last executing test programs:

13m23.598122626s ago: executing program 32 (id=69):
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240), 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r1, &(0x7f0000000100), 0x10)

13m14.23026115s ago: executing program 33 (id=60):
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

12m3.633854093s ago: executing program 2 (id=258):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7)

12m3.389072413s ago: executing program 6 (id=259):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000001100)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x206, &(0x7f0000000480)="$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")
r0 = socket$unix(0x1, 0x2, 0x0)
stat(&(0x7f0000000740)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

12m3.376412043s ago: executing program 2 (id=261):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x5, 0x9, 0x6, 0x0, 0x9, 0x15, 0x8, 0xe, 0x6, 0x39, 0xfc, 0x1, 0x0, 0x4, 0x8, 0xf8, 0xd, 0x10, 0x4, '\x00', 0x2, 0x800})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m3.140744473s ago: executing program 6 (id=262):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fcntl$getown(0xffffffffffffffff, 0x9)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001", @ANYRES32=0x0, @ANYBLOB], 0x48)

12m2.182237334s ago: executing program 6 (id=263):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000010000107"], 0x1c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
epoll_create1(0x80000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020)

12m2.125217726s ago: executing program 2 (id=264):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x4, 0x800077, 0x3ff, 0xff, 0x6, 0x11f, 0xf64, 0xfffffffd})
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400040000000000100000000000000020"], 0x24, 0x0)

12m1.692231174s ago: executing program 2 (id=265):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffffffffffff, 0x2})

12m1.294459711s ago: executing program 6 (id=267):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x78d, &(0x7f00000007c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000000040004000000000010000100000000001ffffffffffffffa06e70000c650ce3582ab266e2d92d1d240575d9828453323983bd588fdb483a0973d4a97a6e652851d3bb1c625f4690975265d1fc9a6644f18ca2f855f66d5291bd67c4555acf112ea42e91dfecdb23d890200000000000000e4ca11fccedf4fb07d620ed94d9e"], 0x24, 0x0)

12m0.000172585s ago: executing program 2 (id=269):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x4000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f0000002180)="$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")
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0/file1\x00')

11m59.386021461s ago: executing program 6 (id=270):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000020c0), 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
io_setup(0x800, &(0x7f0000000440)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4f}])
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020)

11m58.635204853s ago: executing program 2 (id=273):
r0 = syz_open_dev$loop(0x0, 0x9, 0x109080)
ioctl$BLKSECTGET(r0, 0x1267, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2007)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000002980)={[{@dioread_lock}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}, {@data_err_ignore}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000440)="$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")

11m45.855577121s ago: executing program 6 (id=301):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[], 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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")
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0x3, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x144, 0x5, [{{@in6=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1fc}}, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x3e, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x3, 0x20, 0x1, 0x5, 0x9}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x5ba2}]}, 0x58)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x2, 0x9800, 0x1}}, 0x2e)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4)

11m43.088107518s ago: executing program 34 (id=273):
r0 = syz_open_dev$loop(0x0, 0x9, 0x109080)
ioctl$BLKSECTGET(r0, 0x1267, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2007)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000002980)={[{@dioread_lock}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}, {@data_err_ignore}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000440)="$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")

11m40.918044649s ago: executing program 3 (id=310):
mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0)

11m40.317290664s ago: executing program 3 (id=312):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2526, 0x7, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5", 0xb, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)

11m38.219869463s ago: executing program 3 (id=315):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x1f4, 0xfffffffe, 0x4, 0x402, 0x807fe})

11m38.095230937s ago: executing program 3 (id=316):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
getpid()
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa}]}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000f80)=""/4115, 0x3d, 0x1013, 0x1}, 0x20)
recvmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfed}, {&(0x7f0000002140)=""/130, 0x82}], 0x2}}], 0x110, 0x42, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000"], 0x0, 0x26}, 0x28)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3a, &(0x7f0000001a00), 0x0, 0xfffffda6, 0x10, 0x8, 0x0, 0x0}}, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000180)={{0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x308}, 0xfdfdffff, {0x2, 0x0, @empty}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x6, 0xfffffffb, 0x8, @empty, @mcast1, 0x20, 0x20, 0x6f188aaa, 0x7}})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x404e02, 0x0)

11m34.799624416s ago: executing program 3 (id=322):
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_open_procfs(0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
clock_gettime(0x9, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)}], 0x2}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)=""/105, 0x69}], 0x1}, 0x0)

11m33.391417226s ago: executing program 3 (id=324):
r0 = syz_open_dev$loop(0x0, 0x9, 0x109080)
ioctl$BLKSECTGET(r0, 0x1267, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2007)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x383d041, 0x0, 0x48, 0x0, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@init_itable_val={'init_itable', 0x3d, 0xe94}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@min_batch_time={'min_batch_time', 0x3d, 0xb}}, {@quota}]}, 0x2, 0x571, &(0x7f0000000d00)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==")
symlink(&(0x7f0000000780)='./file0\x00', &(0x7f0000000800)='./bus\x00')

11m30.073827006s ago: executing program 35 (id=301):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[], 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=")
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0x3, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x144, 0x5, [{{@in6=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1fc}}, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x3e, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x3, 0x20, 0x1, 0x5, 0x9}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x5ba2}]}, 0x58)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x2, 0x9800, 0x1}}, 0x2e)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4)

11m18.250818233s ago: executing program 36 (id=324):
r0 = syz_open_dev$loop(0x0, 0x9, 0x109080)
ioctl$BLKSECTGET(r0, 0x1267, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2007)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x383d041, 0x0, 0x48, 0x0, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@init_itable_val={'init_itable', 0x3d, 0xe94}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@min_batch_time={'min_batch_time', 0x3d, 0xb}}, {@quota}]}, 0x2, 0x571, &(0x7f0000000d00)="$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")
symlink(&(0x7f0000000780)='./file0\x00', &(0x7f0000000800)='./bus\x00')

10m57.569468884s ago: executing program 7 (id=375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, 0x0, 0x40)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdfffffffedbdf251d00000008000300", @ANYRES32=r4, @ANYBLOB="44002f80080001"], 0x60}, 0x1, 0x0, 0x0, 0xc0c5}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000200)={0x1}, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000077deff00850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x21, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0xfffffffffffffd40, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x7, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25}]}]}, 0xb8}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@delchain={0x4c, 0x65, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xfff3, 0x10}, {0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x3, 0x71}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20484d4}, 0x840)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x8000100, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x9}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040040}, 0x8024)

10m54.001973854s ago: executing program 7 (id=377):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0xfc, "8100e1c8e80b598c36ff000800"})
r1 = syz_open_pts(r0, 0x141601)
fcntl$setstatus(r1, 0x4, 0x102800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
tkill(0x0, 0xb)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3)
close_range(0xffffffffffffffff, r0, 0x0)

10m52.89561816s ago: executing program 7 (id=379):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x80)
r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000001c00), 0x12)

10m51.00679307s ago: executing program 7 (id=381):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0x0, 0xffff}, {0xffe0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)

10m50.743674391s ago: executing program 7 (id=384):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000000)='./file1\x00', 0x2218018, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRES8], 0xfc, 0x2d8, &(0x7f0000000040)="$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")
truncate(&(0x7f0000000380)='./file1\x00', 0xbf8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
getpgid(r0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4}, 0x10)

10m49.605178929s ago: executing program 7 (id=388):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000020c0), 0x802, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
io_setup(0x800, &(0x7f0000000440)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4f}])
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0x2020)

10m34.185291658s ago: executing program 37 (id=388):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000020c0), 0x802, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
io_setup(0x800, &(0x7f0000000440)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4f}])
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0x2020)

6m7.521307786s ago: executing program 9 (id=1021):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={r4, 0xd0}, &(0x7f0000000b00)=0x8)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r5, 0x0, 0x0)
write$FUSE_DIRENTPLUS(r5, 0x0, 0xb0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
r7 = io_uring_setup(0x4c7d, &(0x7f0000000000)={0x0, 0x14af, 0x1, 0x1, 0xfffffffe})
io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f00000004c0)={0x300, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0xffffffffffffffff}, 0x20)
syz_emit_ethernet(0x1d1, &(0x7f00000003c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x19b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {}, {0x0, 0x5, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2"}, {0x19, 0x7, "b8a3e10000a3e1030000000900fec0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x19}]}}}}}}, 0x0)

6m6.356408304s ago: executing program 9 (id=1024):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000008c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108)

6m5.330978778s ago: executing program 9 (id=1027):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
getpid()
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa}]}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000f80)=""/4115, 0x3d, 0x1013, 0x1}, 0x20)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfed}, {&(0x7f0000002140)=""/130, 0x82}], 0x2}}], 0x110, 0x42, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000"], 0x0, 0x26}, 0x28)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3a, &(0x7f0000001a00), 0x0, 0xfffffda6, 0x10, 0x8, 0x0, 0x0}}, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000180)={{0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x308}, 0xfdfdffff, {0x2, 0x0, @empty}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x6, 0xfffffffb, 0x8, @empty, @mcast1, 0x20, 0x20, 0x6f188aaa, 0x7}})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x404e02, 0x0)

6m0.847295687s ago: executing program 9 (id=1042):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket(0x840000000002, 0x3, 0x8e)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20)

6m0.77254655s ago: executing program 9 (id=1043):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = socket(0x11, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$alg(r2, 0x0, 0x0, 0x844)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0xffc9)

5m55.090653099s ago: executing program 9 (id=1062):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
bind$tipc(0xffffffffffffffff, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x1000}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000))

5m40.037581633s ago: executing program 38 (id=1062):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
bind$tipc(0xffffffffffffffff, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x1000}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000))

14.764650228s ago: executing program 1 (id=1872):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$clear(0x3, 0xfffffffffffffffd)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x122)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000500)}, 0x20)

13.780479389s ago: executing program 1 (id=1875):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0)

13.392753046s ago: executing program 1 (id=1878):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x0, 0x0, 0x51, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a", 0x3)

12.506932343s ago: executing program 4 (id=1880):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80004e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
close(0x3)
fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd})
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x2, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r4}}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r4}}, 0x18)

12.494643574s ago: executing program 0 (id=1881):
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f00000001c0)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5bcbf587779ddcc51bffcc36335708ceeb08ac2986d6c33b72b5cae82f84c95d3853f1dde1bc94de536bc730cead4f412791b9a9f7564d8c8092a478e68e28163b92f3e40f25491654ea6a747751b52e4dbca6619e416e4e58f5285da41ff56057e447f9175ebc4d44c06916ba5ab8fd6f3b31d334db35970df40c45e30e3655c5176285442099873d76d1fbbf0ca6b3d7ecd2ca274bd126", 0xbd)
connect$netlink(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}})
openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x801, 0x0)

10.996722037s ago: executing program 1 (id=1882):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpriority(0x0, r0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000300)=@multiplanar_overlay={0x9, 0x2, 0x4, 0x800000, 0x1, {}, {0x1, 0x0, 0x2e, 0x5, 0x8, 0xe, "42d861a3"}, 0x38, 0x3, {0x0}, 0x4})
unshare(0x6020400)
syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff02000000000000000000000000000100"], 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x4000884)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, 0x0, &(0x7f00000000c0))
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32)

10.6687043s ago: executing program 4 (id=1883):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
lseek(r4, 0xfff, 0x0)

10.21632252s ago: executing program 0 (id=1886):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x63, 0x100000, {<r0=>0xffffffffffffffff}, {0xee01}, 0x8000, 0x5080})
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x3, 0xc, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001240)='\x00\x00KK', 0x4}, {0x0, 0xea}], 0x2}, 0x80)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024})
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @vbi={0x7, 0x8, 0x3d54, 0x494e4f4b, [0x0, 0x4], [0x3, 0x5], 0x2023c860d0553049}})
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00')
pread64(r5, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002)

9.421749313s ago: executing program 8 (id=1887):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

9.356608216s ago: executing program 5 (id=1888):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0)

9.212731232s ago: executing program 0 (id=1889):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
getpid()
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000f80)=""/4115, 0x29, 0x1013, 0x1}, 0x28)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfed}, {&(0x7f0000002140)=""/130, 0x82}], 0x2}}], 0x110, 0x42, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000"], 0x0, 0x26}, 0x28)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3a, &(0x7f0000001a00), 0x0, 0xfffffda6, 0x10, 0x8, 0x0, 0x0}}, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000180)={{0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x308}, 0xfdfdffff, {0x2, 0x0, @empty}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x6, 0xfffffffb, 0x8, @empty, @mcast1, 0x20, 0x20, 0x6f188aaa, 0x7}})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x404e02, 0x0)

9.154590604s ago: executing program 5 (id=1890):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={r4, 0xd0}, &(0x7f0000000b00)=0x8)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r5, 0x0, 0x0)
write$FUSE_DIRENTPLUS(r5, 0x0, 0xb0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
r7 = io_uring_setup(0x4c7d, &(0x7f0000000000)={0x0, 0x14af, 0x1, 0x1, 0xfffffffe})
io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f00000004c0)={0x300, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0xffffffffffffffff}, 0x20)
syz_emit_ethernet(0x27c, &(0x7f00000003c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x246, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "0000050000000000260004"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x15, "06aa85616177c61bc943afcb84619755403946b0730a1800c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399"}, {0x0, 0x5, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2"}, {0x19, 0x7, "b8a3e10000a3e1030000000900fec0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x19}]}}}}}}, 0x0)

