last executing test programs:

11m18.778241149s ago: executing program 2 (id=5):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xff}, {}, @raw32={[0x0, 0x100]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {0xfe}, {}, @quote={{0x7}, 0x2e}}], 0x38)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000a01068104000000000000000003000005"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004890)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@newtaction={0x7e0, 0x30, 0x100, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x4}, {0x7c8, 0x1, [@m_connmark={0xe8, 0x9, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc818, 0x80000001, 0x7, 0x0, 0x4}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x5, 0x8, 0x4}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x8, 0x0, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0x1ff, 0x2, 0x4, 0x2}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xe4fb, 0x7, 0x3, 0x8}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1256, 0xfffffff7, 0x4, 0xfffffff8, 0xe9d}, 0x2}}]}, {0xd, 0x6, "a947ca9a2469af8338"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0xa0, 0xe, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6c}]}, {0x6a, 0x6, "8c716ded4d3c5cb1016fbe7f01dae2b4327059ed7de022fcacf2a63c9017a4239c04021b5b3df241a4f8bd414fa6c37ff184a4fd4f6be3d7b48fca173d3fb6859b4718f85dc1ba1ba63a113f4be091e2a285b761da4a43c7b65e04b4d49cf7492a503860942d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x4ec, 0xf, 0x0, 0x0, {{0xb}, {0x41c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x1, 0x7, 0x6, 0x2, 0x40, 0xc0000000, 0x8000, 0x4, 0xffff, 0x7f643e6, 0xe, 0x2, 0x6, 0x10, 0x5, 0x80000001, 0x4, 0x2, 0x81, 0x8001, 0x9, 0x4, 0x7, 0x3, 0x8, 0x1, 0x400, 0x14000000, 0x5, 0x8, 0x0, 0x3ff, 0x7ff, 0x6, 0x4, 0x469, 0x7f, 0x0, 0x6, 0x5, 0xca6, 0x100, 0x10001, 0x3, 0x80000001, 0x5e6a, 0x7fffffff, 0xcc2, 0xacb, 0x9, 0x2925, 0x6, 0x4d, 0x6, 0x80, 0x1, 0x81, 0x2e6, 0x1c00000, 0x0, 0x7, 0x5, 0x1, 0x1, 0x3, 0xaea, 0x6, 0x5, 0x3, 0x2000, 0x6, 0xaf69, 0xabab, 0x1, 0x5, 0x2, 0x3170, 0x2, 0xb, 0xffffffff, 0x1, 0x1, 0x10000, 0x5, 0x9, 0x6, 0x3ad7, 0x7, 0x0, 0x4, 0x7, 0x3, 0x800, 0x81, 0x340000, 0x8, 0xfffffc01, 0x200, 0x1, 0x6, 0x9, 0x6, 0x80, 0xe5b, 0x9, 0x1, 0x7fffffff, 0x7fffffff, 0x2, 0xffff, 0x3, 0x356f, 0x5907, 0x4, 0x93, 0x6, 0xa41, 0x3ff, 0x2, 0x4, 0x2e55383e, 0x147a, 0x4, 0x10000, 0x36, 0xfffffffa, 0x5, 0x7f, 0x6da, 0x100, 0x80000000, 0x76, 0x12000, 0xffff, 0x6, 0xba, 0xfffff46a, 0xb, 0x6, 0x0, 0x4, 0x2, 0x4, 0x101, 0x3, 0x81, 0xe, 0xb3, 0x10001, 0xf47, 0x1, 0x8, 0x400, 0x1ff, 0x8, 0x9, 0x3af, 0x10000, 0x1, 0x2de, 0x1, 0x2, 0x0, 0x1, 0x1, 0x4e6f, 0x76, 0x2, 0xb, 0x5, 0x9, 0x1, 0xfffffffd, 0x204, 0x7a, 0x8000, 0x80, 0x5, 0x0, 0xc, 0x1000, 0x9, 0x9, 0x7, 0x7, 0x3, 0xd, 0x0, 0xfffffffb, 0x2, 0x9e4b, 0x401, 0x3ff, 0x7ff, 0x80000000, 0x7, 0x8000, 0x8, 0x40000000, 0xfff, 0x4, 0xdb, 0x7, 0x4, 0x3c84, 0xa58e, 0x5, 0xbd, 0x4f7a, 0x3, 0xdf31, 0xa, 0x1, 0x101, 0x10, 0x0, 0x3, 0x80000000, 0xf, 0x401, 0x8, 0x24e, 0x81, 0xe17, 0x3, 0x6, 0x35, 0x6, 0x2, 0x7f, 0x4, 0xc, 0x7, 0x2, 0x45, 0x6, 0x100, 0xfffffff8, 0x100, 0x9, 0x9, 0x55f4, 0x10000, 0x5c2aaff3, 0x5, 0xfb, 0x5, 0x7fffffff, 0x6, 0x0, 0x0, 0x729, 0x6, 0xa]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]]}, {0xa6, 0x6, "68e47b32cb1f942dec9111ae5f6f0b5c506919f67687dc11ca20a4932e861970bd558aaaf0efd12d3dbf1367bc92538a8fc6a63134bc0e4cf33f3a965b3940a7bfb0ccbfce36b68631b20a4b753cf47a9898e2e2eb3c3366e2eb195e7e30f35b83df5083e4524866fdef786a87d23bc875ac2d70351a23029e04380f7137e2b49a3b4fb13f3514ececa71830643cf01cdd2cd1775f4c95bf2448b764cf6a849bb261"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x150, 0x1, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xa, 0x3, 0x4, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x4, 0x0, 0xf}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6a6a, 0x1f, 0x3, 0x0, 0xfffffff9}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x5, 0x0, 0x400}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x9, 0x0, 0x0, 0x257c}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4b1, 0x0, 0xb, 0x7f, 0x25}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x8000, 0x3, 0x80, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x162, 0x400, 0x0, 0x1, 0xcdc}, 0x1}}]}, {0x24, 0x6, "464f463735fa6656ed6ed25ad0dfa3a4adf48bcba2e868c65d4b3823f12b591c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x7e0}}, 0x8000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5, 0x3800001, 0x401d031, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f0000000500)="8100dca40704185995cf3ab2f97104ae0480e08ba3fe77bed703ed94bfffa7be5a751dabd5b5d7216ad9d9a57466738e725be872a715547ce60cc623b31aaa8f7e05f88d47bca1273a8db8831af246a7879400ba923e3c80d84ef1fda2357da101585de6727af2a56bf5eb040e40103e513483f8c8be86c0f4f9b218508ee0ccdd857643d0985da78590cf3f885368f4573b893bcc97b9cbfb781aa9e68b2ec3187163db24a64c122bd6238f5a930fef4979ad89f9deac6ae658b56432e0fef545e7d4cd4c1ce6ae4c475a0366a962a74e4d142aef89a308613d58abab", 0xf000}, {0x0, 0x2d}], 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, 0x0, 0x0)
connect$inet(r3, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r4 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700)
ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r4, 0x6f2d, 0x400000002000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000ac0000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000094200009801c0002800c00018008000140000000040c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0)

11m17.555863387s ago: executing program 2 (id=6):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008f}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100))
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota'])
chdir(&(0x7f0000000100)='./file0\x00')
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x59)
quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0x0, &(0x7f0000000500))

11m16.332176505s ago: executing program 2 (id=7):
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x10, r3, 0x29d1a000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x14)
sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000170a01040000000000000000020000000900020073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x10100, 0x2, 0x0, 0x10100, 0x2, 0x1}, 0x30, 0x0)
landlock_restrict_self(r5, 0xe)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0xd80}}, 0xc000)

