T6992] EXT4-fs: Ignoring removed orlov option
[  169.997580][ T6992] EXT4-fs: Ignoring removed mblk_io_submit option
[  170.006738][ T6992] EXT4-fs (loop3): Test dummy encryption mode enabled
[  170.007986][ T6992] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  170.009283][ T5064] EXT4-fs (loop5): unmounting filesystem.
[  170.021589][ T6992] EXT4-fs (loop3): 1 truncate cleaned up
[  170.022511][ T6992] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  170.084926][ T4919] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /80/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  170.088727][ T4919] EXT4-fs (loop3): Remounting filesystem read-only
[  170.092749][ T4919] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  170.096083][ T4919] EXT4-fs (loop3): Remounting filesystem read-only
[  170.097827][ T4919] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /80/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  170.102070][ T4919] EXT4-fs (loop3): Remounting filesystem read-only
[  170.103238][ T4919] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  170.106552][ T4919] EXT4-fs (loop3): Remounting filesystem read-only
[  170.107753][ T4919] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /80/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  170.112162][ T4919] EXT4-fs (loop3): Remounting filesystem read-only
[  170.113568][ T4919] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  170.117022][ T4919] EXT4-fs (loop3): Remounting filesystem read-only
[  170.118252][ T4919] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /80/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  170.122684][ T4919] EXT4-fs (loop3): Remounting filesystem read-only
[  170.124757][ T4919] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  170.128415][ T4919] EXT4-fs (loop3): Remounting filesystem read-only
[  170.129583][ T4919] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /80/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  170.133177][ T4919] EXT4-fs (loop3): Remounting filesystem read-only
[  170.134335][ T4919] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  170.253294][ T6996] block nbd5: shutting down sockets
[  170.541162][ T4330] Bluetooth: hci4: command 0x040f tx timeout
[  170.840470][ T7029] loop0: detected capacity change from 0 to 512
[  170.849778][ T7029] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  170.858806][ T7029] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[  170.860462][ T7029] EXT4-fs (loop0): group descriptors corrupted!
[  170.946038][ T4386] device hsr_slave_0 left promiscuous mode
[  170.981702][ T4386] device hsr_slave_1 left promiscuous mode
[  171.041254][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.042843][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.044795][ T4386] device bridge_slave_1 left promiscuous mode
[  171.046113][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.072443][ T4386] device bridge_slave_0 left promiscuous mode
[  171.073610][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.104640][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  171.108322][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  171.110313][ T4330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  171.112868][ T4330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  171.114303][ T4330] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  171.115619][ T4330] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  171.118989][ T4386] bond2 (unregistering): Released all slaves
[  171.241980][ T4386] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  171.504472][ T4386] bond1 (unregistering): Released all slaves
[  172.105827][ T7059] loop5: detected capacity change from 0 to 512
[  172.107272][ T7059] EXT4-fs: Ignoring removed mblk_io_submit option
[  172.108289][ T7059] EXT4-fs: Ignoring removed orlov option
[  172.109189][ T7059] EXT4-fs: Ignoring removed mblk_io_submit option
[  172.127266][ T7059] EXT4-fs (loop5): Test dummy encryption mode enabled
[  172.128298][ T7059] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  172.132396][ T7059] EXT4-fs (loop5): 1 truncate cleaned up
[  172.133380][ T7059] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  172.159561][ T5064] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /91/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  172.163740][ T5064] EXT4-fs (loop5): Remounting filesystem read-only
[  172.165052][ T5064] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  172.168646][ T5064] EXT4-fs (loop5): Remounting filesystem read-only
[  172.170097][ T5064] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /91/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  172.174352][ T5064] EXT4-fs (loop5): Remounting filesystem read-only
[  172.175604][ T5064] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  172.178894][ T5064] EXT4-fs (loop5): Remounting filesystem read-only
[  172.180127][ T5064] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /91/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  172.183667][ T5064] EXT4-fs (loop5): Remounting filesystem read-only
[  172.184903][ T5064] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  172.188362][ T5064] EXT4-fs (loop5): Remounting filesystem read-only
[  172.189551][ T5064] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /91/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  172.193975][ T5064] EXT4-fs (loop5): Remounting filesystem read-only
[  172.195124][ T5064] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  172.198460][ T5064] EXT4-fs (loop5): Remounting filesystem read-only
[  172.199709][ T5064] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /91/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  172.203281][ T5064] EXT4-fs (loop5): Remounting filesystem read-only
[  172.204469][ T5064] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  172.570966][ T4330] Bluetooth: hci4: command 0x0419 tx timeout
[  173.221064][ T4330] Bluetooth: hci0: command 0x0409 tx timeout
[  173.724278][ T4386] team0 (unregistering): Port device team_slave_1 removed
[  173.922190][ T4386] team0 (unregistering): Port device team_slave_0 removed
[  174.081444][ T4386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.281558][ T4386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.300984][ T4330] Bluetooth: hci0: command 0x041b tx timeout
[  175.671919][ T4386] bond0 (unregistering): Released all slaves
[  176.007731][ T6843] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  176.051459][ T6843] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  176.083908][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'.