8.927775564s ago: executing program 8 (id=1891):
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x800}}, './file0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f0000000380), 0x0)

8.06362692s ago: executing program 5 (id=1892):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000006400)=ANY=[], 0x8)
close(0x4)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffe0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x48}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0xa, [{0x10, 0x1}, {0xf, 0x1}, {0x4, 0x3}, {0x7, 0x4}]}]}}, &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x8}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)

7.197179467s ago: executing program 8 (id=1893):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80004e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
close(0x3)
fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd})
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x2, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r4}}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r4}}, 0x18)

6.044689035s ago: executing program 8 (id=1894):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000040)=ANY=[], 0x2, 0x1518, &(0x7f0000000280)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

5.545279987s ago: executing program 0 (id=1895):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x4000, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07"], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r4], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000340)=r4}, 0x20)
close(0x3)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x7fff, r6}, 0x38)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800)
r9 = socket(0x2a, 0x2, 0x0)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x1411, 0x701, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}}, 0x84)
getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0xffec}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x9}]}}]}, 0x44}}, 0x4000)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, 0x0, 0x0, 0x0)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x10)

5.235691419s ago: executing program 5 (id=1896):
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f00000001c0)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5bcbf587779ddcc51bffcc36335708ceeb08ac2986d6c33b72b5cae82f84c95d3853f1dde1bc94de536bc730cead4f412791b9a9f7564d8c8092a478e68e28163b92f3e40f25491654ea6a747751b52e4dbca6619e416e4e58f5285da41ff56057e447f9175ebc4d44c06916ba5ab8fd6f3b31d334db35970df40c45e30e3655c5176285442099873d76d1fbbf0ca6b3d7ecd2ca274bd126", 0xbd)
connect$netlink(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}})
openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x801, 0x0)

5.176712392s ago: executing program 4 (id=1897):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$clear(0x3, 0xfffffffffffffffd)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x122)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000500)}, 0x20)

5.176378822s ago: executing program 0 (id=1898):
syz_open_dev$evdev(&(0x7f0000000040), 0xa, 0x200000)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$inet(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000001b80)="f10e8f46", 0x4}, {0x0}], 0x2}, 0x20044080)
r1 = socket$inet6(0xa, 0x2, 0x3a)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
ppoll(&(0x7f0000000040)=[{r4, 0x7329}, {r3, 0x718c}, {r1, 0x2204}], 0x3, 0x0, 0x0, 0x0)
close(r2)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_disconnect(r5)

4.838161286s ago: executing program 8 (id=1899):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x63, 0x100000, {<r0=>0xffffffffffffffff}, {0xee01}, 0x8000, 0x5080})
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x3, 0xc, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001240)='\x00\x00KK', 0x4}, {0x0, 0xea}], 0x2}, 0x80)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024})
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @vbi={0x7, 0x8, 0x3d54, 0x494e4f4b, [0x0, 0x4], [0x3, 0x5], 0x2023c860d0553049}})
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00')
pread64(r5, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002)

4.776652339s ago: executing program 5 (id=1900):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_open_dev$video4linux(&(0x7f0000000040), 0xc, 0x0)
r1 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private=0xa010100}}}}}, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r3, r4, 0x0, 0x2000fb)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0x3)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x3b, &(0x7f00000000c0)=ANY=[])
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x628200c2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x52}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080c1}, 0xc1)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x94, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x74, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffefffffff, @default, 0x30c0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x94}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x404}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r10, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r11 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r12=>0x0}, &(0x7f0000cab000)=0x32)
setresuid(0x0, r12, r12)
r13 = fsmount(r1, 0x0, 0xa)
fchdir(r13)
open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000300)={0x0, 0x8, 0x0, 'queue0\x00', 0x2})

4.257698441s ago: executing program 4 (id=1901):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x4)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001a000100000002000000000002800000"], 0x24}}, 0x40000)

4.072527298s ago: executing program 1 (id=1902):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={r4, 0xd0}, &(0x7f0000000b00)=0x8)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r5, 0x0, 0x0)
write$FUSE_DIRENTPLUS(r5, 0x0, 0xb0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
r7 = io_uring_setup(0x4c7d, &(0x7f0000000000)={0x0, 0x14af, 0x1, 0x1, 0xfffffffe})
io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f00000004c0)={0x300, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0xffffffffffffffff}, 0x20)
syz_emit_ethernet(0x27c, &(0x7f00000003c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x246, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "0000050000000000260004"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x15, "06aa85616177c61bc943afcb84619755403946b0730a1800c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399"}, {0x0, 0x5, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2"}, {0x19, 0x7, "b8a3e10000a3e1030000000900fec0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x19}]}}}}}}, 0x0)

3.276287762s ago: executing program 8 (id=1903):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x4)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1.722791768s ago: executing program 4 (id=1904):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000000)='./file1\x00', 0x2218018, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRES8], 0xfc, 0x2d8, &(0x7f0000000040)="$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")
truncate(&(0x7f0000000380)='./file1\x00', 0xbf8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r6, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
getpgid(r0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
bind$tipc(r5, 0x0, 0x0)

1.722300557s ago: executing program 5 (id=1905):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
getpid()
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000f80)=""/4115, 0x29, 0x1013, 0x1}, 0x28)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfed}, {&(0x7f0000002140)=""/130, 0x82}], 0x2}}], 0x110, 0x42, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000"], 0x0, 0x26}, 0x28)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e66"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3a, &(0x7f0000001a00), 0x0, 0xfffffda6, 0x10, 0x8, 0x0, 0x0}}, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000180)={{0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x308}, 0xfdfdffff, {0x2, 0x0, @empty}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x6, 0xfffffffb, 0x8, @empty, @mcast1, 0x20, 0x20, 0x6f188aaa, 0x7}})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x404e02, 0x0)

1.686895349s ago: executing program 0 (id=1906):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee", 0x1d}], 0x1}, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0xa)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef10d"], 0xf8)

1.440717289s ago: executing program 1 (id=1907):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000006400)=ANY=[], 0x8)
close(0x4)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffe0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x48}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0xa, [{0x10, 0x1}, {0xf, 0x1}, {0x4, 0x3}, {0x7, 0x4}]}]}}, &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x8}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)

0s ago: executing program 4 (id=1908):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
lseek(r4, 0xfff, 0x0)

kernel console output (not intermixed with test programs):