11m15.136013891s ago: executing program 2 (id=8):
io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1e8a, 0x0, 0x2, 0x80db})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x1, 0xb}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x6}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PBURST={0x8, 0x7, 0x1262}, @TCA_TBF_BURST={0x8, 0x6, 0x7ff}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890)
socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100004)
r3 = msgget$private(0x0, 0x20)
msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f0000000380)=""/45)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000002c0)={0x0, r2, 0xffffffffffffffff, 0x3, 0x3, '\x00', {0x5, 0x7, 0x0, 0x78, 0x6, 0x0, 0x2, 0x3, {0xff, 0x5}, {0xeb, 0x6}, {0xe, 0x7}, 0x3, 0x7, 0x0, 0x64ca6757, 0x5, 0x1, 0x1, 0xc, 0x4, 0xdcf, '\x00', 0x400, 0x6, 0x5}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff)
write(r4, &(0x7f0000001200)="05010906a101", 0x6)

11m14.916640622s ago: executing program 1 (id=2):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0)
ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r7], 0x2c}}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
mq_timedsend(r1, &(0x7f0000000580)="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", 0x1000, 0x2, 0x0)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x121400, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f00000000c0)=r2)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0xfe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1000]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xa, 0x2d, 0xffff, 0x0, 0x3, 0x8a1d}}, {0x4}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000)

11m14.589887227s ago: executing program 2 (id=9):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x20}]}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$inet6(0xa, 0x3, 0x7)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'dmm32at\x00', [0x184, 0x80000004, 0x2, 0x3fd, 0xe, 0x800003, 0x75d, 0x3, 0x4, 0x8, 0x4, 0x1, 0x1, 0x1, 0x9, 0x0, 0x2000008, 0x7c, 0xfffffffc, 0x6fb9, 0x1, 0x7713, 0x0, 0x0, 0x0, 0x7a, 0x1a, 0x8, 0x8, 0x7, 0x1]})
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000046682d562c31aa909594c57a164463536e83a7f6ac12a8b52f0d70aa97a91fa46cdcefe7534fda04cace652409e818c0b1da96d9c9fa8e952384"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x4040)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r6, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, 0x0)
ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000180)={0x8, r7})
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c", @ANYRESOCT], 0x9, 0xc41, &(0x7f0000001b80)="$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")

11m13.851035772s ago: executing program 1 (id=10):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1040}], 0x0, 0x0, 0x0})
r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$COMEDI_CMD(r6, 0x80506409, 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0xffffffffffffffff)

11m11.043271044s ago: executing program 1 (id=11):
unshare(0x2c020400)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804)
r0 = io_uring_setup(0x1cf8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x80000000000003)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
close(r5)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
setreuid(0xffffffffffffffff, 0xee01)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x800, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

11m5.936537255s ago: executing program 1 (id=15):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b000000000000000000000000200000000000", @ANYRES32], 0x50)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={0x0, 0x7fffffff}, &(0x7f0000000dc0)=0x8)
open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181)
socket$nl_generic(0x11, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80001, 0x80)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
iopl(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', 0x0, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
iopl(0x40)
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00')
timer_create(0x7, 0x0, 0x0)

11m5.934549545s ago: executing program 2 (id=16):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000540), 0x9, 0x8a681)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
io_setup(0x98, &(0x7f0000000380))
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x1b)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
write$tun(r1, 0x0, 0xfce)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x1403, 0x300, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x200d5}, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x40012021, 0x0)
r6 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x2}, 0x8)
sendmmsg(r6, &(0x7f0000003b80)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @loopback, 0xc21}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0)

11m1.17701135s ago: executing program 1 (id=19):
syz_open_dev$sndctrl(0x0, 0x4, 0x70be42)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180))
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet(r5, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040040)
bind$can_raw(r4, &(0x7f00000005c0), 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)

10m50.527834901s ago: executing program 32 (id=16):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000540), 0x9, 0x8a681)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
io_setup(0x98, &(0x7f0000000380))
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x1b)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
write$tun(r1, 0x0, 0xfce)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x1403, 0x300, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x200d5}, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x40012021, 0x0)
r6 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x2}, 0x8)
sendmmsg(r6, &(0x7f0000003b80)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @loopback, 0xc21}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0)

10m45.241466321s ago: executing program 33 (id=19):
syz_open_dev$sndctrl(0x0, 0x4, 0x70be42)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180))
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet(r5, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040040)
bind$can_raw(r4, &(0x7f00000005c0), 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)

8m57.646704674s ago: executing program 5 (id=120):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
io_submit(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32], 0x20}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240), 0x0, 0xfffffffffffffffe)
pipe2$watch_queue(0x0, 0x80)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002340)={0x2020}, 0x2020)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000040)={0x2710, 0x0, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

8m51.486396974s ago: executing program 5 (id=128):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c)
r4 = openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97)
r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd', @ANYBLOB=',rootmode=00000000000000000100000,user', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0)
ioctl$VIDIOC_G_CTRL(r7, 0xc008561b, &(0x7f0000001140)={0x3, 0x4})
preadv(r6, 0x0, 0x0, 0x0, 0x0)

8m50.332385469s ago: executing program 5 (id=129):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = signalfd(r0, &(0x7f0000000000)={[0x7]}, 0x8)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
bind$bt_hci(r1, 0x0, 0xffffffffffffffe6)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000728818de58bd47e544312744349e1f96649f3c239332cfaa7f137126eebea6b02d74415a2e418829611fefbb4e6cd5bed2634e3c44e614962a97093846bbc3ab35f59f34a024fc409a", @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x3, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0xb, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]})
ioctl$COMEDI_INSNLIST(r4, 0x8008640b, &(0x7f00000edb40)={0x0, 0x0})
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)

8m46.523503729s ago: executing program 5 (id=132):
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
sched_setscheduler(0x0, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xca}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x11}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x3f00)

8m44.986316151s ago: executing program 5 (id=134):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x3f00)
readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)

8m37.954583423s ago: executing program 5 (id=139):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount(0x0, &(0x7f0000000200)='./tracing\x00', 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6)
fallocate(r3, 0x0, 0x0, 0x10000)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x101080)

8m21.784425735s ago: executing program 34 (id=139):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount(0x0, &(0x7f0000000200)='./tracing\x00', 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6)
fallocate(r3, 0x0, 0x0, 0x10000)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x101080)

3m17.242977454s ago: executing program 3 (id=528):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sysinfo(&(0x7f0000001140)=""/179)

3m15.394503522s ago: executing program 3 (id=529):
socket$inet6_sctp(0xa, 0x5, 0x84)
landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x0, 0x2, 0x9}, 0x30, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000880)={{r0}, 0x0, 0xaa3e6b9046563835, @inherit={0x68, &(0x7f00000006c0)={0x0, 0x4, 0x2, 0x0, {0x30, 0x6, 0xd9af, 0x2, 0x59d}, [0x10001, 0x8, 0x7fffffffffffffff, 0xfffffffffffffffd]}}, @name="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"})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000001000000001, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000003540)={0x2020}, 0x2020)
r4 = socket$netlink(0x10, 0x3, 0x15)
writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)

3m4.543581288s ago: executing program 3 (id=542):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
fsmount(0xffffffffffffffff, 0x0, 0xe2)
socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x134}, 0x1, 0x0, 0x0, 0x4090}, 0x4004)
shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil)
r3 = io_uring_setup(0x2a6a, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x3c})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x11, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xfffffff3, 0x0, 0x0, 0x6000, '\x00', 0xfffffffffffffffe, 0xfffffffffffffffe, 0x200, 0x0, {}, {0x5, 0x402}, {0xfffffffffffffffb, 0x4}, {0x5}, 0x60, 0x0, 0x7fff}}}})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0)
write$P9_RSTATu(r4, 0x0, 0x239)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791148000000000071112a000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff96}, 0x3e)