[  176.278293][ T6843] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  176.345492][ T7067] netlink: 'syz.0.663': attribute type 11 has an invalid length.
[  176.348920][ T6843] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  176.400285][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'.
[  176.404813][ T7073] device vlan2 entered promiscuous mode
[  176.405683][ T7073] device bridge0 entered promiscuous mode
[  176.559817][ T6843] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.575105][ T6843] 8021q: adding VLAN 0 to HW filter on device team0
[  176.578257][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  176.579746][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  176.586667][ T4326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.588955][ T4326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.594303][ T7045] chnl_net:caif_netlink_parms(): no params data found
[  176.598771][ T4326] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.600351][ T4326] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.609810][ T4326] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  176.611136][ T4326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.623674][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  176.625367][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  176.626819][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.628007][ T4507] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.629549][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  176.647825][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  176.649464][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  176.651738][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.652918][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.656919][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  176.669737][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  176.697007][ T7045] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.698232][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.705613][ T7045] device bridge_slave_0 entered promiscuous mode
[  176.709205][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  176.711481][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  176.713512][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  176.717698][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  176.719264][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  176.725881][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  176.727361][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  176.730268][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  176.732337][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  176.734854][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  176.737091][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.738179][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.740173][ T7045] device bridge_slave_1 entered promiscuous mode
[  176.768505][ T7045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.791594][ T7045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.820611][ T7045] team0: Port device team_slave_0 added
[  176.834052][ T7045] team0: Port device team_slave_1 added
[  176.854697][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.855944][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.860002][ T7045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.865039][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.866132][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.870041][ T7045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.927781][ T7045] device hsr_slave_0 entered promiscuous mode
[  176.971445][ T7045] device hsr_slave_1 entered promiscuous mode
[  177.011522][ T7045] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.012786][ T7045] Cannot create hsr debugfs directory
[  177.058905][ T6843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.063621][ T7088] chnl_net:caif_netlink_parms(): no params data found
[  177.078449][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  177.079693][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  177.176366][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.177604][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.179301][ T7088] device bridge_slave_0 entered promiscuous mode
[  177.188150][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.190609][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.196501][ T7088] device bridge_slave_1 entered promiscuous mode
[  177.216631][ T7088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.219489][ T7088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.241737][ T7088] team0: Port device team_slave_0 added
[  177.244829][ T7088] team0: Port device team_slave_1 added
[  177.263955][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.265086][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.269536][ T7088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.274934][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  177.276723][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  177.284811][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.285933][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.290185][ T7088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.292807][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  177.294401][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  177.296852][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  177.298408][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  177.311524][ T7045] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  177.352145][ T7045] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  177.381049][ T4326] Bluetooth: hci0: command 0x040f tx timeout
[  177.408035][ T7045] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  177.462311][ T6843] device veth0_vlan entered promiscuous mode
[  177.470468][ T7045] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  177.556837][ T7088] device hsr_slave_0 entered promiscuous mode
[  177.591252][ T7088] device hsr_slave_1 entered promiscuous mode
[  177.641064][ T7088] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.642323][ T7088] Cannot create hsr debugfs directory
[  177.644170][ T6843] device veth1_vlan entered promiscuous mode
[  177.691250][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  177.692850][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  177.695274][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  177.696795][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  177.700459][ T6843] device veth0_macvtap entered promiscuous mode
[  177.715497][ T6843] device veth1_macvtap entered promiscuous mode
[  177.734820][ T7045] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.741878][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.743553][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.745086][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.746715][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.749251][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.754021][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.755576][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.757627][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.759589][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  177.761382][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  177.762868][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  177.764408][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  177.765934][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  177.767385][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  177.775831][ T6843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.777234][ T6843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.778701][ T6843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.780093][ T6843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.784429][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  177.785902][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  177.789100][ T7045] 8021q: adding VLAN 0 to HW filter on device team0