][ T6031] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.354: inode has both inline data and extents flags
[  236.570273][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.578076][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.586134][ T6031] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.354: couldn't read orphan inode 15 (err -117)
[  236.598289][ T6031] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  236.616558][ T5980] device bridge_slave_0 entered promiscuous mode
[  236.767251][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.774400][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.783363][ T5980] device bridge_slave_1 entered promiscuous mode
[  236.852228][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  236.989350][ T4232] Bluetooth: hci5: command 0x040f tx timeout
[  237.525990][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  237.556575][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.617854][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.714540][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.822126][ T5980] team0: Port device team_slave_0 added
[  237.867523][ T5980] team0: Port device team_slave_1 added
[  239.055373][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  239.094736][ T4646] Bluetooth: hci5: command 0x0419 tx timeout
[  242.776935][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.812290][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.192156][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.414020][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.482402][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.790476][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.020056][ T5980] device hsr_slave_0 entered promiscuous mode
[  244.050735][ T5980] device hsr_slave_1 entered promiscuous mode
[  244.072557][ T5980] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  244.083281][ T6088] loop4: detected capacity change from 0 to 256
[  244.099107][ T5980] Cannot create hsr debugfs directory
[  244.148146][ T6088] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  244.156368][ T6088] FAT-fs (loop4): Filesystem has been set read-only
[  244.295952][ T6091] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  244.376633][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  244.683031][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  244.714128][ T6097] xt_CONNSECMARK: invalid mode: 66
[  244.791964][ T6102] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  245.009449][ T4198] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  245.168788][ T5852] device veth0_vlan entered promiscuous mode
[  245.227340][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  245.262652][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  245.395525][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  245.637496][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  246.118896][  T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.325022][ T6121] bridge0: port 3(geneve1) entered blocking state
[  247.332065][ T6121] bridge0: port 3(geneve1) entered disabled state
[  247.341281][ T6121] device geneve1 entered promiscuous mode
[  247.463692][  T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.523009][ T5852] device veth1_vlan entered promiscuous mode
[  247.566106][  T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.623008][ T5852] device veth0_macvtap entered promiscuous mode
[  247.664201][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  247.704110][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  247.749394][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  247.768497][ T6141] loop4: detected capacity change from 0 to 256
[  247.787676][  T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.820101][ T6141] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  247.829862][ T6141] FAT-fs (loop4): Filesystem has been set read-only
[  247.849717][ T5852] device veth1_macvtap entered promiscuous mode
[  247.879319][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.890700][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.901237][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.912588][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.924507][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[  247.979047][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.030743][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.070932][ T6145] netlink: 32 bytes leftover after parsing attributes in process `syz.7.375'.
[  248.111007][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.179770][ T6148] xt_CONNSECMARK: invalid mode: 66
[  248.489073][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.713103][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.752780][ T5852] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.782233][ T5852] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.832163][ T5852] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.855493][ T5852] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.928904][ T4198] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  248.943475][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  248.958677][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  248.979656][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  248.999168][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  249.008513][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  249.712455][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.720044][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.374606][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.443675][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.113793][ T6145] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.122960][ T6145] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.134483][ T6145] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.144875][ T6145] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.337282][ T6164] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  252.666695][ T1458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.689916][ T1458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.741214][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  252.761322][  T154] tipc: Left network mode
[  252.827508][ T5980] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  252.852678][ T1458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.862363][ T5980] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  252.871165][ T1458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.944613][ T5980] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  252.964644][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  252.981814][ T5980] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  253.742184][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.8.328'.
[  253.751641][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz.8.328'.
[  253.760745][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz.8.328'.
[  254.490107][ T6209] netlink: 40 bytes leftover after parsing attributes in process `syz.7.381'.
[  254.662477][ T6212] netlink: 'syz.5.382': attribute type 4 has an invalid length.
[  254.685549][ T6219] loop7: detected capacity change from 0 to 256
[  254.742848][ T6219] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 196)
[  254.751651][ T6219] FAT-fs (loop7): Filesystem has been set read-only
[  254.858320][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.955050][ T5980] 8021q: adding VLAN 0 to HW filter on device team0
[  254.976802][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  255.049380][ T6228] xt_CONNSECMARK: invalid mode: 66
[  255.402031][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  255.752632][ T6232] overlayfs: overlapping lowerdir path
[  255.798118][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.804507][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  255.813903][ T5689] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 196)
[  255.903457][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  255.967411][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  256.016474][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.023637][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.052376][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  256.073905][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  256.092992][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.100236][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.297869][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  256.352579][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  256.776597][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  256.836647][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  256.905440][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  256.924818][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  256.975784][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  257.003424][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  257.042476][ T5980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  257.095083][ T5980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  257.148211][ T6251] device syzkaller0 entered promiscuous mode
[  257.161349][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  257.180643][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  257.214028][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  257.229750][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  257.262803][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  257.418814][ T6248] netlink: 44 bytes leftover after parsing attributes in process `syz.8.391'.
[  257.710067][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.8.393'.
[  257.967469][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  257.981168][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  258.076651][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.213580][  T154] device hsr_slave_0 left promiscuous mode
[  258.255576][  T154] device hsr_slave_1 left promiscuous mode
[  258.276142][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.313686][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.350701][  T154] device bridge_slave_1 left promiscuous mode
[  258.367657][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.386259][  T154] device bridge_slave_0 left promiscuous mode
[  258.395875][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.475506][  T154] device hsr_slave_0 left promiscuous mode
[  258.518698][  T154] device hsr_slave_1 left promiscuous mode
[  258.542555][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.695627][ T4199] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[  259.543981][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.782789][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.810929][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.846164][  T154] device bridge_slave_1 left promiscuous mode
[  259.894336][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.955232][  T154] device bridge_slave_0 left promiscuous mode
[  259.998595][ T6307] loop5: detected capacity change from 0 to 256
[  260.007637][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.074791][ T6307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  260.083096][ T6307] FAT-fs (loop5): Filesystem has been set read-only
[  260.373137][  T154] device veth1_macvtap left promiscuous mode
[  260.776442][ T6309] xt_CONNSECMARK: invalid mode: 66
[  261.045450][  T154] device veth0_macvtap left promiscuous mode
[  261.262621][  T154] device veth1_vlan left promiscuous mode
[  261.405082][  T154] device veth0_vlan left promiscuous mode
[  261.423015][ T4556] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  263.226346][  T154] team0 (unregistering): Port device team_slave_1 removed
[  263.247675][  T154] team0 (unregistering): Port device team_slave_0 removed
[  263.266608][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.287277][  T154] bond0 (unregistering): (slave 
3
0
): Releasing backup interface
[  263.397686][  T154] bond0 (unregistering): Released all slaves
[  263.593313][  T154] team0 (unregistering): Port device team_slave_1 removed
[  263.621405][  T154] team0 (unregistering): Port device team_slave_0 removed
[  263.647147][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.666854][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  263.789131][  T154] bond0 (unregistering): Released all slaves
[  263.889785][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'.
[  263.916710][ T6326] netlink: 'syz.4.404': attribute type 5 has an invalid length.
[  263.924514][ T6326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.404'.
[  263.979272][ T6326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  264.005565][ T6326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  264.014245][ T6326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  264.045523][ T6326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  264.058776][ T6326] device geneve2 entered promiscuous mode
[  264.076762][ T6327] device syzkaller0 entered promiscuous mode
[  265.296431][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  265.311321][ T6353] loop8: detected capacity change from 0 to 256
[  265.323578][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  265.421917][ T6353] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 196)
[  265.430325][ T6353] FAT-fs (loop8): Filesystem has been set read-only
[  266.208994][ T6359] xt_CONNSECMARK: invalid mode: 66
[  269.429196][ T5852] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 196)
[  269.601963][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  269.636229][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  269.728530][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  269.743256][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  269.798970][ T5980] device veth0_vlan entered promiscuous mode
[  269.905752][ T5980] device veth1_vlan entered promiscuous mode
[  270.118708][ T5980] device veth0_macvtap entered promiscuous mode
[  271.086965][ T5980] device veth1_macvtap entered promiscuous mode
[  271.195487][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  271.231452][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  271.299084][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  271.358359][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  271.398466][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.506355][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.897596][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.080268][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  272.106748][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  272.216608][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.288580][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.330531][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.526190][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  272.547787][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  272.813037][ T6395] device bridge_slave_0 left promiscuous mode
[  272.858246][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.175729][ T6395] device bridge_slave_1 left promiscuous mode
[  273.191538][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.253444][ T6395] bond0: (slave 
3
0
): Releasing backup interface
[  273.288044][ T6395] bond0: (slave bond_slave_1): Releasing backup interface
[  273.377554][ T6403] loop5: detected capacity change from 0 to 256
[  273.454208][ T6403] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  273.462485][ T6403] FAT-fs (loop5): Filesystem has been set read-only
[  273.473365][ T6395] team0: Port device team_slave_0 removed
[  273.547022][ T6395] team0: Port device team_slave_1 removed
[  273.555928][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_0
[  273.597215][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_1
[  273.684795][ T6395] device geneve1 left promiscuous mode
[  273.694206][ T6395] bridge0: port 3(geneve1) entered disabled state
[  273.783103][ T6405] xt_CONNSECMARK: invalid mode: 66
[  274.484779][ T4177] Bluetooth: hci1: command 0x0409 tx timeout
[  274.517428][ T4556] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  274.530173][ T5980] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.576081][ T5980] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.584931][ T5980] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.805231][ T5980] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.275432][ T6410] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  275.283032][ T6410] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  275.291486][ T6411] syz.4.423 uses obsolete (PF_INET,SOCK_PACKET)
[  276.545613][ T4646] Bluetooth: hci1: command 0x041b tx timeout
[  277.356842][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.386895][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.733911][ T1458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.750959][ T1458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.974719][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  277.983514][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  278.007061][ T6429] netlink: 'syz.5.427': attribute type 4 has an invalid length.
[  278.626292][ T4644] Bluetooth: hci1: command 0x040f tx timeout
[  278.637879][ T6391] chnl_net:caif_netlink_parms(): no params data found
[  279.285504][ T4643] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  279.431132][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.640488][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.672178][ T6391] device bridge_slave_0 entered promiscuous mode
[  279.681233][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.698873][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.701175][ T4643] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  279.719952][ T4643] usb 5-1: config 0 has no interfaces?
[  281.253449][ T4643] usb 5-1: New USB device found, idVendor=5443, idProduct=0042, bcdDevice= 0.00
[  281.285422][ T4643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.324673][ T4643] usb 5-1: config 0 descriptor??
[  281.389285][ T4645] Bluetooth: hci1: command 0x0419 tx timeout
[  281.426662][ T6391] device bridge_slave_1 entered promiscuous mode
[  281.486509][ T4643] usb 5-1: can't set config #0, error -71
[  281.540043][ T4643] usb 5-1: USB disconnect, device number 4
[  281.648867][ T6391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.779973][ T6391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  282.341231][ T6391] team0: Port device team_slave_0 added
[  282.662761][ T6391] team0: Port device team_slave_1 added
[  282.824733][ T6504] loop9: detected capacity change from 0 to 256
[  282.923665][ T6504] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 196)
[  282.931911][ T6504] FAT-fs (loop9): Filesystem has been set read-only
[  283.185403][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  283.272917][ T6515] xt_CONNSECMARK: invalid mode: 66
[  284.031006][ T6508] device bridge_slave_0 left promiscuous mode
[  284.165670][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.211409][ T5980] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 196)
[  285.241714][ T6508] device bridge_slave_1 left promiscuous mode