3m2.320318343s ago: executing program 3 (id=545):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061111c008000004006007c587205cffd6fa2740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000340)="4700000001003f", 0x7)
socketpair(0x11, 0x2, 0x2, &(0x7f0000000180))
mount(0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$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")
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
close(0xffffffffffffffff)

3m1.322157611s ago: executing program 3 (id=549):
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, {0x110a}, 0x1})
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x80000001, @mcast1, 0x9}, 0x1c)
writev(r3, 0x0, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)

2m58.830640529s ago: executing program 3 (id=553):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sysinfo(&(0x7f0000001140)=""/179)

2m57.895116384s ago: executing program 35 (id=553):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sysinfo(&(0x7f0000001140)=""/179)

2m17.501524984s ago: executing program 0 (id=606):
r0 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x20004, <r7=>r5, 0x2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r7})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r8=>0x0], 0x0, 0x0, 0x59, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x1, r8, 0xff, 0x100007, 0xa, 0x1ff, 0x1})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000200))
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r9, 0x0, 0x20000080)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000140)=0x8)

2m16.030132064s ago: executing program 0 (id=607):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000c0d000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000a23000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000b93000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
shutdown(r3, 0x2)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x15, 0x0, 0x0)
ppoll(&(0x7f0000000200)=[{r4, 0x2848}, {r0, 0x5075}], 0x2, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00))
setns(0xc9, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)

2m14.694025298s ago: executing program 0 (id=610):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000ac0)="$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")
landlock_create_ruleset(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r1}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'rmd160\x00'}}, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
r5 = syz_open_procfs(0x0, 0x0)
pread64(r5, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x111)
ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000080)={0x7, 0x200001ff, 0xfffffffffffffffd})
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast})
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x3716f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb9}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94)

2m13.843952158s ago: executing program 0 (id=613):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sysinfo(&(0x7f0000001140)=""/179)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_ifreq(r5, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @ifru_map={0x2, 0xf, 0xd, 0x2, 0x9, 0x8}})
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x390, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
syz_emit_ethernet(0xe, &(0x7f0000000100)={@local, @remote, @void, {@generic={0x6003}}}, 0x0)

2m12.925358591s ago: executing program 0 (id=622):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sysinfo(&(0x7f0000001140)=""/179)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_ifreq(r5, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @ifru_map={0x2, 0xf, 0xd, 0x2, 0x9, 0x8}})
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x390, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
syz_emit_ethernet(0xe, &(0x7f0000000100)={@local, @remote, @void, {@generic={0x6003}}}, 0x0)

2m5.041019696s ago: executing program 0 (id=621):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000ac0)="$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")
landlock_create_ruleset(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r1}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'rmd160\x00'}}, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
r3 = syz_open_procfs(0x0, 0x0)
pread64(r3, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x111)
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x7, 0x200001ff, 0xfffffffffffffffd})
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast})
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x3716f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb9}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94)

1m49.826570839s ago: executing program 36 (id=621):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000ac0)="$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")
landlock_create_ruleset(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r1}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'rmd160\x00'}}, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
r3 = syz_open_procfs(0x0, 0x0)
pread64(r3, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x111)
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x7, 0x200001ff, 0xfffffffffffffffd})
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast})
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x3716f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb9}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94)

32.959271353s ago: executing program 4 (id=746):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sysinfo(&(0x7f0000001140)=""/179)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_ifreq(r6, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @ifru_map={0x2, 0xf, 0xd, 0x2, 0x9, 0x8}})
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x390, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
syz_emit_ethernet(0xe, &(0x7f0000000100)={@local, @remote, @void, {@generic={0x6003}}}, 0x0)

28.076305975s ago: executing program 4 (id=752):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/fscaps', 0x2, 0x0)

15.55703449s ago: executing program 8 (id=642):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYRES32=0x0], 0x50)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setresuid(0xee00, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r0, 0x0, 0x0)
fchdir(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80442, 0x67)
readlinkat(0xffffffffffffff9c, 0x0, &(0x7f0000000500), 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e)
write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a00000000000000010100"], 0x78)
write$FUSE_STATFS(r5, &(0x7f0000002400)={0x60, 0xfffffffffffffff5, 0x0, {{0x8, 0x4, 0x7, 0xa, 0x0, 0x3, 0x7f, 0x400}}}, 0x60)
close(r5)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
creat(&(0x7f0000000300)='./file1\x00', 0x0)

15.551535211s ago: executing program 6 (id=765):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44)
sendmsg$sock(r3, 0x0, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2})

15.549081901s ago: executing program 4 (id=766):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = fcntl$getown(r3, 0x9)
sched_setaffinity(r4, 0x0, 0x0)
r5 = getpid()
r6 = socket$inet6(0xa, 0x3, 0xff)
sendmmsg(r6, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0x20)
syz_pidfd_open(r5, 0x0)
fsopen(0x0, 0x1)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x1)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000040)="09000000010001", 0x7)

13.338325256s ago: executing program 8 (id=757):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000080)=0x18)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x42799000)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x800)
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="3d0d8f929d36bc9c19d99c138002cdf0e58683ee6a6abe3f845d219f9f86cc41c0ed8b279cd28575a6a50679baf75e3aa7774f87987e5460c109d882afd2c2bfb760eaaae9b071cf23", @ANYRES16=0x0], 0x1, 0x195, &(0x7f0000000440)="$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")
lseek(0xffffffffffffffff, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
mknod(&(0x7f0000000000)='.\x02\x00', 0x1000, 0x42)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
fadvise64(r2, 0x4, 0x5, 0x1)
r4 = syz_genetlink_get_family_id$ieee802154(0x0, r3)
sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="614425bd700000dcdf2501000000050006001300000020000a00ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x10)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)

12.882787328s ago: executing program 4 (id=758):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2})
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x8, 0x0, 0x8001, 0x1, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x6}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)

12.594498551s ago: executing program 6 (id=759):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44)
sendmsg$sock(r3, 0x0, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2})
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x8, 0x0, 0x8001, 0x1, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x6}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)

11.656060816s ago: executing program 8 (id=760):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sysinfo(&(0x7f0000001140)=""/179)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_ifreq(r6, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @ifru_map={0x2, 0xf, 0xd, 0x2, 0x9, 0x8}})
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x390, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
syz_emit_ethernet(0xe, &(0x7f0000000100)={@local, @remote, @void, {@generic={0x6003}}}, 0x0)

10.702556861s ago: executing program 6 (id=762):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44)
sendmsg$sock(r3, 0x0, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2})
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x8, 0x0, 0x8001, 0x1, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x6}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)

10.08743468s ago: executing program 7 (id=764):
r0 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x7}, 0x1c)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
r11 = socket(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c)

9.366603045s ago: executing program 6 (id=768):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
capget(&(0x7f0000000780)={0x19980330}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
truncate(0x0, 0x20fffffffc)
write$tcp_congestion(r0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
unshare(0x22020600)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x480d0)
epoll_pwait2(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000080)={[0x17]}, 0x8)
ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f00000002c0)={<r7=>r5, 0x0, 0x103000, &(0x7f0000000180)={@_ha_fsid={[0x7fffffff, 0x8]}, {0x84, 0x5, 0x1000007}}, 0x0, 0x0, &(0x7f0000000280)=0x8f})
ioctl$NBD_SET_SOCK(r7, 0xab00, r0)