[  177.795919][ T7088] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  177.822375][ T7088] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  177.852375][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  177.853955][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  177.855286][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.856387][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.857682][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  177.859144][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  177.860608][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.861768][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.864104][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  177.865721][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  177.869100][ T7088] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  177.902383][ T7088] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  177.932805][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  177.947539][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  177.950457][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  177.955901][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  177.964405][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  177.966179][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  177.981500][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  177.983303][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.999453][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  178.001979][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  178.005145][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  178.019769][ T1587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.023941][ T1587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.028141][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  178.080115][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.084715][ T5100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.085849][ T5100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.087118][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  178.088734][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  178.105037][ T7088] 8021q: adding VLAN 0 to HW filter on device team0
[  178.109855][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  178.115393][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.118284][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  178.119643][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.126181][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.127383][ T4507] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.129215][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  178.132327][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  178.133951][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  178.135423][ T1587] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.136560][ T1587] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.139403][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  178.146087][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  178.150755][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  178.159478][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  178.182465][ T7045] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.266449][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  178.273196][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  178.276463][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  178.278287][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  178.279989][ T7160] netlink: 'syz.2.675': attribute type 4 has an invalid length.
[  178.286187][ T7088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  178.287885][ T7088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  178.291683][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  178.293380][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  178.664792][ T4326] Bluetooth: hci1: command 0x0409 tx timeout
[  178.665983][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  178.709379][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  178.757111][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  178.795972][ T7160] netlink: 'syz.2.675': attribute type 17 has an invalid length.
[  178.945631][ T7160] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  178.955443][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  179.452881][ T4326] Bluetooth: hci0: command 0x0419 tx timeout
[  179.490864][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  179.497258][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.048347][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  180.049981][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.054303][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.056014][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.068676][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  180.069983][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  180.072940][ T7045] device veth0_vlan entered promiscuous mode
[  180.076323][ T7045] device veth1_vlan entered promiscuous mode
[  180.204024][ T7195] team0 (unregistering): Port device team_slave_0 removed
[  180.210578][ T7195] team0 (unregistering): Failed to send options change via netlink (err -105)
[  180.212526][ T7195] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  180.214941][ T7195] team0 (unregistering): Port device team_slave_1 removed
[  180.245920][ T7045] device veth0_macvtap entered promiscuous mode
[  180.248375][ T7045] device veth1_macvtap entered promiscuous mode
[  180.252384][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  180.253834][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  180.257635][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  180.259614][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  180.261240][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  180.263183][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  180.265686][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.269863][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.275964][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.277571][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.279363][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.281204][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.282901][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.285406][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.286767][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  180.288748][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  180.292819][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.294448][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.295998][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.297786][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.300021][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.301750][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  180.303381][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  180.306103][ T7045] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.307592][ T7045] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.309089][ T7045] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.310534][ T7045] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.346911][ T5100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.348428][ T5100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.352999][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  180.358442][ T5100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.359767][ T5100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.365262][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  180.392833][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.394679][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.405227][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  180.406928][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.408511][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.410063][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.426259][ T7088] device veth0_vlan entered promiscuous mode
[  180.438048][ T7206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'.