[  285.267107][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.395515][ T6508] bond0: (slave 
3
0
): Releasing backup interface
[  285.407898][ T6508] bond0: (slave bond_slave_1): Releasing backup interface
[  285.556826][ T6528] autofs4:pid:6528:autofs_fill_super: called with bogus options
[  286.428364][ T6508] team0: Port device team_slave_0 removed
[  286.762921][ T6508] team0: Port device team_slave_1 removed
[  287.129138][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_0
[  287.178736][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.204713][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.235607][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.340035][ T6391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.511750][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.523706][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.872959][ T6391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.141619][ T6391] device hsr_slave_0 entered promiscuous mode
[  288.179369][ T6391] device hsr_slave_1 entered promiscuous mode
[  289.671893][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  289.684214][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  289.692612][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  289.703117][ T6581] device bridge_slave_0 left promiscuous mode
[  289.711547][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.738329][ T6581] device bridge_slave_1 left promiscuous mode
[  289.762092][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.785271][ T6581] bond0: (slave bond_slave_0): Releasing backup interface
[  289.834199][ T6581] bond0: (slave bond_slave_1): Releasing backup interface
[  290.004223][ T6581] team0: Port device team_slave_0 removed
[  290.044941][ T6581] team0: Port device team_slave_1 removed
[  290.093313][ T6581] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.115862][ T6581] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.139083][ T6581] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.193939][ T6581] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.380482][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.8.461'.
[  290.435964][ T6602] netlink: 16 bytes leftover after parsing attributes in process `syz.8.461'.
[  290.469616][ T6602] netlink: 16 bytes leftover after parsing attributes in process `syz.8.461'.
[  291.881171][ T6612] tipc: Started in network mode
[  291.886539][ T6612] tipc: Node identity 6e61639094da, cluster identity 4711
[  291.927141][ T6612] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.151992][ T6622] tipc: Disabling bearer <eth:syzkaller0>
[  292.427070][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  292.494165][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  292.659749][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  293.822980][ T6391] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  293.891319][ T6391] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  293.917167][ T6391] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  293.948994][ T6391] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  294.276915][ T6391] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.394291][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  294.412297][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  294.618111][ T6391] 8021q: adding VLAN 0 to HW filter on device team0
[  294.855768][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.9.475'.
[  294.864855][ T6679] netlink: 16 bytes leftover after parsing attributes in process `syz.9.475'.
[  294.874198][ T6679] netlink: 16 bytes leftover after parsing attributes in process `syz.9.475'.
[  295.551127][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  295.578272][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  295.587349][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.594466][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.619198][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  295.644218][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  295.883246][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.890573][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.319293][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  296.719364][ T6688] 
: renamed from bond_slave_0
[  296.759939][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  296.829169][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  296.872653][ T6701] tipc: Started in network mode
[  296.886757][ T6701] tipc: Node identity 5a012d061e35, cluster identity 4711
[  296.894047][ T6701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.011750][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  297.036342][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  297.085677][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  297.094655][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  297.103734][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  297.117577][ T6709] tipc: Resetting bearer <eth:syzkaller0>
[  297.128303][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  297.141124][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  297.247851][ T6700] device syzkaller0 entered promiscuous mode
[  297.289670][ T6700] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  297.474741][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  297.613941][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  297.903251][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  297.932453][ T6699] tipc: Resetting bearer <eth:syzkaller0>
[  297.973006][ T6699] tipc: Disabling bearer <eth:syzkaller0>
[  298.275744][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.486'.
[  298.284713][ T6725] netlink: 16 bytes leftover after parsing attributes in process `syz.5.486'.
[  298.293780][ T6725] netlink: 16 bytes leftover after parsing attributes in process `syz.5.486'.
[  298.589357][  T154] device hsr_slave_0 left promiscuous mode
[  298.770907][  T154] device hsr_slave_1 left promiscuous mode
[  298.906885][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.933747][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  298.966539][  T154] device bridge_slave_1 left promiscuous mode
[  299.016107][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.041541][ T6732] binder: 6727:6732 ioctl c0306201 0 returned -14
[  299.047875][  T154] device bridge_slave_0 left promiscuous mode
[  299.054302][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.147617][ T6729] binder: 6727:6729 ioctl c0306201 0 returned -14
[  300.188712][ T6745] syz.5.492 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  301.158658][  T154] team0 (unregistering): Port device team_slave_1 removed
[  301.209994][  T154] team0 (unregistering): Port device team_slave_0 removed
[  301.293911][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  301.507516][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.589090][  T154] bond0 (unregistering): Released all slaves
[  302.810426][ T6769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.832332][ T6769] device syzkaller0 entered promiscuous mode
[  302.845545][ T4643] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  302.897001][ T6770] tipc: Resetting bearer <eth:syzkaller0>
[  302.944193][ T6768] tipc: Resetting bearer <eth:syzkaller0>
[  302.976544][ T6768] tipc: Disabling bearer <eth:syzkaller0>
[  303.136789][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  303.144505][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  303.191334][ T6391] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.255657][ T4643] usb 10-1: Using ep0 maxpacket: 16
[  303.815532][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  303.857249][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  303.943953][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  303.979208][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  303.998883][ T6391] device veth0_vlan entered promiscuous mode
[  304.007729][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  304.104789][ T4643] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  304.118474][ T4643] usb 10-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00
[  304.127744][ T4643] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.137817][ T4643] usb 10-1: config 0 descriptor??
[  304.148097][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  304.202447][ T6391] device veth1_vlan entered promiscuous mode
[  304.373832][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  304.384460][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  304.520159][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  304.632709][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  305.017365][ T6391] device veth0_macvtap entered promiscuous mode
[  305.055850][ T6391] device veth1_macvtap entered promiscuous mode
[  305.120109][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.190193][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.202128][ T6391] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.213537][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  305.232028][ T4643] hid (null): bogus close delimiter
[  305.240403][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  305.258813][ T4643] asus 0003:0B05:183D.0003: unknown main item tag 0x2
[  305.284508][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.297212][ T4643] asus 0003:0B05:183D.0003: bogus close delimiter
[  305.303686][ T4643] asus 0003:0B05:183D.0003: item 0 0 2 10 parsing failed
[  305.322654][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.345606][ T4643] asus 0003:0B05:183D.0003: Asus hid parse failed: -22
[  305.352567][ T4643] asus: probe of 0003:0B05:183D.0003 failed with error -22
[  305.361523][ T6391] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.409330][ T6391] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.454213][ T6391] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.524223][ T6391] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.533077][ T6391] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.549695][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  305.560448][ T4510] usb 10-1: USB disconnect, device number 2
[  305.579049][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  306.181382][ T6809] loop5: detected capacity change from 0 to 256
[  306.261146][ T6809] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  306.269465][ T6809] FAT-fs (loop5): Filesystem has been set read-only
[  306.429183][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.494320][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.219618][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  307.270042][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.328774][ T4556] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  307.353772][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.392459][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  308.653163][ T6833] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  312.636825][ T6849] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  318.306258][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  318.312699][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  318.395633][ T6884] netlink: 'syz.4.524': attribute type 4 has an invalid length.
[  318.513887][ T6884] netlink: 'syz.4.524': attribute type 4 has an invalid length.
[  319.885742][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'.
[  319.894727][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.529'.
[  319.903837][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.529'.
[  320.693223][ T6916] loop0: detected capacity change from 0 to 256
[  320.791991][ T6916] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[  320.800384][ T6916] FAT-fs (loop0): Filesystem has been set read-only
[  321.122595][ T6926] xt_CONNSECMARK: invalid mode: 66
[  322.897701][ T6391] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[  324.442628][ T6941] tipc: Started in network mode
[  324.476033][ T6941] tipc: Node identity f61e7fbea1ff, cluster identity 4711
[  324.516213][ T6941] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.550398][ T6941] device syzkaller0 entered promiscuous mode
[  324.606533][ T6941] tipc: Resetting bearer <eth:syzkaller0>
[  324.658040][ T6939] tipc: Resetting bearer <eth:syzkaller0>
[  324.689198][ T6939] tipc: Disabling bearer <eth:syzkaller0>
[  324.967966][ T6950] device syzkaller0 entered promiscuous mode
[  326.247563][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'.
[  326.256683][ T6976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.542'.
[  326.265651][ T6976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.542'.
[  326.678572][ T6975] team0: Mode changed to "broadcast"
[  328.262457][ T6993] process 'syz.5.550' launched './file2' with NULL argv: empty string added
[  328.306752][ T6995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.316300][ T6995] device syzkaller0 entered promiscuous mode
[  328.335981][ T6995] tipc: Resetting bearer <eth:syzkaller0>
[  328.405484][ T6994] tipc: Resetting bearer <eth:syzkaller0>
[  328.460896][ T6994] tipc: Disabling bearer <eth:syzkaller0>
[  330.467017][ T7024] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  331.641123][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.559'.
[  331.650199][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.559'.
[  331.659195][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.559'.
[  332.488525][ T4644] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  333.185933][ T4644] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  333.262721][ T4644] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  333.475873][ T4644] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  333.496723][ T4644] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.504951][ T4644] usb 6-1: Product: syz
[  333.561818][ T4644] usb 6-1: Manufacturer: syz
[  333.576959][ T4644] usb 6-1: SerialNumber: syz
[  333.598159][ T4644] usb 6-1: config 0 descriptor??
[  333.846726][ T4644] usb 6-1: USB disconnect, device number 5
[  334.669897][ T7073] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  340.150349][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'.
[  340.265123][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  340.276331][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  340.284174][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  340.296484][ T7100] device bridge_slave_0 left promiscuous mode
[  340.302965][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.314683][ T7100] device bridge_slave_1 left promiscuous mode
[  340.325040][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.340982][ T7100] bond0: (slave bond_slave_0): Releasing backup interface
[  340.371652][ T4511] Bluetooth: hci3: command 0x0406 tx timeout
[  340.504051][ T7100] bond0: (slave bond_slave_1): Releasing backup interface
[  340.757774][ T7100] team0: Port device team_slave_0 removed
[  340.858275][ T7100] team0: Port device team_slave_1 removed
[  340.912504][ T7100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.938739][ T7100] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.965967][ T7100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  341.286581][ T7100] batman_adv: batadv0: Removing interface: batadv_slave_1
[  341.393857][ T7101] team0: Mode changed to "broadcast"
[  343.129376][ T7129] batman_adv: batadv0: Adding interface: dummy0
[  343.157097][ T7129] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.188583][ T7131] loop5: detected capacity change from 0 to 256
[  343.203281][ T7131] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  343.211824][ T7131] FAT-fs (loop5): Filesystem has been set read-only
[  343.348353][ T7129] batman_adv: batadv0: Interface activated: dummy0
[  344.158088][ T7124] batadv0: mtu less than device minimum
[  344.317140][ T4556] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  344.368092][ T7124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  344.381282][ T7124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  344.402577][ T7124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  344.415152][ T7124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  344.427674][ T7124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  344.440420][ T7124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  344.452905][ T7124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  344.465536][ T7124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  344.478203][ T7124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  346.429743][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  346.477027][ T7163] batman_adv: batadv0: Interface deactivated: dummy0
[  346.509857][ T7163] batman_adv: batadv0: Removing interface: dummy0
[  346.571259][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  346.606533][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  346.614469][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  346.632781][ T7163] device bridge_slave_0 left promiscuous mode
[  346.644646][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.675978][ T7163] device bridge_slave_1 left promiscuous mode
[  346.696311][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.733835][ T7163] bond0: (slave bond_slave_0): Releasing backup interface
[  346.767499][ T7163] bond0: (slave bond_slave_1): Releasing backup interface
[  346.865202][ T7163] team0: Port device team_slave_0 removed
[  346.923401][ T7163] team0: Port device team_slave_1 removed
[  346.936062][ T7163] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  346.943672][ T7163] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.958457][ T7163] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.966688][ T7163] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.985934][ T7167] team0: Mode changed to "broadcast"
[  348.029834][ T7184] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  349.732214][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.9.594'.
[  351.043570][ T7223] team0: Unable to change to the same mode the team is in
[  351.515011][ T7239] netlink: 24 bytes leftover after parsing attributes in process `syz.9.602'.
[  352.235999][ T7239] loop9: detected capacity change from 0 to 4096
[  352.488278][ T7239] EXT4-fs (loop9): Test dummy encryption mode enabled
[  352.495376][ T7239] EXT4-fs (loop9): Ignoring removed oldalloc option
[  352.586376][ T7239] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003]
[  352.595159][ T7239] System zones: 0-5
[  352.816335][ T7239] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  354.257038][ T7271] team0: Unable to change to the same mode the team is in
[  355.105475][ T4232] Bluetooth: hci5: command 0x0406 tx timeout
[  362.760983][ T7325] team0: Mode changed to "broadcast"
[  363.239480][ T7355] loop4: detected capacity change from 0 to 256
[  363.306545][ T7355] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  363.314750][ T7355] FAT-fs (loop4): Filesystem has been set read-only
[  363.498084][ T7358] xt_CONNSECMARK: invalid mode: 66
[  364.124118][ T4198] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  369.748787][ T7420] loop4: detected capacity change from 0 to 256