9.357810415s ago: executing program 7 (id=769):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82)
listen(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f000022b000/0x2000)=nil, 0x2000, 0x13)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0)
write(r3, &(0x7f0000000000)="320d9f925ab0787ed97f2ac837bd4303c0e8f1e341b60b04a50e15d89f41a26edf0cb4a8663144a6303704b23b4c5c256d1407498edb1322eab5bebf36abbd7310095969b2d02bee1a96f00363317743602ad854c4298e6aec01edb1ce498c4c27d396eb49a7251cbbab9e", 0x6b)
symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
write(0xffffffffffffffff, &(0x7f0000000940)='dummy_udc.0', 0xb)

7.610424718s ago: executing program 6 (id=770):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040090}, 0x8000)

6.868129544s ago: executing program 7 (id=771):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44)
sendmsg$sock(r3, 0x0, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2})

6.666568533s ago: executing program 8 (id=772):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getpid()
times(0xfffffffffffffffe)
r3 = syz_open_dev$I2C(0x0, 0x2, 0x40402)
r4 = syz_open_dev$usbfs(0x0, 0x76, 0x141301)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054)
setns(0xc9, 0x0)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000200), 0x4)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208800, 0x0)
bind$rds(r5, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10)

5.972287816s ago: executing program 7 (id=773):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='veno', 0x4)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x48881)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r6 = socket(0x1e, 0x4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r7 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x70bd2b, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x80)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x0)

5.106266497s ago: executing program 8 (id=774):
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f43657274696669636174652076657269666963617428a2e0861e1ae90d412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xfffffffffffffffd)
r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary)
unshare(0x8060400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0)
r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"})
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'wg2\x00', {0x2, 0x0, @empty}})

2.197019656s ago: executing program 8 (id=775):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44)
sendmsg$sock(r3, 0x0, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2})
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x8, 0x0, 0x8001, 0x1, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x6}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)

2.195755485s ago: executing program 7 (id=776):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44)
sendmsg$sock(r3, 0x0, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2})
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x8, 0x0, 0x8001, 0x1, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x6}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)

2.001048195s ago: executing program 4 (id=777):
socket(0x40000000015, 0x5, 0x0)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x9, 0x7, 0xb0c, 0x4}, &(0x7f0000000400)=0x14)
setgroups(0x0, &(0x7f0000000080))
read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020)

7.770449ms ago: executing program 6 (id=778):
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882)
r4 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r6, 0xffffffffffffffff, 0x100000000000000)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x4)

7.47906ms ago: executing program 7 (id=779):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r4, 0x402c542c, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a2160000302b00fe8000000000000000000000000000bbfe800000000000"], 0x0)
socket$packet(0x11, 0x2, 0x300)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=786):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2})
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x8, 0x0, 0x8001, 0x1, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x6}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)

kernel console output (not intermixed with test programs):