[  180.448742][ T7088] device veth1_vlan entered promiscuous mode
[  181.055882][ T4326] Bluetooth: hci1: command 0x041b tx timeout
[  181.313796][ T7088] device veth0_macvtap entered promiscuous mode
[  181.315329][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  181.316929][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  181.318379][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  181.319953][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  181.338040][ T7088] device veth1_macvtap entered promiscuous mode
[  181.431901][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.433584][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.435400][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.437009][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.438588][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.443037][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.444531][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.446065][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.448661][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.453358][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  181.454905][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  181.456324][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  181.460345][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.462441][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.464387][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.465871][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.467258][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.468811][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.471650][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.490046][ T7088] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.880551][ T7088] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.899707][ T7088] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.907163][ T7088] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.944694][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  181.950717][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  182.375191][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.376383][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.398825][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.400096][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.781031][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  182.788454][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  183.149821][ T7230] netlink: 'syz.6.678': attribute type 4 has an invalid length.
[  183.152489][ T4326] Bluetooth: hci1: command 0x040f tx timeout
[  183.158535][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.159913][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.183763][ T7235] loop2: detected capacity change from 0 to 736
[  183.215824][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.217332][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.237554][ T7237] netlink: 'syz.6.678': attribute type 17 has an invalid length.
[  183.248409][ T7237] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  183.333858][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'.
[  183.339237][ T7243] 8021q: adding VLAN 0 to HW filter on device team1
[  183.342401][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'.
[  183.344125][ T7243] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  183.348633][ T7243] 8021q: adding VLAN 0 to HW filter on device team2
[  184.096977][ T4326] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  184.989693][ T7270] loop0: detected capacity change from 0 to 128
[  184.991574][ T7269] loop4: detected capacity change from 0 to 736
[  185.110559][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'.
[  185.210974][ T4326] Bluetooth: hci1: command 0x0419 tx timeout
[  185.856624][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'.
[  186.091024][ T4330] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  186.327650][ T7293] loop4: detected capacity change from 0 to 512
[  186.338292][ T7293] EXT4-fs: Ignoring removed orlov option
[  186.339606][ T7293] EXT4-fs (loop4): Test dummy encryption mode enabled
[  186.340701][ T7293] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  186.343195][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'.
[  186.366724][ T7293] EXT4-fs (loop4): 1 truncate cleaned up
[  186.367695][ T7293] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  186.546334][   T27] kauditd_printk_skb: 18 callbacks suppressed
[  186.546417][   T27] audit: type=1326 audit(186.530:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.4.703" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b77ee8 code=0x0
[  187.910863][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  187.911918][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  187.931591][ T6843] EXT4-fs (loop4): unmounting filesystem.
[  187.932875][ T7307] loop2: detected capacity change from 0 to 512
[  187.991563][ T7307] EXT4-fs: inline encryption not supported
[  188.040300][ T7307] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  188.061324][ T7307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  188.063909][ T7307] System zones: 1-12
[  188.328224][ T7307] EXT4-fs (loop2): 1 truncate cleaned up
[  188.329242][ T7307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  188.376883][ T7307] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full
[  188.562122][ T7302] netlink: 'syz.2.705': attribute type 6 has an invalid length.
[  188.589499][ T6419] EXT4-fs (loop2): unmounting filesystem.
[  188.619843][ T7321] loop0: detected capacity change from 0 to 736
[  189.669678][ T7342] loop4: detected capacity change from 0 to 512
[  189.689345][ T7342] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  189.699518][ T7342] EXT4-fs (loop4): 1 truncate cleaned up
[  189.700407][ T7342] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  189.711715][ T7339] device syzkaller0 entered promiscuous mode
[  189.714048][ T7339] tipc: Started in network mode
[  189.714819][ T7339] tipc: Node identity 2ed4da9bfc6f, cluster identity 4711
[  189.716118][ T7339] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.719121][ T7338] tipc: Resetting bearer <eth:syzkaller0>
[  189.812817][ T7338] tipc: Disabling bearer <eth:syzkaller0>
[  189.861557][ T7336] loop2: detected capacity change from 0 to 40427
[  189.898264][ T6843] EXT4-fs (loop4): unmounting filesystem.