[  371.195530][ T7420] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  371.203791][ T7420] FAT-fs (loop4): Filesystem has been set read-only
[  371.408807][ T7426] xt_CONNSECMARK: invalid mode: 66
[  371.627974][ T4198] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  373.690352][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.9.655'.
[  373.714105][   T26] audit: type=1326 audit(1778595508.411:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.0.656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  373.837888][ T7452] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  373.973270][   T26] audit: type=1326 audit(1778595508.441:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.0.656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  374.347201][   T26] audit: type=1326 audit(1778595508.461:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.0.656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  374.782061][   T26] audit: type=1326 audit(1778595508.461:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.0.656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  375.132656][   T26] audit: type=1326 audit(1778595508.461:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.0.656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  375.456852][   T26] audit: type=1326 audit(1778595508.461:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.0.656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  375.864267][   T26] audit: type=1326 audit(1778595508.461:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.0.656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  376.319244][   T26] audit: type=1326 audit(1778595508.461:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.0.656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  376.663888][   T26] audit: type=1326 audit(1778595508.461:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.0.656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  376.688045][   T26] audit: type=1326 audit(1778595508.471:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.0.656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  378.881398][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  379.031435][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  388.467680][ T7599] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  388.512127][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  388.521805][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  388.531426][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  388.539683][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  389.484518][ T7603] team0: Unable to change to the same mode the team is in
[  392.336296][ T7640] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  392.344431][ T7640] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  393.726731][ T7667] team0: Unable to change to the same mode the team is in
[  395.367283][ T7683] netlink: 24 bytes leftover after parsing attributes in process `syz.5.707'.
[  395.535844][ T7683] loop5: detected capacity change from 0 to 4096
[  395.863998][ T7683] EXT4-fs (loop5): Test dummy encryption mode enabled
[  395.872714][ T7683] EXT4-fs (loop5): Ignoring removed oldalloc option
[  395.932965][ T7683] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003]
[  395.941754][ T7683] System zones: 0-5
[  395.987221][ T7683] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  396.066117][ T4646] Bluetooth: hci1: command 0x0406 tx timeout
[  396.770552][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  397.145430][ T4177] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  397.589628][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  397.631482][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  398.435509][ T4177] usb 6-1: Using ep0 maxpacket: 32
[  398.496299][ T7716] team0: Unable to change to the same mode the team is in
[  398.555817][ T4177] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  398.614195][ T4177] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  398.728008][ T7730] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  398.785578][ T4177] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  398.807933][ T4177] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  398.852421][ T4177] usb 6-1: Product: syz
[  398.903986][ T4177] usb 6-1: Manufacturer: syz
[  398.986605][ T4177] hub 6-1:4.0: USB hub found
[  399.265523][ T4177] hub 6-1:4.0: config failed, hub has too many ports! (err -19)
[  400.397749][ T4646] usb 6-1: USB disconnect, device number 6
[  400.528985][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.9.723'.
[  400.562473][ T7767] loop9: detected capacity change from 0 to 4096
[  400.612604][ T7767] EXT4-fs (loop9): Test dummy encryption mode enabled
[  400.619639][ T7767] EXT4-fs (loop9): Ignoring removed oldalloc option
[  400.663621][ T7767] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003]
[  400.672631][ T7767] System zones: 0-5
[  400.713468][ T7767] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  400.832754][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  400.851192][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  400.860423][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  400.904474][ T7777] team0: Unable to change to the same mode the team is in
[  401.089548][ T7781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.126197][ T7781] device syzkaller0 entered promiscuous mode
[  401.138014][ T7781] netlink: 44 bytes leftover after parsing attributes in process `syz.5.729'.
[  401.172875][ T7779] tipc: Resetting bearer <eth:syzkaller0>
[  401.259414][ T7779] tipc: Disabling bearer <eth:syzkaller0>
[  402.501488][ T7799] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  406.941174][ T7811] team0: Unable to change to the same mode the team is in
[  407.137761][ T7825] netlink: 'syz.5.743': attribute type 1 has an invalid length.
[  407.381854][ T7830] bond1: (slave veth3): Enslaving as an active interface with a down link
[  408.888892][ T7857] loop5: detected capacity change from 0 to 256
[  409.047745][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.8.741'.
[  409.095540][ T7866] loop8: detected capacity change from 0 to 4096
[  409.288629][ T7857] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  409.296868][ T7857] FAT-fs (loop5): Filesystem has been set read-only
[  409.340791][ T7847] net_ratelimit: 10 callbacks suppressed
[  409.340863][ T7847] sctp: failed to load transform for md5: -2
[  409.925335][ T7866] EXT4-fs (loop8): Test dummy encryption mode enabled
[  409.932682][ T7866] EXT4-fs (loop8): Ignoring removed oldalloc option
[  410.055443][ T7884] xt_CONNSECMARK: invalid mode: 66
[  410.576252][ T7866] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003]
[  410.585015][ T7866] System zones: 0-5
[  410.630470][ T4556] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  410.646897][ T7866] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  411.426793][ T7899] bond1: (slave veth3): Releasing active interface
[  411.715629][ T7902] team0: Unable to change to the same mode the team is in
[  414.194409][ T7933] loop5: detected capacity change from 0 to 256
[  415.841483][ T7933] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  415.850097][ T7933] FAT-fs (loop5): Filesystem has been set read-only
[  416.238930][ T7945] xt_CONNSECMARK: invalid mode: 66
[  416.456474][ T7947] loop9: detected capacity change from 0 to 256
[  416.562206][ T4556] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  416.654102][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.766'.
[  416.712686][ T7947] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 196)
[  416.721633][ T7947] FAT-fs (loop9): Filesystem has been set read-only
[  416.915709][ T7947] xt_CONNSECMARK: invalid mode: 66
[  417.467507][ T5980] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 196)
[  418.084088][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  418.302658][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  418.437911][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  418.605376][ T7972] team0: Unable to change to the same mode the team is in
[  420.789280][ T8006] loop9: detected capacity change from 0 to 256
[  420.830570][ T8006] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 196)
[  420.838978][ T8006] FAT-fs (loop9): Filesystem has been set read-only
[  421.390290][ T8016] xt_CONNSECMARK: invalid mode: 66
[  422.181191][ T5980] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 196)
[  424.013896][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  424.037159][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  424.065812][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  424.274317][ T8033] team0: Mode changed to "broadcast"
[  425.534230][ T8062] loop9: detected capacity change from 0 to 256
[  425.562969][ T8069] loop5: detected capacity change from 0 to 256
[  425.863110][ T8069] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  425.871735][ T8069] FAT-fs (loop5): Filesystem has been set read-only
[  427.030774][ T8069] xt_CONNSECMARK: invalid mode: 66
[  427.395350][ T4556] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  430.855851][ T8141] capability: warning: `syz.0.813' uses deprecated v2 capabilities in a way that may be insecure
[  431.501108][   T26] kauditd_printk_skb: 82 callbacks suppressed
[  431.501124][   T26] audit: type=1326 audit(1778595566.201:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.0.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  431.600180][   T26] audit: type=1326 audit(1778595566.231:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.0.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  431.670174][   T26] audit: type=1326 audit(1778595566.231:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.0.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  431.780618][   T26] audit: type=1326 audit(1778595566.231:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.0.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5f1fb760e code=0x7ffc0000
[  431.979753][   T26] audit: type=1326 audit(1778595566.241:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.0.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  432.903962][   T26] audit: type=1326 audit(1778595566.241:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.0.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  432.971940][ T8154] sctp: failed to load transform for md5: -2
[  433.151213][   T26] audit: type=1326 audit(1778595566.241:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.0.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  433.281877][   T26] audit: type=1326 audit(1778595566.241:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.0.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  434.417331][   T26] audit: type=1326 audit(1778595566.241:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.0.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  434.491090][   T26] audit: type=1326 audit(1778595566.241:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.0.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1ff6dd9 code=0x7ffc0000
[  434.515338][    C1] vkms_vblank_simulate: vblank timer overrun
[  435.051441][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.9.822'.
[  435.090684][ T8205] loop9: detected capacity change from 0 to 4096
[  435.136535][ T8206] nfs4: Unknown parameter 'ÿÿ'
[  435.165561][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'.
[  435.174780][ T8207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.825'.
[  435.183883][ T8207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.825'.
[  435.913185][ T8205] EXT4-fs (loop9): Test dummy encryption mode enabled
[  435.920100][ T8205] EXT4-fs (loop9): Ignoring removed oldalloc option
[  435.953274][ T8205] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003]
[  435.961766][ T8205] System zones: 0-5
[  436.206237][ T8205] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  439.860971][ T4646] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  439.943684][ T4645] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  440.069752][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  440.076182][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  440.135483][ T4646] usb 5-1: Using ep0 maxpacket: 32
[  440.235487][ T4645] usb 9-1: Using ep0 maxpacket: 32
[  440.255668][ T4646] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  440.281593][ T4646] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  440.586256][ T8291] netlink: 24 bytes leftover after parsing attributes in process `syz.9.841'.
[  441.177451][ T8291] loop9: detected capacity change from 0 to 4096
[  441.380702][ T4645] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  441.425732][ T4646] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  441.453111][ T4645] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  441.469380][ T8291] EXT4-fs (loop9): Test dummy encryption mode enabled
[  441.476391][ T8291] EXT4-fs (loop9): Ignoring removed oldalloc option
[  441.483764][ T4646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  441.548173][ T4646] usb 5-1: SerialNumber: syz
[  441.567736][ T8291] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003]
[  441.576820][ T8291] System zones: 0-5
[  441.596425][ T8291] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  441.619245][ T4646] usb 5-1: bad CDC descriptors
[  441.668935][ T4645] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  441.679641][ T4645] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  441.688668][ T4645] usb 9-1: SerialNumber: syz
[  441.781806][ T4645] usb 9-1: bad CDC descriptors
[  445.028613][ T4645] usb 5-1: USB disconnect, device number 5
[  445.334134][ T4177] usb 9-1: USB disconnect, device number 2
[  446.462130][ T8335] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  449.702161][ T8372] netlink: 24 bytes leftover after parsing attributes in process `syz.8.856'.
[  449.741164][ T8372] loop8: detected capacity change from 0 to 4096
[  449.801254][ T8372] EXT4-fs (loop8): Test dummy encryption mode enabled
[  449.808807][ T8372] EXT4-fs (loop8): Ignoring removed oldalloc option
[  449.877228][ T8372] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003]
[  449.886261][ T8372] System zones: 0-5
[  449.936192][ T8372] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  452.522405][ T8409] fuse: Unknown parameter 'group_id00000000000000000000'
[  452.552051][ T8409] loop5: detected capacity change from 0 to 7
[  452.926851][ T8023] Dev loop5: unable to read RDB block 7
[  452.947570][ T8023]  loop5: unable to read partition table
[  453.077038][ T8023] loop5: partition table beyond EOD, truncated
[  453.393046][ T8409] Dev loop5: unable to read RDB block 7
[  453.414346][ T8409]  loop5: unable to read partition table
[  453.486468][ T8415] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  453.518364][ T8409] loop5: partition table beyond EOD, truncated
[  453.618952][ T8409] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  458.298826][ T8450] 
: renamed from bond_slave_0
[  459.739994][ T8466] netlink: 32 bytes leftover after parsing attributes in process `syz.4.878'.
[  461.596119][ T8488] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  470.047114][ T8555] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  477.554623][ T8593] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.909'.
[  479.972459][ T8613] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  483.160733][ T8642] netlink: 36 bytes leftover after parsing attributes in process `syz.9.920'.
[  488.316570][ T8681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.928'.
[  497.762128][ T8681] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  497.771628][ T8681] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  497.781285][ T8681] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  497.790809][ T8681] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  497.946679][ T8701] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  498.172654][ T8752] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  501.508912][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  501.515664][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  504.721406][ T4511] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  506.275386][ T4511] usb 9-1: Using ep0 maxpacket: 32
[  506.406885][ T4511] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  506.440786][ T4511] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  506.523607][ T8833] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  508.496120][ T4511] usb 9-1: string descriptor 0 read error: -71
[  508.510114][ T4511] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  508.663366][ T4511] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  508.915993][ T4511] usb 9-1: can't set config #1, error -71
[  509.076091][ T4511] usb 9-1: USB disconnect, device number 3
[  510.411662][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.8.959'.
[  513.516259][ T8879] loop8: detected capacity change from 0 to 256
[  513.848981][ T4644] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  513.945442][ T8889] xt_CONNSECMARK: invalid mode: 66
[  515.482665][ T4644] usb 6-1: Using ep0 maxpacket: 32
[  515.652771][ T4644] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  515.704154][ T4644] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  515.855674][ T4644] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  515.897481][ T4644] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  515.941294][ T4644] usb 6-1: SerialNumber: syz
[  516.042234][ T4644] usb 6-1: bad CDC descriptors
[  517.807714][ T4177] usb 6-1: USB disconnect, device number 7
[  518.016794][ T8919] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  518.833114][ T8926] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  520.327863][ T8927] loop9: detected capacity change from 0 to 256
[  524.205929][   T26] kauditd_printk_skb: 8 callbacks suppressed
[  524.206100][   T26] audit: type=1107 audit(1778595658.801:327): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  526.605438][ T8702] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  526.965413][ T8702] usb 10-1: Using ep0 maxpacket: 32
[  527.095682][ T8702] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  527.259091][ T8702] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  527.755652][ T8702] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  527.822766][ T8702] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  527.847334][ T9006] loop5: detected capacity change from 0 to 256
[  527.857967][ T8702] usb 10-1: SerialNumber: syz
[  527.938965][ T9006] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  527.955393][ T9006] FAT-fs (loop5): Filesystem has been set read-only
[  527.977588][ T8702] usb 10-1: bad CDC descriptors
[  528.267473][ T9015] tipc: Started in network mode
[  528.282004][ T9015] tipc: Node identity 3ed7e2f28ca5, cluster identity 4711
[  528.355728][ T9015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  528.425815][ T9021] device syzkaller0 entered promiscuous mode
[  529.067208][ T4509] usb 10-1: USB disconnect, device number 3
[  529.126534][ T9017] tipc: Resetting bearer <eth:syzkaller0>
[  529.145132][ T9032] xt_CONNSECMARK: invalid mode: 66
[  529.187085][ T9014] tipc: Resetting bearer <eth:syzkaller0>