 netdevsim0: renamed from eth0
[   83.469180][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   83.482191][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   83.506977][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   83.580137][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.607784][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.640603][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.661843][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.713425][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.728884][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.760229][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.787012][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.831927][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.877276][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   83.896118][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   83.908225][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   83.918300][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   83.955893][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   84.001155][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.008651][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.026735][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.033906][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.119110][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.184430][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.193712][ T5778] 8021q: adding VLAN 0 to HW filter on device team0
[   84.246189][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.253373][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.270442][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   84.298079][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.316533][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.323828][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.334651][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.341874][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.367494][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.374869][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.417734][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   84.467945][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.475200][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.529261][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.536471][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.681795][ T5776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   84.716582][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.818842][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.962333][ T5777] veth0_vlan: entered promiscuous mode
[   84.976449][   T51] Bluetooth: hci1: command tx timeout
[   84.976461][ T5784] Bluetooth: hci2: command tx timeout
[   84.982126][ T5790] Bluetooth: hci0: command tx timeout
[   85.006839][ T5777] veth1_vlan: entered promiscuous mode
[   85.047061][ T5777] veth0_macvtap: entered promiscuous mode
[   85.055831][ T5790] Bluetooth: hci3: command tx timeout
[   85.065385][ T5777] veth1_macvtap: entered promiscuous mode
[   85.091556][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.133025][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.183851][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.203709][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.219433][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.230239][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.268534][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.310675][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.374364][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.469240][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.478296][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.490910][ T5775] veth0_vlan: entered promiscuous mode
[   85.553034][ T5775] veth1_vlan: entered promiscuous mode
[   85.563459][ T5778] veth0_vlan: entered promiscuous mode
[   85.576072][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.585967][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.625610][ T5778] veth1_vlan: entered promiscuous mode
[   85.682561][ T5776] veth0_vlan: entered promiscuous mode
[   85.715334][ T5775] veth0_macvtap: entered promiscuous mode
[   85.736520][ T5776] veth1_vlan: entered promiscuous mode
[   85.762099][ T5775] veth1_macvtap: entered promiscuous mode
[   85.817842][ T5778] veth0_macvtap: entered promiscuous mode
[   85.858062][ T5776] veth0_macvtap: entered promiscuous mode
[   85.872127][ T5778] veth1_macvtap: entered promiscuous mode
[   85.884192][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.896307][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.909867][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.921151][ T5776] veth1_macvtap: entered promiscuous mode
[   85.943533][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.954527][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.126440][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.338272][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.381028][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.439592][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.488229][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.569649][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.826320][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.852737][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.870585][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.882552][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.897514][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.909540][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.946444][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.960777][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.985474][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.994205][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.005543][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.033324][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.049689][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.055364][ T5784] Bluetooth: hci2: command tx timeout
[   87.065216][ T5790] Bluetooth: hci0: command tx timeout
[   87.070644][ T5790] Bluetooth: hci1: command tx timeout
[   87.085575][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.097050][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.112649][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.132406][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.145525][   T51] Bluetooth: hci3: command tx timeout
[   87.162373][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.191915][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.203114][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.213204][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.228787][ T5843] syz.2.5: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[   87.243595][ T5843] CPU: 1 PID: 5843 Comm: syz.2.5 Not tainted syzkaller #0
[   87.250741][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   87.260816][ T5843] Call Trace:
[   87.264103][ T5843]  <TASK>
[   87.267038][ T5843]  dump_stack_lvl+0x18c/0x250
[   87.271741][ T5843]  ? show_regs_print_info+0x20/0x20
[   87.276951][ T5843]  ? load_image+0x420/0x420
[   87.281499][ T5843]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   87.287979][ T5843]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[   87.294548][ T5843]  warn_alloc+0x246/0x340
[   87.298938][ T5843]  ? zone_watermark_ok_safe+0x230/0x230
[   87.304533][ T5843]  __vmalloc_node_range+0x129/0x1320
[   87.309842][ T5843]  ? __mutex_trylock_common+0x160/0x270
[   87.315405][ T5843]  ? trace_raw_output_contention_end+0xd0/0xd0
[   87.321567][ T5843]  ? rcu_is_watching+0x15/0xb0
[   87.326364][ T5843]  ? trace_contention_end+0x39/0xe0
[   87.331576][ T5843]  ? __mutex_lock+0x30d/0xc80
[   87.336262][ T5843]  ? tomoyo_path_number_perm+0x56b/0x5e0
[   87.341934][ T5843]  ? free_vm_area+0x50/0x50
[   87.346472][ T5843]  ? dvb_demux_do_ioctl+0x317/0x530
[   87.351686][ T5843]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[   87.357168][ T5843]  ? mutex_lock_nested+0x20/0x20
[   87.362124][ T5843]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[   87.367953][ T5843]  vmalloc+0x79/0x90
[   87.371864][ T5843]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[   87.377689][ T5843]  dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[   87.383360][ T5843]  dvb_demux_do_ioctl+0x454/0x530
[   87.388416][ T5843]  dvb_usercopy+0x195/0x2b0
[   87.392941][ T5843]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[   87.398522][ T5843]  ? dvb_generic_ioctl+0xb0/0xb0
[   87.403511][ T5843]  ? dvb_demux_poll+0x210/0x210
[   87.408389][ T5843]  dvb_demux_ioctl+0x29/0x30
[   87.412996][ T5843]  __se_sys_ioctl+0xfd/0x170
[   87.417603][ T5843]  do_syscall_64+0x55/0xb0
[   87.422049][ T5843]  ? clear_bhb_loop+0x40/0x90
[   87.426779][ T5843]  ? clear_bhb_loop+0x40/0x90
[   87.431498][ T5843]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   87.437459][ T5843] RIP: 0033:0x7f4d77b9e159
[   87.441886][ T5843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.461551][ T5843] RSP: 002b:00007f4d78b3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   87.470094][ T5843] RAX: ffffffffffffffda RBX: 00007f4d77e26090 RCX: 00007f4d77b9e159
[   87.478104][ T5843] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 000000000000000a
[   87.486097][ T5843] RBP: 00007f4d77c3503b R08: 0000000000000000 R09: 0000000000000000
[   87.494082][ T5843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.502084][ T5843] R13: 00007f4d77e26128 R14: 00007f4d77e26090 R15: 00007fff33759348
[   87.510101][ T5843]  </TASK>
[   87.513710][ T5843] Mem-Info:
[   87.516886][ T5843] active_anon:5381 inactive_anon:0 isolated_anon:0
[   87.516886][ T5843]  active_file:716 inactive_file:39946 isolated_file:0
[   87.516886][ T5843]  unevictable:768 dirty:1729 writeback:0
[   87.516886][ T5843]  slab_reclaimable:9561 slab_unreclaimable:88318
[   87.516886][ T5843]  mapped:24049 shmem:1362 pagetables:453
[   87.516886][ T5843]  sec_pagetables:0 bounce:0
[   87.516886][ T5843]  kernel_misc_reclaimable:0
[   87.516886][ T5843]  free:1371715 free_pcp:7046 free_cma:0
[   87.562451][ T5843] Node 0 active_anon:21524kB inactive_anon:0kB active_file:2864kB inactive_file:159584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96196kB dirty:6908kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10364kB pagetables:1812kB sec_pagetables:0kB all_unreclaimable? no
[   87.594726][ T5843] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[   87.625795][ T5843] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   87.652902][ T5843] lowmem_reserve[]: 0 2521 2522 2522 2522
[   87.658733][ T5843] Node 0 DMA32 free:1577744kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21488kB inactive_anon:0kB active_file:2864kB inactive_file:158756kB unevictable:1536kB writepending:6896kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:11268kB local_pcp:8308kB free_cma:0kB
[   87.689228][ T5843] lowmem_reserve[]: 0 0 0 0 0
[   87.693982][ T5843] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:12kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[   87.721032][ T5843] lowmem_reserve[]: 0 0 0 0 0
[   87.725824][ T5843] Node 1 Normal free:3893756kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16904kB local_pcp:9224kB free_cma:0kB
[   87.755262][ T5843] lowmem_reserve[]: 0 0 0 0 0