[  189.905031][ T7336] F2FS-fs (loop2): invalid crc value
[  189.928821][ T7336] F2FS-fs (loop2): Found nat_bits in checkpoint
[  189.965525][ T7336] F2FS-fs (loop2): Start checkpoint disabled!
[  190.335912][ T7336] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  190.347853][ T7336] Bluetooth: MGMT ver 1.22
[  190.400772][ T7350] team0 (unregistering): Port device team_slave_0 removed
[  190.420173][ T7350] team0 (unregistering): Failed to send options change via netlink (err -105)
[  190.422072][ T7350] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  190.424253][ T7350] team0 (unregistering): Port device team_slave_1 removed
[  190.596775][ T7361] binder: 7360:7361 tried to acquire reference to desc 0, got 1 instead
[  190.604535][ T7361] binder: 7360:7361 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  190.611863][ T7361] binder: 7361 RLIMIT_NICE not set
[  190.667167][ T7361] binder: send failed reply for transaction 111 to 7360:7365
[  190.668893][ T5377] binder: undelivered TRANSACTION_COMPLETE
[  190.669865][ T5377] binder: undelivered TRANSACTION_ERROR: 29189
[  190.694037][ T7366] loop7: detected capacity change from 0 to 512
[  190.695472][ T7366] EXT4-fs: inline encryption not supported
[  190.699775][ T7366] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  190.711397][ T7366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  190.715271][ T7366] System zones: 1-12
[  190.761468][ T7366] EXT4-fs (loop7): 1 truncate cleaned up
[  190.762443][ T7366] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  190.868667][ T7366] EXT4-fs warning (device loop7): verify_group_input:169: Last group not full
[  190.906756][ T7362] netlink: 'syz.7.723': attribute type 6 has an invalid length.
[  190.954845][ T7381] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000009
[  190.991675][ T7088] EXT4-fs (loop7): unmounting filesystem.
[  192.042539][ T7402] team0 (unregistering): Port device team_slave_0 removed
[  192.045536][ T7402] team0 (unregistering): Failed to send options change via netlink (err -105)
[  192.047178][ T7402] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  192.049316][ T7402] team0 (unregistering): Port device team_slave_1 removed
[  192.093377][ T7407] netlink: 'syz.7.738': attribute type 10 has an invalid length.
[  192.094707][ T7407] netlink: 40 bytes leftover after parsing attributes in process `syz.7.738'.
[  192.124908][ T7407] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  192.213631][ T7421] loop2: detected capacity change from 0 to 16
[  193.044161][ T7421] erofs: (device loop2): mounted with root inode @ nid 36.
[  193.141903][   T27] audit: type=1326 audit(193.130:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86977ee8 code=0x7ffc0000
[  193.149240][   T27] audit: type=1326 audit(193.130:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86977ee8 code=0x7ffc0000
[  193.166643][   T27] audit: type=1326 audit(193.130:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffff86977ee8 code=0x7ffc0000
[  193.169925][   T27] audit: type=1326 audit(193.130:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86977ee8 code=0x7ffc0000
[  193.175081][ T4330] Bluetooth: hci2: hcon 00000000bec77dc8 sent 0 < count 137
[  193.176365][ T4330] Bluetooth: hci2: hcon 00000000bec77dc8 sent 0 < count 6
[  193.177538][ T4330] Bluetooth: hci2: hcon 00000000bec77dc8 sent 0 < count 511
[  193.178769][ T4330] Bluetooth: hci2: hcon 00000000bec77dc8 sent 0 < count 3
[  193.179888][ T4330] Bluetooth: hci2: hcon 00000000bec77dc8 sent 0 < count 4
[  193.181119][ T4330] Bluetooth: hci2: hcon 00000000eac0122e sent 1 < count 16393
[  193.183539][ T4330] Bluetooth: hci2: link tx timeout
[  193.184544][ T4330] Bluetooth: hci2: link tx timeout
[  194.032416][   T27] audit: type=1326 audit(193.130:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86977ee8 code=0x7ffc0000
[  194.035917][   T27] audit: type=1326 audit(193.130:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff86977ee8 code=0x7ffc0000
[  194.042251][ T7421] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  194.103277][   T27] audit: type=1326 audit(193.130:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86977ee8 code=0x7ffc0000
[  194.105291][ T7421] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[  194.106640][   T27] audit: type=1326 audit(193.130:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86977ee8 code=0x7ffc0000
[  194.122617][   T27] audit: type=1326 audit(193.130:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff86977ee8 code=0x7ffc0000
[  194.129350][   T27] audit: type=1326 audit(193.130:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86977ee8 code=0x7ffc0000
[  194.141189][ T7443] netlink: 'syz.4.746': attribute type 13 has an invalid length.