[  529.243003][ T9014] tipc: Disabling bearer <eth:syzkaller0>
[  531.363893][ T4556] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  531.591386][ T9051] device macsec0 entered promiscuous mode
[  531.601436][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.999'.
[  531.754843][ T9051] device macsec0 left promiscuous mode
[  532.249345][ T9052] netlink: 180 bytes leftover after parsing attributes in process `syz.4.998'.
[  532.319929][ T9055] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1000'.
[  532.915417][ T4509] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  533.165440][ T4509] usb 6-1: Using ep0 maxpacket: 32
[  533.285591][ T4509] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  533.314469][ T4509] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  533.345048][ T9083] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.363374][ T9083] device syzkaller0 entered promiscuous mode
[  533.455930][ T9083] tipc: Resetting bearer <eth:syzkaller0>
[  533.505629][ T4509] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  533.514755][ T4509] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  533.535023][ T4509] usb 6-1: SerialNumber: syz
[  533.563147][ T9082] tipc: Resetting bearer <eth:syzkaller0>
[  533.586831][ T4509] usb 6-1: bad CDC descriptors
[  533.772700][ T9082] tipc: Disabling bearer <eth:syzkaller0>
[  533.983569][ T9101] loop8: detected capacity change from 0 to 256
[  535.165505][ T9101] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 196)
[  535.181598][ T9101] FAT-fs (loop8): Filesystem has been set read-only
[  535.713837][ T9115] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1011'.
[  536.414956][ T4523] usb 6-1: USB disconnect, device number 8
[  537.968594][ T5852] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 196)
[  539.425366][ T4511] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  539.483533][ T9181] xt_CONNSECMARK: invalid mode: 66
[  539.806687][ T4511] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  539.831961][ T4511] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping
[  539.877710][ T4511] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  539.923866][ T4511] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  539.956349][ T4511] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  540.175553][ T4511] usb 9-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  540.205136][ T4511] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.233378][ T4511] usb 9-1: Product: syz
[  540.238196][ T4511] usb 9-1: Manufacturer: syz
[  540.242848][ T4511] usb 9-1: SerialNumber: syz
[  540.274285][ T4511] usb 9-1: config 0 descriptor??
[  540.295670][ T9164] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  540.337411][ T4511] ati_remote_probe: Unexpected desc.bNumEndpoints
[  540.964818][ T4177] usb 9-1: USB disconnect, device number 4
[  543.373637][ T9255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  543.391908][ T9255] device syzkaller0 entered promiscuous mode
[  543.435982][ T9255] tipc: Resetting bearer <eth:syzkaller0>
[  543.475101][ T9254] tipc: Resetting bearer <eth:syzkaller0>
[  543.536855][ T9254] tipc: Disabling bearer <eth:syzkaller0>
[  544.458755][ T9267] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  544.704632][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'.
[  545.843683][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'.
[  545.903478][ T9312] xt_CONNSECMARK: invalid mode: 66
[  546.517395][ T9313] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  546.583858][ T9313] device syzkaller0 entered promiscuous mode
[  546.683120][ T9314] tipc: Resetting bearer <eth:syzkaller0>
[  546.754128][ T9310] tipc: Resetting bearer <eth:syzkaller0>
[  546.843276][ T9310] tipc: Disabling bearer <eth:syzkaller0>
[  549.578103][ T9358] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  551.556452][ T9380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  551.629876][ T9377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  557.951926][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1075'.
[  558.323161][ T9432] loop5: detected capacity change from 0 to 256
[  558.510002][ T9432] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  558.552821][ T9432] FAT-fs (loop5): Filesystem has been set read-only
[  558.658252][ T9435] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  559.745569][ T9454] xt_CONNSECMARK: invalid mode: 66
[  560.002111][ T9465] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.1082'.
[  562.996177][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  563.003101][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  563.225673][ T9496] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  563.785545][ T4556] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  565.049574][ T9531] netlink: 'syz.4.1094': attribute type 2 has an invalid length.
[  565.066020][ T9531] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1094'.
[  565.125683][ T9531] netlink: 'syz.4.1094': attribute type 29 has an invalid length.
[  565.184982][ T9531] netlink: 'syz.4.1094': attribute type 29 has an invalid length.
[  566.521682][ T9552] loop8: detected capacity change from 0 to 256
[  566.615043][ T9552] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 196)
[  566.623544][ T9552] FAT-fs (loop8): Filesystem has been set read-only
[  566.931602][ T9559] xt_CONNSECMARK: invalid mode: 66
[  567.643477][ T5852] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 196)
[  567.824388][ T9555] chnl_net:caif_netlink_parms(): no params data found
[  567.962526][ T9567] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  568.250726][ T9555] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.324588][ T9555] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.357700][ T9555] device bridge_slave_0 entered promiscuous mode
[  568.399355][ T9555] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.432423][ T9555] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.456503][ T9555] device bridge_slave_1 entered promiscuous mode
[  568.583866][ T9555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  568.667872][ T9555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  568.848525][ T9555] team0: Port device team_slave_0 added
[  568.865367][ T4241] Bluetooth: hci0: command 0x0409 tx timeout
[  568.891297][ T9555] team0: Port device team_slave_1 added
[  569.008973][ T4401] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.225430][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  569.232443][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.809575][ T9555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  569.839748][ T9591] loop8: detected capacity change from 0 to 256
[  569.880439][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  569.995448][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.134359][ T9555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  570.172725][ T9588] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1102'.
[  570.230254][ T4401] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.381607][ T4401] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.436228][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1105'.
[  570.497974][ T9604] loop4: detected capacity change from 0 to 256
[  570.540036][ T9604] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  570.548498][ T9604] FAT-fs (loop4): Filesystem has been set read-only
[  570.750302][ T4401] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.839057][ T9611] xt_CONNSECMARK: invalid mode: 66
[  571.716487][ T4198] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  571.776170][ T4508] Bluetooth: hci0: command 0x041b tx timeout
[  571.796917][ T9555] device hsr_slave_0 entered promiscuous mode
[  571.820008][ T9555] device hsr_slave_1 entered promiscuous mode
[  571.880302][ T9555] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  571.892537][ T9555] Cannot create hsr debugfs directory
[  572.321699][ T4401] tipc: Left network mode
[  572.548399][ T9634] loop5: detected capacity change from 0 to 256
[  573.557379][ T9643] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1116'.
[  573.981405][ T4508] Bluetooth: hci0: command 0x040f tx timeout
[  574.177725][ T9648] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1118'.
[  574.466877][ T9656] xt_CONNSECMARK: invalid mode: 66
[  576.118075][ T4508] Bluetooth: hci0: command 0x0419 tx timeout
[  577.228506][ T9674] loop5: detected capacity change from 0 to 256
[  580.579478][ T9695] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1129'.
[  583.340632][ T9741] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  583.625455][ T4508] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  584.025518][ T4508] usb 5-1: Using ep0 maxpacket: 32
[  584.171143][ T4508] usb 5-1: config 0 has an invalid interface number: 146 but max is 0
[  584.259746][ T4508] usb 5-1: config 0 has no interface number 0
[  584.376808][ T4508] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  584.559371][ T4508] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping
[  584.732181][ T4508] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping
[  584.794285][ T4508] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 65024, setting to 1024
[  584.861639][ T4508] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  584.903026][ T4508] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  584.998755][ T4401] device hsr_slave_0 left promiscuous mode
[  585.025778][ T4401] device hsr_slave_1 left promiscuous mode
[  585.057570][ T4401] device veth1_macvtap left promiscuous mode
[  585.084329][ T4401] device veth0_macvtap left promiscuous mode
[  585.098278][ T4401] device veth1_vlan left promiscuous mode
[  585.121734][ T4401] device veth0_vlan left promiscuous mode
[  585.271411][ T4508] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  585.300954][ T4508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.153113][ T4508] usb 5-1: Product: syz
[  586.160749][ T4508] usb 5-1: Manufacturer: syz
[  586.168729][ T4508] usb 5-1: SerialNumber: syz
[  586.175377][ T4508] usb 5-1: config 0 descriptor??
[  586.205857][ T4508] usb 5-1: can't set config #0, error -71
[  586.219731][ T4508] usb 5-1: USB disconnect, device number 6
[  587.404997][ T9789] loop4: detected capacity change from 0 to 256
[  589.233590][ T4401] bond0 (unregistering): Released all slaves
[  589.589631][ T9555] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  589.667146][ T9555] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  589.705858][ T9555] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  589.744368][ T9555] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  590.131119][ T9555] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.578815][ T9555] 8021q: adding VLAN 0 to HW filter on device team0
[  591.173491][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  591.208049][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  591.238336][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  591.337054][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  591.426582][ T8712] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.433853][ T8712] bridge0: port 1(bridge_slave_0) entered forwarding state
[  591.465805][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  591.496195][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  591.505474][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.512592][ T8712] bridge0: port 2(bridge_slave_1) entered forwarding state
[  591.545671][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  591.606095][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  591.667400][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  591.744902][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  592.121369][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  592.537028][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  592.545683][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  592.560818][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  592.569969][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  592.579033][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  592.601807][ T9555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  592.636521][ T9555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  592.651752][ T4523] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  593.399906][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  593.427299][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  594.415389][ T4523] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  594.463836][ T4523] usb 5-1: config 0 has no interface number 0
[  594.491079][ T4523] usb 5-1: config 0 interface 2 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  594.580818][ T4523] usb 5-1: config 0 interface 2 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0
[  594.611529][ T4523] usb 5-1: config 0 interface 2 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  594.651372][ T4523] usb 5-1: config 0 interface 2 has no altsetting 0
[  594.661547][ T4523] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  594.680907][ T4523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.813216][ T4523] usb 5-1: config 0 descriptor??
[  594.887261][ T9853] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6391] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9853]
[  594.960197][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  595.224925][ T4523] usb 5-1: can't set config #0, error -71
[  595.553526][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  595.577323][ T9555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  595.603252][ T4523] usb 5-1: USB disconnect, device number 7
[  595.638734][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  595.672919][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  595.894720][ T9555] device veth0_vlan entered promiscuous mode
[  595.942579][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  595.985026][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  596.057881][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  596.103009][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  596.138304][ T9555] device veth1_vlan entered promiscuous mode
[  596.265956][ T4523] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  596.298502][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  596.316128][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  596.358707][ T9555] device veth0_macvtap entered promiscuous mode
[  596.408089][ T9555] device veth1_macvtap entered promiscuous mode
[  596.519801][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  596.527845][ T4523] usb 5-1: Using ep0 maxpacket: 32
[  596.563757][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  596.579722][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  596.599849][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  596.619730][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  596.647599][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  596.657283][ T4523] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  596.680180][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  596.699240][ T4523] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  596.734561][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  596.757933][ T9555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  596.783625][ T9555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  596.808871][ T9555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  596.822668][ T4523] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  596.842237][ T4523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  596.862557][ T9555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  596.872134][ T4523] usb 5-1: SerialNumber: syz
[  596.966375][ T4523] usb 5-1: bad CDC descriptors
[  597.520336][ T1458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  597.937430][ T1458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.116577][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  598.256604][ T8712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.274896][ T8712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.313135][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  599.446897][ T4177] usb 5-1: USB disconnect, device number 8
[  600.830868][ T9895] netlink: 'syz.8.1179': attribute type 1 has an invalid length.
[  601.027393][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1179'.
[  602.136012][ T9925] xt_CONNSECMARK: invalid mode: 66
[  603.584308][ T9940] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  603.697965][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'.
[  603.729795][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'.
[  604.983243][ T9965] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  610.570462][T10036] xt_CONNSECMARK: invalid mode: 66
[  611.393782][T10041] tipc: Started in network mode
[  611.440941][T10041] tipc: Node identity e2ece251d037, cluster identity 4711
[  611.451172][T10041] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  611.492254][T10044] device syzkaller0 entered promiscuous mode
[  611.613258][T10041] tipc: Resetting bearer <eth:syzkaller0>
[  611.706538][T10040] tipc: Resetting bearer <eth:syzkaller0>
[  611.764884][T10040] tipc: Disabling bearer <eth:syzkaller0>
[  612.953922][T10055] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  617.578657][T10100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1217'.
[  617.724962][T10097] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1219'.
[  618.154809][T10109] xt_CONNSECMARK: invalid mode: 66
[  621.342363][T10156] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  622.815589][T10178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  622.861153][T10178] device syzkaller0 entered promiscuous mode
[  622.933256][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1240'.
[  624.048828][T10178] tipc: Resetting bearer <eth:syzkaller0>
[  624.087046][ T4508] tipc: Node number set to 1144270086
[  624.153561][T10174] tipc: Resetting bearer <eth:syzkaller0>
[  624.394230][T10174] tipc: Disabling bearer <eth:syzkaller0>
[  624.400991][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  624.407397][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  624.428945][T10205] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  627.410999][T10233] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  627.959966][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1254'.
[  629.043001][T10267] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1257'.
[  629.458875][T10269] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  634.354109][T10305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1267'.
[  634.633408][T10309] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  634.825492][T10316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1269'.
[  636.971694][T10352] xt_CONNSECMARK: invalid mode: 66
[  638.855353][ T4509] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  638.977268][T10375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1280'.
[  639.335393][ T4509] usb 2-1: Using ep0 maxpacket: 16
[  639.455606][ T4509] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  639.482105][ T4509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  639.505097][T10378] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1281'.