[   87.760029][ T5843] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   87.772754][ T5843] Node 0 DMA32: 2*4kB (UE) 3*8kB (UME) 1*16kB (E) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 1*256kB (M) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 383*4096kB (M) = 1577744kB
[   87.790219][ T5843] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   87.801787][ T5843] Node 1 Normal: 229*4kB (UME) 49*8kB (UME) 42*16kB (UME) 54*32kB (UME) 22*64kB (UME) 6*128kB (UME) 3*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3893756kB
[   87.819422][ T5843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   87.829013][ T5843] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   87.838350][ T5843] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   87.847933][ T5843] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   87.858024][ T5843] 42024 total pagecache pages
[   87.862767][ T5843] 0 pages in swap cache
[   87.867023][ T5843] Free swap  = 124996kB
[   87.871209][ T5843] Total swap = 124996kB
[   87.875435][ T5843] 2097051 pages RAM
[   87.879273][ T5843] 0 pages HighMem/MovableOnly
[   87.883982][ T5843] 416965 pages reserved
[   87.888201][ T5843] 0 pages cma reserved
[   87.912458][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.945561][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.050548][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.078593][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.118460][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.155336][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.187991][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.225035][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.233905][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.265106][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.135772][   T51] Bluetooth: hci2: command tx timeout
[   89.136091][ T5784] Bluetooth: hci1: command tx timeout
[   89.141531][   T51] Bluetooth: hci0: command tx timeout
[   89.225175][   T51] Bluetooth: hci3: command tx timeout
[   89.532303][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.540759][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.649581][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.681429][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.750662][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.805107][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.823845][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.843585][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.933352][ T5862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'.
[   90.428955][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.458784][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.522543][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.573803][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.260718][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   91.295505][   T51] Bluetooth: hci3: command tx timeout
[   91.712230][ T5875] syz.0.1[5875]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   91.996122][ T5875] loop0: detected capacity change from 0 to 4096
[   92.584030][   T23] cfg80211: failed to load regulatory.db
[   93.068056][ T5880] comedi comedi1: board detection failed
[   93.683979][ T5884] binder: 5883:5884 ioctl c0306201 200000000080 returned -14
[   93.997244][ T5887] binder: 5883:5887 ioctl c0306201 2000000003c0 returned -14
[   94.798826][ T5881] loop2: detected capacity change from 0 to 2048
[   95.241623][ T5881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.954976][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!!
[   97.864800][    C1] sched: RT throttling activated
[   99.104827][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  100.077676][ T5907] loop0: detected capacity change from 0 to 1024
[  106.346419][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.355045][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.883102][ T5938] loop0: detected capacity change from 0 to 512
[  108.962915][ T5938] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  109.005133][ T5938] System zones: 1-12
[  109.051990][ T5938] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.22: missing EA_INODE flag
[  109.137415][ T5938] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.22: error while reading EA inode 12 err=-117
[  109.235673][ T5938] EXT4-fs (loop0): 1 orphan inode deleted
[  109.265310][ T5938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.315338][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  113.353473][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.636181][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.820074][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.921423][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  117.024799][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  117.455615][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  117.489549][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  117.501486][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  117.514983][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  117.535240][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  119.186579][ T5912] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.219317][ T5912] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.259599][ T5912] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.285679][ T5912] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.636805][ T5784] Bluetooth: hci4: command tx timeout
[  120.736941][ T5967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.28'.
[  121.697466][ T5784] Bluetooth: hci4: command tx timeout
[  123.208030][ T3466] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.388992][ T5784] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  123.575321][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  123.588422][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  123.680494][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  123.686081][ T5912] syz.2.16 (5912) used greatest stack depth: 20808 bytes left
[  123.702447][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  123.716437][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  123.723812][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  123.750540][ T3466] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.779896][ T5784] Bluetooth: hci4: command tx timeout
[  123.886095][ T5998] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  123.925628][ T3466] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.109829][ T3466] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.138903][ T5954] chnl_net:caif_netlink_parms(): no params data found
[  124.287120][ T6005] process 'syz.0.34' launched './file0' with NULL argv: empty string added
[  126.391680][ T6014] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  126.855033][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  127.335023][ T5784] Bluetooth: hci0: command tx timeout
[  127.338073][   T51] Bluetooth: hci4: command tx timeout
[  129.231986][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.243534][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.251145][ T5954] bridge_slave_0: entered allmulticast mode
[  129.259160][ T5954] bridge_slave_0: entered promiscuous mode
[  129.375142][   T51] Bluetooth: hci0: command tx timeout
[  129.381008][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.389053][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.398101][ T5954] bridge_slave_1: entered allmulticast mode
[  129.405713][ T5954] bridge_slave_1: entered promiscuous mode
[  129.455709][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.491927][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.819866][ T5954] team0: Port device team_slave_0 added
[  129.971481][ T5954] team0: Port device team_slave_1 added
[  130.111454][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.135080][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.192991][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.281889][ T5993] chnl_net:caif_netlink_parms(): no params data found
[  130.303305][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.320663][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.374870][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.641701][ T5954] hsr_slave_0: entered promiscuous mode
[  130.655007][ T5954] hsr_slave_1: entered promiscuous mode
[  130.662060][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.670285][ T5954] Cannot create hsr debugfs directory
[  131.051447][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.102014][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.109554][ T5993] bridge_slave_0: entered allmulticast mode
[  131.123908][ T5993] bridge_slave_0: entered promiscuous mode
[  131.133782][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.455036][   T51] Bluetooth: hci0: command tx timeout
[  131.614280][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.884138][ T5993] bridge_slave_1: entered allmulticast mode
[  131.938653][ T5993] bridge_slave_1: entered promiscuous mode
[  134.044901][   T51] Bluetooth: hci0: command tx timeout
[  134.053273][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  134.064867][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  134.196347][ T5993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.234390][   T23] IPVS: starting estimator thread 0...
[  134.239825][ T5993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.365301][ T6055] IPVS: using max 18 ests per chain, 43200 per kthread
[  134.676124][ T5993] team0: Port device team_slave_0 added
[  134.966576][ T5993] team0: Port device team_slave_1 added
[  135.663387][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.684789][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.770600][ T5993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.825431][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.832457][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.911385][ T5993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.549095][ T3466] hsr_slave_0: left promiscuous mode
[  136.581214][ T3466] hsr_slave_1: left promiscuous mode
[  136.604559][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.626917][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.719965][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.770363][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.857679][ T3466] bridge_slave_1: left allmulticast mode
[  136.885058][ T3466] bridge_slave_1: left promiscuous mode
[  136.926114][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.982529][ T3466] bridge_slave_0: left allmulticast mode
[  136.990863][ T3466] bridge_slave_0: left promiscuous mode
[  137.015206][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.621897][ T3466] veth1_macvtap: left promiscuous mode
[  137.649942][ T3466] veth0_macvtap: left promiscuous mode
[  137.684095][ T3466] veth1_vlan: left promiscuous mode
[  137.734233][ T3466] veth0_vlan: left promiscuous mode
[  142.214983][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  144.075254][ T3466] team0 (unregistering): Port device team_slave_1 removed
[  144.127397][ T3466] team0 (unregistering): Port device team_slave_0 removed
[  145.756638][ T3466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.853594][ T3466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.357569][ T3466] bond0 (unregistering): Released all slaves
[  148.334665][ T6102] netlink: 'syz.3.47': attribute type 4 has an invalid length.