[  194.151714][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  194.159297][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  194.163326][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.198132][ T7446] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  194.199847][ T7446] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[  195.890035][ T7476] netlink: 'syz.0.756': attribute type 10 has an invalid length.
[  195.906423][ T7482] netlink: 'syz.6.757': attribute type 9 has an invalid length.
[  195.907774][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.6.757'.
[  196.006721][ T7491] loop2: detected capacity change from 0 to 1024
[  196.033433][ T7491] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  196.035204][ T7491] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  196.045470][ T7491] EXT4-fs error (device loop2): ext4_get_journal_inode:5756: inode #5: comm syz.2.763: unexpected bad inode w/o EXT4_IGET_BAD
[  196.079492][ T7491] EXT4-fs (loop2): no journal found
[  196.081631][ T7491] EXT4-fs (loop2): can't get journal size
[  196.087617][ T7491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  196.106715][ T6419] EXT4-fs (loop2): unmounting filesystem.
[  196.534277][ T4366] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[  196.809423][ T4366] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  196.810806][ T4366] usb 1-1: config 0 has no interface number 0
[  196.812965][ T4366] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  196.814703][ T4366] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  196.816508][ T4366] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  196.821022][ T4366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.836110][ T4366] usb 1-1: config 0 descriptor??
[  196.840832][ T7487] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  196.886203][ T4366] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  197.388483][ T7487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.390189][ T7487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.410381][ T4366] usb 1-1: USB disconnect, device number 6
[  197.411561][    C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  197.625651][ T7522] binder: 7521:7522 tried to acquire reference to desc 0, got 1 instead
[  197.627744][ T7522] binder: 7521:7522 got new transaction with bad transaction stack, transaction 116 has target 7521:0
[  197.629466][ T7522] binder: 7521:7522 transaction call to 7521:0 failed 117/29201/-71, size 0-0 line 3105
[  197.632106][ T7522] binder: 7521:7522 ioctl c0306201 20000480 returned -14
[  197.633793][   T24] binder: release 7521:7522 transaction 116 out, still active
[  197.635071][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[  198.460874][ T5988] binder: send failed reply for transaction 116, target dead
[  198.583350][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'.
[  198.586355][ T7541] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  198.922078][ T7543] netlink: 1032 bytes leftover after parsing attributes in process `syz.2.788'.
[  199.759653][ T7552] team0 (unregistering): Port device team_slave_0 removed
[  199.768327][ T7552] team0 (unregistering): Failed to send options change via netlink (err -105)
[  199.770026][ T7552] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  199.772986][ T7552] team0 (unregistering): Port device team_slave_1 removed
[  199.819611][ T7569] device syzkaller0 entered promiscuous mode
[  200.402525][ T7578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.432980][ T4334] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1
[  200.561618][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.564517][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.568150][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.570763][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.420618][ T7614] tipc: Failed to remove unknown binding: 66,0,0/0:4134045739/4134045741
[  202.431348][ T7609] tipc: Failed to remove unknown binding: 66,0,0/0:622459022/622459023
[  202.432841][ T7609] tipc: Failed to remove unknown binding: 66,0,0/0:622459022/622459023
[  203.810260][ T7617] device vlan2 entered promiscuous mode
[  203.956853][ T7631] loop7: detected capacity change from 0 to 40427
[  203.966044][ T7631] F2FS-fs (loop7): invalid crc value
[  204.258082][ T7631] F2FS-fs (loop7): Found nat_bits in checkpoint
[  204.290761][ T7631] F2FS-fs (loop7): Start checkpoint disabled!