[  639.541245][ T4509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12336, setting to 1024
[  639.607443][ T4509] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  639.704867][ T4509] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  639.773793][T10384] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  639.985570][ T4509] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  640.002908][ T4509] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  640.065771][ T4509] usb 2-1: Manufacturer: syz
[  640.080624][ T4509] usb 2-1: config 0 descriptor??
[  640.577129][ T4509] rc_core: IR keymap rc-hauppauge not found
[  640.604533][ T4509] Registered IR keymap rc-empty
[  640.955280][ T4509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  641.005534][ T4509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  641.907956][ T4509] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  641.922091][ T4509] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5
[  641.945387][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1286'.
[  642.105380][ T4509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  642.215449][ T4509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  642.439626][ T4509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  642.515475][ T4509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  642.592369][ T4509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  643.405336][ T4509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  643.455422][ T4509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  643.639995][T10431] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1293'.
[  643.715343][ T4509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  643.785507][ T4509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  643.885351][ T4509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  644.049805][ T4509] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  644.175305][ T4509] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  644.387284][ T4509] usb 2-1: USB disconnect, device number 2
[  648.390149][T10464] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  649.330373][T10479] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1299'.
[  651.596486][T10526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1308'.
[  654.801889][T10526] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.809355][T10526] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.468492][T10526] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  656.646298][T10526] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  658.364261][T10526] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  658.373740][T10526] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  658.384851][T10526] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  658.401081][T10526] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  658.829707][T10600] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1318'.
[  659.565789][T10626] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  661.675888][T10664] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1332'.
[  662.487451][T10681] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1335'.
[  663.778359][T10701] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  667.155877][T10722] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1344'.
[  670.699908][T10739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1347'.
[  671.325413][ T1110] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  671.473255][T10760] comedi comedi3: pcl812: I/O port conflict (0x100,16)
[  673.235390][ T1110] usb 2-1: Using ep0 maxpacket: 32
[  673.521973][ T1110] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  673.573367][ T1110] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  673.606241][T10776] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1357'.
[  673.735680][ T1110] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  673.771638][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  673.815214][ T1110] usb 2-1: SerialNumber: syz
[  674.045457][ T1110] usb 2-1: can't set config #1, error -71
[  674.861574][ T1110] usb 2-1: USB disconnect, device number 3
[  675.008747][T10801] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  675.561205][T10805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1362'.
[  675.653413][T10797] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  682.277397][ T4509] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  682.766585][T10852] 
: renamed from bond_slave_0
[  683.046742][ T4509] usb 6-1: Using ep0 maxpacket: 32
[  684.579533][ T4509] usb 6-1: device descriptor read/all, error -71
[  684.723218][T10864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1375'.
[  685.744958][T10876] netlink: 'syz.0.1380': attribute type 4 has an invalid length.
[  685.874518][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  685.883480][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  688.075502][T10890] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  689.735328][ T4509] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  689.985432][ T4509] usb 9-1: Using ep0 maxpacket: 32
[  690.111405][ T4509] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  690.265957][ T4509] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  690.421785][ T4509] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  690.441454][ T4509] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  690.480964][ T4509] usb 9-1: SerialNumber: syz
[  690.782067][ T4509] usb 9-1: bad CDC descriptors
[  691.514984][T10936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1392'.
[  692.959640][ T4509] usb 9-1: USB disconnect, device number 5
[  693.226974][ T4508] Bluetooth: hci0: command 0x0406 tx timeout
[  693.711859][T10970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1400'.
[  693.798172][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1399'.
[  696.161213][T10996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1404'.
[  698.203707][ T8702] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  698.446577][T11018] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1411'.
[  698.486331][T11018] loop8: detected capacity change from 0 to 4096
[  698.685271][ T8702] usb 5-1: Using ep0 maxpacket: 32
[  698.692074][T11018] EXT4-fs (loop8): Test dummy encryption mode enabled
[  698.699085][T11018] EXT4-fs (loop8): Ignoring removed oldalloc option
[  698.722336][T11018] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003]
[  698.730753][T11018] System zones: 0-5
[  698.816967][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1412'.
[  698.915374][ T8702] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  699.016314][T11018] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  699.340039][ T8702] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  699.476102][ T8702] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  699.541434][ T8702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  699.846833][ T8702] usb 5-1: SerialNumber: syz
[  700.329112][ T8702] usb 5-1: bad CDC descriptors
[  701.916220][ T8702] usb 5-1: USB disconnect, device number 9
[  702.286916][T11056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1416'.
[  705.398424][T11076] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1423'.
[  705.427269][T11076] loop8: detected capacity change from 0 to 4096
[  705.480663][T11076] EXT4-fs (loop8): Test dummy encryption mode enabled
[  705.487675][T11076] EXT4-fs (loop8): Ignoring removed oldalloc option
[  705.523289][T11076] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003]
[  705.532077][T11076] System zones: 0-5
[  705.566880][T11076] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  705.625254][ T4509] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  705.885286][ T4509] usb 5-1: Using ep0 maxpacket: 16
[  707.305327][ T4509] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  707.815644][ T4509] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  707.833372][ T4509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.846239][ T4509] usb 5-1: Product: syz
[  707.850470][ T4509] usb 5-1: Manufacturer: syz
[  707.865262][ T4644] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  707.866801][ T4509] usb 5-1: SerialNumber: syz
[  708.001669][ T4509] usb 5-1: config 0 descriptor??
[  708.127996][ T4644] usb 9-1: Using ep0 maxpacket: 32
[  708.609128][T11121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1430'.
[  708.975231][ T4508] usb 5-1: USB disconnect, device number 10
[  709.155337][ T4644] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  709.169336][ T4644] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  709.766292][ T4644] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  709.790032][ T4644] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  709.962563][ T4644] usb 9-1: SerialNumber: syz
[  710.008587][ T4644] usb 9-1: bad CDC descriptors
[  710.453311][ T4241] usb 9-1: USB disconnect, device number 6
[  715.138533][ T4646] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  715.387572][ T4646] usb 5-1: Using ep0 maxpacket: 32
[  715.505850][ T4646] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  715.526704][ T4646] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  715.675441][ T4646] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  715.703879][ T4646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  715.753443][ T4646] usb 5-1: SerialNumber: syz
[  715.819057][ T4646] usb 5-1: bad CDC descriptors
[  718.112486][T11250] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  718.877112][ T4511] usb 5-1: USB disconnect, device number 11
[  721.550060][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'.
[  721.559294][T11282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1461'.
[  721.568378][T11282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1461'.
[  723.260137][ T4645] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  723.505512][ T4645] usb 5-1: Using ep0 maxpacket: 32
[  724.017290][ T4645] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  724.051141][ T4645] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  725.503141][T11338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1473'.
[  725.512562][T11338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1473'.
[  725.521727][T11338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1473'.
[  726.435622][ T4645] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  726.452856][ T4645] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  726.535891][ T4645] usb 5-1: can't set config #1, error -71
[  726.556652][ T4645] usb 5-1: USB disconnect, device number 12
[  727.610080][T11366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1480'.
[  727.866848][T11366] loop4: detected capacity change from 0 to 4096
[  728.002154][T11366] EXT4-fs (loop4): Test dummy encryption mode enabled
[  728.009175][T11366] EXT4-fs (loop4): Ignoring removed oldalloc option
[  728.101367][T11366] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003]
[  728.110193][T11366] System zones: 0-5
[  728.153590][T11366] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  730.394529][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1485'.
[  730.403689][T11401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1485'.
[  730.412944][T11401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1485'.
[  730.942715][T11402] loop5: detected capacity change from 0 to 256
[  731.034918][T11402] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  731.043973][T11402] FAT-fs (loop5): Filesystem has been set read-only
[  731.593816][T11413] xt_CONNSECMARK: invalid mode: 66
[  732.310451][T11419] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1489'.
[  732.907376][T11439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1492'.
[  735.065778][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1497'.
[  735.074962][T11463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1497'.
[  735.084146][T11463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1497'.
[  738.983327][ T4556] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  741.357766][T11528] xt_CONNSECMARK: invalid mode: 66
[  742.682914][T11548] loop4: detected capacity change from 0 to 256
[  742.742602][T11548] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  742.751002][T11548] FAT-fs (loop4): Filesystem has been set read-only
[  745.075354][ T4198] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  747.845513][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  747.851987][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  749.623237][T11625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1532'.
[  750.069650][T11638] xt_CONNSECMARK: invalid mode: 66
[  751.865303][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'.
[  754.534845][T11693] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  758.236713][T11712] loop4: detected capacity change from 0 to 256
[  758.313688][T11712] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  758.322180][T11712] FAT-fs (loop4): Filesystem has been set read-only
[  758.559930][T11719] xt_CONNSECMARK: invalid mode: 66
[  760.224284][T11731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1555'.
[  760.536118][ T4198] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  763.694920][T11774] loop5: detected capacity change from 0 to 256
[  764.232330][T11774] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  764.242862][T11774] FAT-fs (loop5): Filesystem has been set read-only
[  764.484770][T11792] xt_CONNSECMARK: invalid mode: 66
[  764.810197][ T4556] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  765.396559][T11802] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1570'.
[  767.839058][T11823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1575'.
[  771.950814][T11876] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1588'.
[  773.806511][T11897] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1590'.
[  774.114896][T11894] binder: 11893:11894 unknown command 1074553619
[  774.225590][T11894] binder: 11893:11894 ioctl c0306201 200000000000 returned -22
[  774.965550][ T4509] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  775.415619][ T4509] usb 6-1: Using ep0 maxpacket: 16
[  775.545587][ T4509] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  776.595496][ T4509] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  776.933588][T11929] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1600'.
[  776.989027][ T4509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.014795][ T4509] usb 6-1: Product: syz
[  777.046961][ T4509] usb 6-1: Manufacturer: syz
[  777.083402][ T4509] usb 6-1: SerialNumber: syz
[  777.123466][ T4509] usb 6-1: config 0 descriptor??
[  779.019014][ T4523] usb 6-1: USB disconnect, device number 11
[  779.675876][T11975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1606'.
[  779.693999][T11979] loop8: detected capacity change from 0 to 512
[  779.964641][T11979] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  781.572587][T11979] EXT4-fs (loop8): 1 truncate cleaned up
[  781.605383][T11979] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  781.811421][   T26] audit: type=1800 audit(1778595916.491:328): pid=11979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1608" name="file1" dev="loop8" ino=15 res=0 errno=0
[  781.869635][T11995] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1611'.
[  787.390711][T12041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1619'.
[  787.653520][T12048] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1623'.
[  791.239548][T12083] loop5: detected capacity change from 0 to 512
[  791.384931][T12084] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  794.414641][T12094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1635'.
[  795.670874][T12100] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1634'.
[  796.213191][T12103] loop5: detected capacity change from 0 to 512
[  797.140497][T12103] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  797.376740][T12103] EXT4-fs (loop5): orphan cleanup on readonly fs
[  797.383201][T12103] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1637: inode #15: comm syz.5.1637: iget: illegal inode #
[  797.467918][T12103] EXT4-fs (loop5): Remounting filesystem read-only
[  797.474506][T12103] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1637: couldn't read orphan inode 15 (err -117)
[  797.675495][T12103] EXT4-fs (loop5): Remounting filesystem read-only
[  797.682186][T12103] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,grpquota,errors=remount-ro,. Quota mode: writeback.
[  798.375735][T12134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1642'.
[  802.353559][T12161] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1647'.
[  802.911314][T12165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1648'.
[  803.065636][T12173] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  805.036046][T12183] fuse: Bad value for 'fd'
[  806.982414][T12194] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1657'.
[  807.861183][T12197] loop4: detected capacity change from 0 to 4096
[  807.911654][T12197] EXT4-fs (loop4): Test dummy encryption mode enabled
[  807.918682][T12197] EXT4-fs (loop4): Ignoring removed oldalloc option
[  807.953653][T12197] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003]
[  807.962384][T12197] System zones: 0-5
[  807.986199][T12197] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  808.076308][T12206] xt_hashlimit: size too large, truncated to 1048576
[  808.603354][T12210] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1660'.
[  808.716601][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  808.728363][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  809.269781][T12214] loop8: detected capacity change from 0 to 4096
[  809.455444][T12214] EXT4-fs (loop8): inline encryption not supported
[  809.462439][T12214] EXT4-fs (loop8): Test dummy encryption mode enabled
[  809.507339][T12214] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  809.525238][T12214] System zones: 0-5
[  809.550220][T12214] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  809.702244][T12214] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.1662: Invalid inode table block 8198617950529853535 in block_group 0
[  809.955412][T12228] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.1662: Invalid inode table block 8198617950529853535 in block_group 0
[  814.435060][T12305] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1671'.
[  814.479868][T12305] loop8: detected capacity change from 0 to 4096
[  814.530285][T12305] EXT4-fs (loop8): Test dummy encryption mode enabled
[  814.537269][T12305] EXT4-fs (loop8): Ignoring removed oldalloc option
[  814.597134][T12306] loop4: detected capacity change from 0 to 512
[  814.618994][T12305] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003]
[  814.628096][T12305] System zones: 0-5
[  814.650376][T12305] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  814.740728][T12306] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.1673: inode has both inline data and extents flags