[  148.344836][ T6102] netlink: 17 bytes leftover after parsing attributes in process `syz.3.47'.
[  148.354911][ T6112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.50'.
[  148.364518][ T6113] netlink: 64 bytes leftover after parsing attributes in process `syz.0.50'.
[  148.434684][ T5954] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  148.580766][ T5993] hsr_slave_0: entered promiscuous mode
[  148.618529][ T5993] hsr_slave_1: entered promiscuous mode
[  149.895001][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  150.234858][ T5993] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.242590][ T5993] Cannot create hsr debugfs directory
[  150.313165][ T5954] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  150.443456][ T5954] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  150.528330][ T5954] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  151.269761][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.360684][ T5993] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  151.388913][ T5993] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  151.456367][ T5954] 8021q: adding VLAN 0 to HW filter on device team0
[  151.469696][ T5993] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  151.482514][ T5993] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  151.616242][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.623510][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.650848][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.658108][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.903039][ T6138] netlink: 220 bytes leftover after parsing attributes in process `syz.0.51'.
[  152.829792][ T6143] Bluetooth: MGMT ver 1.22
[  153.694194][ T5993] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.761165][ T6146] bridge0: port 3(syz_tun) entered blocking state
[  153.769278][ T6146] bridge0: port 3(syz_tun) entered disabled state
[  153.782912][ T6146] syz_tun: entered allmulticast mode
[  153.806533][ T6146] syz_tun: entered promiscuous mode
[  153.844187][ T6146] bridge0: port 3(syz_tun) entered blocking state
[  153.850881][ T6146] bridge0: port 3(syz_tun) entered forwarding state
[  153.921842][ T6151] lo: entered allmulticast mode
[  153.935864][ T6151] tunl0: entered allmulticast mode
[  153.942015][ T6151] gre0: entered allmulticast mode
[  153.983438][ T6151] gretap0: entered allmulticast mode
[  154.001927][ T6151] erspan0: entered allmulticast mode
[  154.035868][ T6146] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  154.070982][ T6151] ip_vti0: entered allmulticast mode
[  154.102144][ T6151] ip6_vti0: entered allmulticast mode
[  154.109447][ T6151] sit0: entered allmulticast mode
[  154.124125][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'.
[  154.144179][ T6151] ip6tnl0: entered allmulticast mode
[  154.157741][ T6151] ip6gre0: entered allmulticast mode
[  154.164179][ T6151] syz_tun: entered allmulticast mode
[  154.171303][ T6151] ip6gretap0: entered allmulticast mode
[  154.178187][ T6151] bridge0: entered allmulticast mode
[  154.185820][ T6151] vcan0: entered allmulticast mode
[  154.191667][ T6151] bond0: entered allmulticast mode
[  154.198492][ T6151] bond_slave_0: entered allmulticast mode
[  154.204374][ T6151] bond_slave_1: entered allmulticast mode
[  154.226259][ T6151] team0: entered allmulticast mode
[  154.231760][ T6151] team_slave_0: entered allmulticast mode
[  154.238315][ T6151] team_slave_1: entered allmulticast mode
[  154.257623][ T6151] dummy0: entered allmulticast mode
[  154.263938][ T6151] nlmon0: entered allmulticast mode
[  154.271175][ T6151] caif0: entered allmulticast mode
[  154.277344][ T6151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.401064][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.476972][ T5993] 8021q: adding VLAN 0 to HW filter on device team0
[  154.567994][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.575296][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.813329][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.820676][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.384528][ T5954] veth0_vlan: entered promiscuous mode
[  158.145487][ T6192] loop3: detected capacity change from 0 to 512
[  158.287832][ T5954] veth1_vlan: entered promiscuous mode
[  158.493553][ T6192] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #4: comm syz.3.60: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  158.504257][ T6192] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.60: Bad quota inode: 4, type: 1
[  158.537776][ T6192] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  158.562042][ T6192] EXT4-fs (loop3): mount failed
[  159.509269][ T6206] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  159.794169][ T6203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.61'.
[  160.337360][ T5993] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.658863][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  160.695898][ T5954] veth0_macvtap: entered promiscuous mode
[  160.718732][ T5954] veth1_macvtap: entered promiscuous mode
[  160.727191][   T23] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  160.946178][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.995296][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.024782][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.049088][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.076465][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.151738][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.215041][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.242971][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.253932][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.276651][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.316120][ T3466] hsr_slave_0: left promiscuous mode
[  161.335385][ T3466] hsr_slave_1: left promiscuous mode
[  161.353524][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.395118][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.404105][ T3466] bridge_slave_1: left allmulticast mode
[  161.410539][ T3466] bridge_slave_1: left promiscuous mode
[  161.417980][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.436209][ T3466] bridge_slave_0: left allmulticast mode
[  161.444164][ T3466] bridge_slave_0: left promiscuous mode
[  161.454056][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.567922][ T6223] overlayfs: statfs failed on './file0'
[  165.254997][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  165.794568][ T3466] team0 (unregistering): Port device team_slave_1 removed
[  165.875510][ T3466] team0 (unregistering): Port device team_slave_0 removed
[  165.995884][ T3466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.069541][ T3466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.815023][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  168.927374][ T3466] bond0 (unregistering): Released all slaves
[  169.312782][ T6246] sctp: [Deprecated]: syz.3.67 (pid 6246) Use of struct sctp_assoc_value in delayed_ack socket option.
[  169.312782][ T6246] Use struct sctp_sack_info instead
[  169.494545][ T5954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.618846][ T5954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.745890][ T5954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.870728][ T5954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.114176][ T5993] veth0_vlan: entered promiscuous mode
[  171.795574][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.803483][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.864273][ T6255] loop3: detected capacity change from 0 to 2048
[  171.866227][ T5993] veth1_vlan: entered promiscuous mode
[  171.941097][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.961716][ T6255] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.971704][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.035628][ T5993] veth0_macvtap: entered promiscuous mode
[  172.078423][ T5993] veth1_macvtap: entered promiscuous mode
[  172.177044][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.250617][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.300281][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.323226][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.333624][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.345644][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.373567][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.430654][ T6261] Zero length message leads to an empty skb
[  172.456018][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.467340][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.479685][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.491754][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.530819][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.625045][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.671583][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.747818][ T5993] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.825966][ T5993] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.871714][ T5993] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.921988][ T5993] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.052435][ T6265] comedi comedi1: board detection failed
[  173.148802][ T6267] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  173.264476][ T6267] loop4: detected capacity change from 0 to 2048
[  173.397694][ T6267] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.050899][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.066029][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.212361][ T6274] loop3: detected capacity change from 0 to 8192
[  176.870342][ T6274] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  177.741296][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.819320][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.693615][ T6296] sctp: failed to load transform for md5: -2
[  181.894928][ T6290] warning: `syz.4.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  183.584891][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  185.609820][ T6328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.909402][ T6332] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6332]
[  190.025368][ T6356] loop4: detected capacity change from 0 to 32768
[  190.985303][ T6356] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  192.845700][ T6356] XFS (loop4): Ending clean mount
[  192.887244][ T6356] XFS (loop4): Quotacheck needed: Please wait.
[  194.155753][ T6356] XFS (loop4): Quotacheck: Done.
[  194.326763][ T5954] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  194.601054][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.616184][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  198.565273][ T6498] comedi comedi1: board detection failed
[  198.677757][ T6499] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  201.315178][ T6522] loop4: detected capacity change from 0 to 256
[  201.322647][ T6522] =======================================================
[  201.322647][ T6522] WARNING: The mand mount option has been deprecated and
[  201.322647][ T6522]          and is ignored by this kernel. Remove the mand
[  201.322647][ T6522]          option from the mount to silence this warning.
[  201.322647][ T6522] =======================================================
[  201.573514][ T6522] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  201.880143][ T5781] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  202.130525][ T6530] ceph: No mds server is up or the cluster is laggy