[  204.321502][ T7631] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  204.374317][ T7649] binder: 7648:7649 tried to acquire reference to desc 0, got 1 instead
[  204.377664][ T7649] binder: 7648:7649 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  204.379640][ T7649] binder: 7649 RLIMIT_NICE not set
[  204.380493][ T7649] binder: 7649 RLIMIT_NICE not set
[  204.382303][ T7649] binder: 7649 RLIMIT_NICE not set
[  204.390719][ T5380] binder: undelivered TRANSACTION_COMPLETE
[  204.392217][ T5380] binder: undelivered transaction 123, process died.
[  204.393919][ T5380] binder: undelivered TRANSACTION_COMPLETE
[  204.491087][ T4334] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  204.493311][ T4334] Bluetooth: hci4: Injecting HCI hardware error event
[  204.495768][ T4330] Bluetooth: hci4: hardware error 0x00
[  204.609951][ T4585] kworker/u4:10: attempt to access beyond end of device
[  204.609951][ T4585] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  206.933819][ T7697] loop0: detected capacity change from 0 to 512
[  206.948632][ T7697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  206.953347][ T7694] loop2: detected capacity change from 0 to 4096
[  206.963600][ T7694] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  206.967603][ T7697] EXT4-fs (loop0): required journal recovery suppressed and not mounted read-only
[  207.029463][ T7694] ntfs3: loop2: failed to convert "076c" to cp932
[  207.134597][ T7703] loop6: detected capacity change from 0 to 32768
[  207.155038][ T7707] device syzkaller0 entered promiscuous mode
[  207.240661][ T7703] XFS (loop6): Mounting V5 Filesystem
[  207.299738][ T7703] XFS (loop6): Ending clean mount
[  207.301083][ T4330] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  208.182089][ T7045] XFS (loop6): Unmounting Filesystem
[  209.051555][ T7425] wlan1: Trigger new scan to find an IBSS to join
[  209.848195][ T7760] loop2: detected capacity change from 0 to 1024
[  211.908453][ T7793] loop4: detected capacity change from 0 to 1024
[  213.210593][ T7526] wlan1: Trigger new scan to find an IBSS to join
[  213.231936][ T7831] sctp: [Deprecated]: syz.7.865 (pid 7831) Use of struct sctp_assoc_value in delayed_ack socket option.
[  213.231936][ T7831] Use struct sctp_sack_info instead
[  213.270803][ T7834] netlink: 'syz.7.866': attribute type 1 has an invalid length.
[  213.285350][ T7834] 8021q: adding VLAN 0 to HW filter on device bond1
[  213.294243][ T7834] bond1: (slave ip6gretap1): making interface the new active one
[  213.296813][ T7834] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  213.303680][ T7834] device veth3 entered promiscuous mode
[  213.306289][ T7834] bond1: (slave veth3): Enslaving as an active interface with a down link
[  213.685051][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  215.951995][ T5463] wlan1: Creating new IBSS network, BSSID 9a:6f:dd:11:a4:fb
[  215.958474][ T7879] Unable to handle kernel paging request at virtual address ffff70003147bc00
[  215.959950][ T7879] KASAN: maybe wild-memory-access in range [0xffff80018a3de000-0xffff80018a3de007]
[  215.969928][ T7879] Mem abort info:
[  215.970472][ T7879]   ESR = 0x0000000096000006
[  215.971480][ T7879]   EC = 0x25: DABT (current EL), IL = 32 bits
[  215.972474][ T7879]   SET = 0, FnV = 0
[  215.973337][ T7879]   EA = 0, S1PTW = 0
[  215.973956][ T7879]   FSC = 0x06: level 2 translation fault