[  814.769937][T12306] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1673: couldn't read orphan inode 15 (err -117)
[  814.828936][T12306] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  815.118455][T12315] loop4: detected capacity change from 0 to 1024
[  815.197776][T12315] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block
[  815.197776][T12315] 
[  816.566001][T12346] fuse: Bad value for 'fd'
[  821.664575][T12394] loop5: detected capacity change from 0 to 40427
[  821.774205][T12394] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  821.805301][T12394] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  821.866342][T12394] F2FS-fs (loop5): invalid crc value
[  821.904148][T12394] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  826.492132][T12464] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  827.625367][ T8702] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  827.879789][ T8702] usb 2-1: Using ep0 maxpacket: 16
[  828.007472][ T8702] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  828.186601][ T8702] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  828.208638][ T8702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.265351][ T8702] usb 2-1: Product: syz
[  828.273794][ T8702] usb 2-1: Manufacturer: syz
[  828.295201][ T8702] usb 2-1: SerialNumber: syz
[  828.326233][ T8702] usb 2-1: config 0 descriptor??
[  829.357549][T12505] fuse: Invalid rootmode
[  829.719604][ T4177] usb 2-1: USB disconnect, device number 4
[  832.031902][T12526] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1711'.
[  832.684308][T12530] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1713'.
[  836.500269][T12563] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1721'.
[  836.531715][T12571] loop1: detected capacity change from 0 to 128
[  836.712839][T12563] loop8: detected capacity change from 0 to 4096
[  837.581921][T12582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1725'.
[  837.940872][T12571] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  837.982423][T12571] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  838.166710][T12563] EXT4-fs (loop8): Test dummy encryption mode enabled
[  838.174163][T12563] EXT4-fs (loop8): Ignoring removed oldalloc option
[  838.535844][T12563] EXT4-fs: failed to create workqueue
[  838.541283][T12563] EXT4-fs (loop8): mount failed
[  838.730640][T12609] loop1: detected capacity change from 0 to 512
[  840.561974][T12615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1732'.
[  840.868910][T12609] EXT4-fs (loop1): Ignoring removed oldalloc option
[  840.932340][T12609] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  840.964729][T12609] EXT4-fs (loop1): 1 truncate cleaned up
[  841.049032][T12609] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none.
[  842.276948][T12633] fuse: Bad value for 'fd'
[  843.499059][T12650] loop5: detected capacity change from 0 to 512
[  843.772015][T12654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1744'.
[  843.792371][T12650] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  843.992713][T12650] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present
[  844.020080][T12650] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  844.031656][T12650] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1741: Failed to acquire dquot type 1
[  844.086883][T12650] EXT4-fs (loop5): 1 truncate cleaned up
[  844.093160][T12650] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  844.484409][T12672] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present
[  844.495866][T12672] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  844.505548][T12672] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1741: Failed to acquire dquot type 1
[  845.659514][T12682] loop8: detected capacity change from 0 to 4096
[  845.780609][T12682] EXT4-fs (loop8): Test dummy encryption mode enabled
[  845.918373][T12682] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,noauto_da_alloc,journal_ioprio=0x0000000000000001,nogrpid,,errors=continue. Quota mode: writeback.
[  846.015973][T12664] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[  846.416910][T12682] EXT4-fs (loop8): Test dummy encryption mode enabled
[  846.510444][T12682] EXT4-fs (loop8): re-mounted. Opts: test_dummy_encryption,grpquota,noauto_da_alloc,journal_ioprio=0x0000000000000001,nogrpid,. Quota mode: writeback.
[  848.280718][T12719] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1757'.
[  848.319705][T12719] loop8: detected capacity change from 0 to 4096
[  848.345788][T12720] fuse: Bad value for 'fd'
[  848.390540][T12719] EXT4-fs (loop8): Test dummy encryption mode enabled
[  848.398013][T12719] EXT4-fs (loop8): Ignoring removed oldalloc option
[  848.481362][T12719] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003]
[  848.489902][T12719] System zones: 0-5
[  848.533778][T12719] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  851.631260][T12771] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  859.246944][ T4509] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  859.313459][T12849] loop8: detected capacity change from 0 to 256
[  859.462988][T12849] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 196)
[  859.471573][T12849] FAT-fs (loop8): Filesystem has been set read-only
[  859.545370][ T4509] usb 6-1: Using ep0 maxpacket: 32
[  859.673223][   T26] audit: type=1326 audit(1778595994.361:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1788" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafae094dd9 code=0x7ffc0000
[  859.702241][   T26] audit: type=1326 audit(1778595994.361:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1788" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafae094dd9 code=0x7ffc0000
[  862.075521][ T4509] usb 6-1: unable to read config index 0 descriptor/start: -71
[  862.105274][ T4509] usb 6-1: can't read configurations, error -71
[  862.474824][   T26] audit: type=1326 audit(1778595994.361:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1788" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fafae094dd9 code=0x7ffc0000
[  862.543517][   T26] audit: type=1326 audit(1778595994.361:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1788" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafae094dd9 code=0x7ffc0000
[  862.568424][ T5852] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 196)
[  862.582410][   T26] audit: type=1326 audit(1778595994.361:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1788" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafae094dd9 code=0x7ffc0000
[  862.811000][   T26] audit: type=1326 audit(1778595994.361:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1788" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafae094dd9 code=0x7ffc0000
[  864.031648][T12875] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1789'.
[  864.089010][   T26] audit: type=1326 audit(1778595994.361:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1788" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafae094dd9 code=0x7ffc0000
[  864.113788][   T26] audit: type=1326 audit(1778595994.361:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1788" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafae094dd9 code=0x7ffc0000
[  864.167207][   T26] audit: type=1326 audit(1778595994.361:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1788" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fafae094dd9 code=0x7ffc0000
[  864.257662][   T26] audit: type=1326 audit(1778595994.361:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1788" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafae094dd9 code=0x7ffc0000
[  870.225657][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  870.232196][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  871.373020][T12981] capability: warning: `syz.1.1814' uses 32-bit capabilities (legacy support in use)
[  878.430281][T13060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1832'.
[  879.845601][T13079] loop1: detected capacity change from 0 to 512
[  880.078938][T13079] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  880.125345][T13079] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  882.021928][T13122] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1846'.
[  883.769681][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1855'.
[  886.465786][T13194] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  891.689012][T13250] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  896.107258][T13295] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  898.021509][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'.
[  899.573682][T13337] loop8: detected capacity change from 0 to 256
[  899.743262][T13337] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  899.805308][T13337] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  899.891403][T13337] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d)
[  899.973642][   T26] kauditd_printk_skb: 34 callbacks suppressed
[  899.973659][   T26] audit: type=1800 audit(1778596034.671:373): pid=13337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1894" name="file1" dev="loop8" ino=1048683 res=0 errno=0
[  900.694918][T13368] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  901.399454][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'.
[  904.225412][T13407] xt_CONNSECMARK: invalid mode: 66
[  906.600949][ T4205] ==================================================================
[  906.609964][ T4205] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90
[  906.617839][ T4205] Read of size 1 at addr ffff88806166cc08 by task kworker/u5:8/4205
[  906.625854][ T4205] 
[  906.628227][ T4205] CPU: 0 PID: 4205 Comm: kworker/u5:8 Not tainted syzkaller #0
[  906.636451][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  906.647151][ T4205] Workqueue: hci1 hci_rx_work
[  906.652157][ T4205] Call Trace:
[  906.655589][ T4205]  <TASK>
[  906.658572][ T4205]  dump_stack_lvl+0x188/0x250
[  906.663299][ T4205]  ? show_regs_print_info+0x20/0x20
[  906.668623][ T4205]  ? load_image+0x400/0x400
[  906.673165][ T4205]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  906.678666][ T4205]  ? mutex_lock_io_nested+0x60/0x60
[  906.684091][ T4205]  print_address_description+0x60/0x2d0
[  906.689836][ T4205]  ? hci_le_meta_evt+0x1324/0x3c90
[  906.694983][ T4205]  kasan_report+0xdf/0x130
[  906.699545][ T4205]  ? hci_le_meta_evt+0x1324/0x3c90
[  906.704703][ T4205]  hci_le_meta_evt+0x1324/0x3c90
[  906.709784][ T4205]  ? hci_remote_host_features_evt+0x280/0x280
[  906.715890][ T4205]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  906.721565][ T4205]  ? mark_lock+0x94/0x320
[  906.725937][ T4205]  ? mutex_unlock+0x10/0x10
[  906.730493][ T4205]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  906.736874][ T4205]  ? lock_chain_count+0x20/0x20
[  906.742140][ T4205]  ? __rwlock_init+0x140/0x140
[  906.746972][ T4205]  hci_event_packet+0xe48/0x1370
[  906.752171][ T4205]  ? lockdep_hardirqs_on+0x94/0x140
[  906.757428][ T4205]  ? rcu_lock_release+0x20/0x20
[  906.762417][ T4205]  ? hci_send_to_monitor+0x9c/0x4a0
[  906.767841][ T4205]  hci_rx_work+0x255/0xa10
[  906.772334][ T4205]  process_one_work+0x85f/0x1010
[  906.777331][ T4205]  ? worker_detach_from_pool+0x240/0x240
[  906.783231][ T4205]  ? lockdep_hardirqs_off+0x70/0x100
[  906.788665][ T4205]  ? _raw_spin_lock_irq+0xb7/0xf0
[  906.793731][ T4205]  ? _raw_spin_lock_irqsave+0x100/0x100
[  906.799312][ T4205]  ? wq_worker_running+0x97/0x170
[  906.804462][ T4205]  worker_thread+0xaa6/0x1290
[  906.809188][ T4205]  ? lockdep_hardirqs_on+0x94/0x140
[  906.814608][ T4205]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  906.820551][ T4205]  kthread+0x436/0x520
[  906.824652][ T4205]  ? rcu_lock_release+0x20/0x20
[  906.830103][ T4205]  ? kthread_blkcg+0xd0/0xd0
[  906.835256][ T4205]  ret_from_fork+0x1f/0x30
[  906.839835][ T4205]  </TASK>
[  906.842878][ T4205] 
[  906.845229][ T4205] Allocated by task 13413:
[  906.849774][ T4205]  __kasan_kmalloc+0xb5/0xf0
[  906.854721][ T4205]  __alloc_skb+0x22c/0x750
[  906.859165][ T4205]  vhci_write+0xbc/0x450
[  906.863443][ T4205]  vfs_write+0x745/0xd60
[  906.867805][ T4205]  ksys_write+0x152/0x260
[  906.872380][ T4205]  do_syscall_64+0x4c/0xa0
[  906.876856][ T4205]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  906.882790][ T4205] 
[  906.885153][ T4205] Last potentially related work creation:
[  906.890890][ T4205]  kasan_save_stack+0x35/0x60
[  906.895605][ T4205]  kasan_record_aux_stack+0xb8/0x100
[  906.901292][ T4205]  kvfree_call_rcu+0x105/0x7d0
[  906.906098][ T4205]  neigh_periodic_work+0x407/0xc70
[  906.911426][ T4205]  process_one_work+0x85f/0x1010
[  906.916403][ T4205]  worker_thread+0xaa6/0x1290
[  906.921110][ T4205]  kthread+0x436/0x520
[  906.925214][ T4205]  ret_from_fork+0x1f/0x30
[  906.929926][ T4205] 
[  906.932286][ T4205] Second to last potentially related work creation:
[  906.938891][ T4205]  kasan_save_stack+0x35/0x60
[  906.943706][ T4205]  kasan_record_aux_stack+0xb8/0x100
[  906.949036][ T4205]  call_rcu+0x189/0x950
[  906.953224][ T4205]  br_dev_delete+0x6a/0x100
[  906.957759][ T4205]  default_device_exit_batch+0x2d3/0x3c0
[  906.963430][ T4205]  cleanup_net+0x791/0xba0
[  906.967891][ T4205]  process_one_work+0x85f/0x1010
[  906.973028][ T4205]  worker_thread+0xaa6/0x1290
[  906.977751][ T4205]  kthread+0x436/0x520
[  906.981865][ T4205]  ret_from_fork+0x1f/0x30
[  906.986402][ T4205] 
[  906.988746][ T4205] The buggy address belongs to the object at ffff88806166c800
[  906.988746][ T4205]  which belongs to the cache kmalloc-1k of size 1024
[  907.002824][ T4205] The buggy address is located 8 bytes to the right of
[  907.002824][ T4205]  1024-byte region [ffff88806166c800, ffff88806166cc00)
[  907.016566][ T4205] The buggy address belongs to the page:
[  907.022238][ T4205] page:ffffea0001859a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61668
[  907.032615][ T4205] head:ffffea0001859a00 order:3 compound_mapcount:0 compound_pincount:0
[  907.041053][ T4205] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  907.049073][ T4205] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0
[  907.057684][ T4205] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  907.066289][ T4205] page dumped because: kasan: bad access detected
[  907.072747][ T4205] page_owner tracks the page as allocated
[  907.078479][ T4205] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14, ts 66038232250, free_ts 25160272657
[  907.096940][ T4205]  get_page_from_freelist+0x1bbd/0x1ca0
[  907.102569][ T4205]  __alloc_pages+0x1ee/0x480
[  907.107191][ T4205]  new_slab+0xc0/0x4b0
[  907.111291][ T4205]  ___slab_alloc+0x80a/0xdd0
[  907.115904][ T4205]  __kmalloc_node_track_caller+0x1fc/0x3a0
[  907.121748][ T4205]  __alloc_skb+0x22c/0x750
[  907.126205][ T4205]  __tcp_send_ack+0x9d/0x5d0
[  907.130828][ T4205]  tcp_rcv_established+0xb94/0x1ce0
[  907.136317][ T4205]  tcp_v4_do_rcv+0x44b/0x9b0
[  907.140937][ T4205]  tcp_v4_rcv+0x26d8/0x2d10
[  907.145472][ T4205]  ip_protocol_deliver_rcu+0x3ad/0x770
[  907.151335][ T4205]  ip_local_deliver_finish+0x1d5/0x320
[  907.156823][ T4205]  NF_HOOK+0x303/0x390
[  907.160929][ T4205]  ip_sublist_rcv+0xa33/0xd30
[  907.165645][ T4205]  ip_list_rcv+0x3ee/0x440
[  907.170214][ T4205]  __netif_receive_skb_list_core+0x57f/0x750
[  907.176233][ T4205] page last free stack trace:
[  907.181030][ T4205]  free_unref_page_prepare+0x637/0x6c0
[  907.186536][ T4205]  free_unref_page+0x8f/0x2a0
[  907.191262][ T4205]  free_contig_range+0x96/0xf0
[  907.196063][ T4205]  destroy_args+0xf0/0xa00
[  907.200617][ T4205]  debug_vm_pgtable+0x321/0x380
[  907.205675][ T4205]  do_one_initcall+0x272/0x730
[  907.210503][ T4205]  do_initcall_level+0x137/0x1f0
[  907.215490][ T4205]  do_initcalls+0x4b/0x90
[  907.219984][ T4205]  kernel_init_freeable+0x3e9/0x570
[  907.225218][ T4205]  kernel_init+0x19/0x1b0
[  907.229650][ T4205]  ret_from_fork+0x1f/0x30
[  907.234303][ T4205] 
[  907.236762][ T4205] Memory state around the buggy address:
[  907.242418][ T4205]  ffff88806166cb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  907.251097][ T4205]  ffff88806166cb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  907.259468][ T4205] >ffff88806166cc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  907.267663][ T4205]                       ^
[  907.272032][ T4205]  ffff88806166cc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  907.280354][ T4205]  ffff88806166cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  907.288554][ T4205] ==================================================================
[  907.296774][ T4205] Disabling lock debugging due to kernel taint
[  907.434620][ T4205] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  907.443006][ T4205] CPU: 0 PID: 4205 Comm: kworker/u5:8 Tainted: G    B             syzkaller #0
[  907.452867][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  907.462969][ T4205] Workqueue: hci1 hci_rx_work
[  907.467706][ T4205] Call Trace:
[  907.471015][ T4205]  <TASK>
[  907.473972][ T4205]  dump_stack_lvl+0x188/0x250
[  907.478689][ T4205]  ? show_regs_print_info+0x20/0x20
[  907.484127][ T4205]  ? load_image+0x400/0x400
[  907.487826][T13404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  907.488764][ T4205]  panic+0x2e5/0x810
[  907.502394][ T4205]  ? bpf_jit_dump+0xd0/0xd0
[  907.506946][ T4205]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  907.513151][ T4205]  ? _raw_spin_unlock+0x40/0x40
[  907.518059][ T4205]  ? hci_le_meta_evt+0x1324/0x3c90
[  907.523201][ T4205]  check_panic_on_warn+0x80/0xa0
[  907.528166][ T4205]  ? hci_le_meta_evt+0x1324/0x3c90
[  907.533387][ T4205]  end_report+0x6d/0xf0
[  907.537873][ T4205]  kasan_report+0x102/0x130
[  907.542516][ T4205]  ? hci_le_meta_evt+0x1324/0x3c90
[  907.547667][ T4205]  hci_le_meta_evt+0x1324/0x3c90
[  907.552641][ T4205]  ? hci_remote_host_features_evt+0x280/0x280
[  907.558743][ T4205]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  907.564399][ T4205]  ? mark_lock+0x94/0x320
[  907.568750][ T4205]  ? mutex_unlock+0x10/0x10
[  907.573399][ T4205]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  907.579429][ T4205]  ? lock_chain_count+0x20/0x20
[  907.584414][ T4205]  ? __rwlock_init+0x140/0x140
[  907.589467][ T4205]  hci_event_packet+0xe48/0x1370
[  907.594432][ T4205]  ? lockdep_hardirqs_on+0x94/0x140
[  907.599702][ T4205]  ? rcu_lock_release+0x20/0x20
[  907.604664][ T4205]  ? hci_send_to_monitor+0x9c/0x4a0
[  907.609887][ T4205]  hci_rx_work+0x255/0xa10
[  907.614331][ T4205]  process_one_work+0x85f/0x1010
[  907.619296][ T4205]  ? worker_detach_from_pool+0x240/0x240
[  907.624957][ T4205]  ? lockdep_hardirqs_off+0x70/0x100
[  907.630368][ T4205]  ? _raw_spin_lock_irq+0xb7/0xf0
[  907.635427][ T4205]  ? _raw_spin_lock_irqsave+0x100/0x100
[  907.641080][ T4205]  ? wq_worker_running+0x97/0x170
[  907.646125][ T4205]  worker_thread+0xaa6/0x1290
[  907.651791][ T4205]  ? lockdep_hardirqs_on+0x94/0x140
[  907.657103][ T4205]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  907.663023][ T4205]  kthread+0x436/0x520
[  907.667205][ T4205]  ? rcu_lock_release+0x20/0x20
[  907.672280][ T4205]  ? kthread_blkcg+0xd0/0xd0
[  907.677313][ T4205]  ret_from_fork+0x1f/0x30
[  907.681881][ T4205]  </TASK>
[  907.685409][ T4205] Kernel Offset: disabled
[  907.689786][ T4205] Rebooting in 86400 seconds..