[  215.974948][ T7879] Data abort info:
[  215.975603][ T7879]   ISV = 0, ISS = 0x00000006
[  215.976376][ T7879]   CM = 0, WnR = 0
[  215.977030][ T7879] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000020dfba000
[  215.978192][ T7879] [ffff70003147bc00] pgd=000000023ea48003, p4d=000000023ea48003, pud=000000023ea47003, pmd=0000000000000000
[  215.980482][ T7879] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP
[  215.981663][ T7879] Modules linked in:
[  215.982249][ T7879] CPU: 0 PID: 7879 Comm: syz.4.880 Not tainted syzkaller #0
[  215.983416][ T7879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
[  215.985073][ T7879] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  215.986249][ T7879] pc : ip_route_output_key_hash_rcu+0xe38/0x1e38
[  215.987168][ T7879] lr : ip_route_output_key_hash_rcu+0xdb8/0x1e38
[  215.988190][ T7879] sp : ffff800021706930
[  215.988813][ T7879] x29: ffff800021706980 x28: dfff800000000000 x27: 0000000000000001
[  215.990070][ T7879] x26: 0000000080000000 x25: ffff0000f55f0400 x24: ffff0000c335ec20
[  215.991377][ T7879] x23: 0000000000000000 x22: ffff80018a3de000 x21: ffff0000df592000
[  215.992770][ T7879] x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000003
[  215.993944][ T7879] x17: 1fffe0001fd02580 x16: ffff8000082d7ca0 x15: 0000000000000002
[  215.995275][ T7879] x14: 0000000000000005 x13: 0000000000ff0100 x12: 0000000000080000
[  215.996458][ T7879] x11: 0000000000002531 x10: ffff80002ecbc000 x9 : ffff80018a3de000
[  215.997806][ T7879] x8 : 1ffff0003147bc00 x7 : ffff8000105d5700 x6 : 0000000000000000
[  215.999084][ T7879] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002
[  216.000271][ T7879] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
[  216.001603][ T7879] Call trace:
[  216.002113][ T7879]  ip_route_output_key_hash_rcu+0xe38/0x1e38
[  216.003055][ T7879]  ip_route_output_key_hash+0x1b0/0x300
[  216.003983][ T7879]  ip_route_output_flow+0x3c/0x160
[  216.004854][ T7879]  ipip6_tunnel_bind_dev+0x1a0/0x510
[  216.005705][ T7879]  ipip6_tunnel_init+0xd4/0x584
[  216.006544][ T7879]  register_netdevice+0x4a0/0x160c
[  216.007336][ T7879]  ipip6_tunnel_create+0x130/0x330
[  216.008137][ T7879]  ipip6_newlink+0x1f4/0x634
[  216.008823][ T7879]  rtnl_newlink+0x1058/0x1a50
[  216.009551][ T7879]  rtnetlink_rcv_msg+0x698/0xcdc
[  216.010321][ T7879]  netlink_rcv_skb+0x218/0x3e8
[  216.011076][ T7879]  rtnetlink_rcv+0x28/0x38
[  216.011804][ T7879]  netlink_unicast+0x60c/0x814
[  216.012562][ T7879]  netlink_sendmsg+0x6f4/0x9c0
[  216.013371][ T7879]  ____sys_sendmsg+0x5c8/0x938
[  216.014115][ T7879]  __sys_sendmsg+0x288/0x374
[  216.014881][ T7879]  __arm64_sys_sendmsg+0x80/0x94
[  216.015653][ T7879]  invoke_syscall+0x98/0x2b4
[  216.016422][ T7879]  el0_svc_common+0x138/0x258
[  216.017125][ T7879]  do_el0_svc+0x58/0x130
[  216.017862][ T7879]  el0_svc+0x58/0x128
[  216.018514][ T7879]  el0t_64_sync_handler+0x84/0xf0
[  216.019348][ T7879]  el0t_64_sync+0x18c/0x190
[  216.020129][ T7879] Code: d538d089 8b080136 d343fec8 aa1703f4 (387c6908) 
[  216.021282][ T7879] ---[ end trace 0000000000000000 ]---
[  216.337765][ T7879] Kernel panic - not syncing: Oops: Fatal exception
[  216.338613][ T7879] SMP: stopping secondary CPUs
[  216.339318][ T7879] Kernel Offset: disabled
[  216.339967][ T7879] CPU features: 0x080000,000f0097,a65bfea7
[  216.340891][ T7879] Memory Limit: none
[  216.673593][ T7879] Rebooting in 86400 seconds..