[  207.035209][ T6561] comedi comedi1: board detection failed
[  207.124398][ T6565] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  207.235642][ T6565] loop5: detected capacity change from 0 to 2048
[  207.808011][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  207.814311][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  211.008656][ T5784] Bluetooth: hci0: command tx timeout
[  211.403091][ T6565] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  224.307739][ T6658] syz.5.117: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1
[  224.322517][ T6658] CPU: 0 PID: 6658 Comm: syz.5.117 Not tainted syzkaller #0
[  224.329852][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  224.339953][ T6658] Call Trace:
[  224.343296][ T6658]  <TASK>
[  224.346274][ T6658]  dump_stack_lvl+0x18c/0x250
[  224.351034][ T6658]  ? show_regs_print_info+0x20/0x20
[  224.356301][ T6658]  ? load_image+0x420/0x420
[  224.360861][ T6658]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  224.367338][ T6658]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  224.373894][ T6658]  warn_alloc+0x246/0x340
[  224.378268][ T6658]  ? zone_watermark_ok_safe+0x230/0x230
[  224.383875][ T6658]  __vmalloc_node_range+0x129/0x1320
[  224.389208][ T6658]  ? __mutex_trylock_common+0x160/0x270
[  224.394801][ T6658]  ? trace_raw_output_contention_end+0xd0/0xd0
[  224.401009][ T6658]  ? rcu_is_watching+0x15/0xb0
[  224.405848][ T6658]  ? trace_contention_end+0x39/0xe0
[  224.411145][ T6658]  ? __mutex_lock+0x30d/0xc80
[  224.415903][ T6658]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  224.421633][ T6658]  ? free_vm_area+0x50/0x50
[  224.426197][ T6658]  ? dvb_demux_do_ioctl+0x317/0x530
[  224.431459][ T6658]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  224.437002][ T6658]  ? mutex_lock_nested+0x20/0x20
[  224.441997][ T6658]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  224.447867][ T6658]  vmalloc+0x79/0x90
[  224.451817][ T6658]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  224.457678][ T6658]  dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  224.463387][ T6658]  dvb_demux_do_ioctl+0x454/0x530
[  224.468468][ T6658]  dvb_usercopy+0x195/0x2b0
[  224.473078][ T6658]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[  224.478683][ T6658]  ? dvb_generic_ioctl+0xb0/0xb0
[  224.483700][ T6658]  ? dvb_demux_poll+0x210/0x210
[  224.488609][ T6658]  dvb_demux_ioctl+0x29/0x30
[  224.493278][ T6658]  __se_sys_ioctl+0xfd/0x170
[  224.497950][ T6658]  do_syscall_64+0x55/0xb0
[  224.502416][ T6658]  ? clear_bhb_loop+0x40/0x90
[  224.507149][ T6658]  ? clear_bhb_loop+0x40/0x90
[  224.511873][ T6658]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  224.517815][ T6658] RIP: 0033:0x7ff62c39e159
[  224.522288][ T6658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.541944][ T6658] RSP: 002b:00007ff62d215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  224.550425][ T6658] RAX: ffffffffffffffda RBX: 00007ff62c626090 RCX: 00007ff62c39e159
[  224.558449][ T6658] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 000000000000000a
[  224.566468][ T6658] RBP: 00007ff62c43503b R08: 0000000000000000 R09: 0000000000000000
[  224.574492][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.582505][ T6658] R13: 00007ff62c626128 R14: 00007ff62c626090 R15: 00007ffedec3ad88
[  224.590579][ T6658]  </TASK>
[  224.595132][ T6658] Mem-Info:
[  224.599381][ T6658] active_anon:13606 inactive_anon:0 isolated_anon:0
[  224.599381][ T6658]  active_file:18492 inactive_file:40035 isolated_file:0
[  224.599381][ T6658]  unevictable:768 dirty:336 writeback:0
[  224.599381][ T6658]  slab_reclaimable:10657 slab_unreclaimable:93446
[  224.599381][ T6658]  mapped:25399 shmem:8751 pagetables:572
[  224.599381][ T6658]  sec_pagetables:0 bounce:0
[  224.599381][ T6658]  kernel_misc_reclaimable:0
[  224.599381][ T6658]  free:1331498 free_pcp:14762 free_cma:0
[  224.645397][ T6658] Node 0 active_anon:54424kB inactive_anon:0kB active_file:73968kB inactive_file:159940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101596kB dirty:1344kB writeback:0kB shmem:33468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11428kB pagetables:2288kB sec_pagetables:0kB all_unreclaimable? no
[  224.679243][ T6658] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  224.710364][ T6658] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  224.737759][ T6658] lowmem_reserve[]: 0 2521 2522 2522 2522
[  224.743834][ T6658] Node 0 DMA32 free:1416352kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:54388kB inactive_anon:0kB active_file:73968kB inactive_file:159112kB unevictable:1536kB writepending:1344kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:40184kB local_pcp:21404kB free_cma:0kB
[  224.775429][ T6658] lowmem_reserve[]: 0 0 0 0 0
[  224.780389][ T6658] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  224.807519][ T6658] lowmem_reserve[]: 0 0 0 0 0
[  224.812431][ T6658] Node 1 Normal free:3894280kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18856kB local_pcp:7956kB free_cma:0kB
[  224.842047][ T6658] lowmem_reserve[]: 0 0 0 0 0
[  224.847054][ T6658] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  224.861116][ T6658] Node 0 DMA32: 1529*4kB (UME) 1144*8kB (UME) 891*16kB (UME) 474*32kB (UME) 317*64kB (UME) 300*128kB (UME) 99*256kB (UME) 37*512kB (UME) 17*1024kB (ME) 9*2048kB (UME) 301*4096kB (UM) = 1416404kB
[  224.881331][ T6658] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  224.893308][ T6658] Node 1 Normal: 232*4kB (UME) 49*8kB (UME) 42*16kB (UME) 60*32kB (UME) 25*64kB (UME) 7*128kB (UME) 3*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3894280kB
[  224.911744][ T6658] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  224.921412][ T6658] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  224.930835][ T6658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  224.940518][ T6658] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  224.949954][ T6658] 67274 total pagecache pages
[  224.955508][ T6658] 0 pages in swap cache
[  224.959723][ T6658] Free swap  = 124716kB
[  224.963949][ T6658] Total swap = 124996kB
[  224.968345][ T6658] 2097051 pages RAM
[  224.972236][ T6658] 0 pages HighMem/MovableOnly
[  224.977064][ T6658] 416965 pages reserved
[  224.981310][ T6658] 0 pages cma reserved
[  226.467917][ T6671] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[  228.095657][ T5858] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  228.362235][ T5858] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  228.389999][ T5858] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  228.410308][ T5858] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  230.038369][ T5858] usb 5-1: string descriptor 0 read error: -71
[  230.045370][ T5858] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  230.054493][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  230.125383][ T5858] usb 5-1: can't set config #1, error -71
[  230.157257][ T5858] usb 5-1: USB disconnect, device number 2
[  230.303948][ T6687] loop4: detected capacity change from 0 to 128
[  230.366839][ T6687] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  234.596877][ T6729] fuse: Bad value for 'fd'
[  235.385976][ T5858] IPVS: starting estimator thread 0...
[  235.417788][ T6731] syz.0.127: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  235.434979][ T6731] CPU: 1 PID: 6731 Comm: syz.0.127 Not tainted syzkaller #0
[  235.442473][ T6731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  235.452575][ T6731] Call Trace:
[  235.455904][ T6731]  <TASK>
[  235.458894][ T6731]  dump_stack_lvl+0x18c/0x250
[  235.463629][ T6731]  ? show_regs_print_info+0x20/0x20
[  235.468884][ T6731]  ? load_image+0x420/0x420
[  235.473446][ T6731]  ? __rcu_read_unlock+0x7c/0xd0
[  235.478435][ T6731]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  235.484906][ T6731]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  235.491495][ T6731]  warn_alloc+0x246/0x340
[  235.495948][ T6731]  ? zone_watermark_ok_safe+0x230/0x230
[  235.501556][ T6731]  __vmalloc_node_range+0x129/0x1320
[  235.506924][ T6731]  ? __mutex_trylock_common+0x160/0x270
[  235.512499][ T6731]  ? trace_raw_output_contention_end+0xd0/0xd0
[  235.518664][ T6731]  ? rcu_is_watching+0x15/0xb0
[  235.523437][ T6731]  ? trace_contention_end+0x39/0xe0
[  235.528672][ T6731]  ? __mutex_lock+0x30d/0xc80
[  235.533357][ T6731]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  235.539066][ T6731]  ? free_vm_area+0x50/0x50
[  235.543627][ T6731]  ? dvb_demux_do_ioctl+0x317/0x530
[  235.548851][ T6731]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  235.554323][ T6731]  ? mutex_lock_nested+0x20/0x20
[  235.559268][ T6731]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  235.565086][ T6731]  vmalloc+0x79/0x90
[  235.568994][ T6731]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  235.574824][ T6731]  dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  235.580480][ T6731]  dvb_demux_do_ioctl+0x454/0x530
[  235.585528][ T6731]  dvb_usercopy+0x195/0x2b0
[  235.590091][ T6731]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[  235.595651][ T6731]  ? dvb_generic_ioctl+0xb0/0xb0
[  235.600635][ T6731]  ? dvb_demux_poll+0x210/0x210
[  235.605503][ T6731]  dvb_demux_ioctl+0x29/0x30
[  235.610106][ T6731]  __se_sys_ioctl+0xfd/0x170
[  235.614732][ T6731]  do_syscall_64+0x55/0xb0
[  235.619177][ T6731]  ? clear_bhb_loop+0x40/0x90
[  235.623865][ T6731]  ? clear_bhb_loop+0x40/0x90
[  235.628562][ T6731]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  235.634469][ T6731] RIP: 0033:0x7f9ab6d9e159
[  235.638888][ T6731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  235.658591][ T6731] RSP: 002b:00007f9ab7c17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  235.667016][ T6731] RAX: ffffffffffffffda RBX: 00007f9ab7026090 RCX: 00007f9ab6d9e159
[  235.675087][ T6731] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 000000000000000a
[  235.683074][ T6731] RBP: 00007f9ab6e3503b R08: 0000000000000000 R09: 0000000000000000
[  235.691056][ T6731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  235.699032][ T6731] R13: 00007f9ab7026128 R14: 00007f9ab7026090 R15: 00007ffed64e1648
[  235.707040][ T6731]  </TASK>
[  235.710285][    C1] vkms_vblank_simulate: vblank timer overrun
[  235.720789][ T6731] Mem-Info:
[  235.724193][ T6731] active_anon:11378 inactive_anon:0 isolated_anon:0
[  235.724193][ T6731]  active_file:18492 inactive_file:40039 isolated_file:0
[  235.724193][ T6731]  unevictable:768 dirty:108 writeback:0
[  235.724193][ T6731]  slab_reclaimable:10835 slab_unreclaimable:92996
[  235.724193][ T6731]  mapped:28303 shmem:6503 pagetables:612
[  235.724193][ T6731]  sec_pagetables:0 bounce:0
[  235.724193][ T6731]  kernel_misc_reclaimable:0
[  235.724193][ T6731]  free:1338561 free_pcp:10162 free_cma:0
[  235.769654][    C1] vkms_vblank_simulate: vblank timer overrun
[  235.776218][ T6731] Node 0 active_anon:45512kB inactive_anon:0kB active_file:73968kB inactive_file:159956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113212kB dirty:432kB writeback:0kB shmem:24476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11460kB pagetables:2448kB sec_pagetables:0kB all_unreclaimable? no
[  235.808710][    C1] vkms_vblank_simulate: vblank timer overrun
[  235.815718][ T6731] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  235.846462][ T6731] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  235.873633][    C1] vkms_vblank_simulate: vblank timer overrun
[  235.880111][ T6731] lowmem_reserve[]: 0 2521 2522 2522 2522
[  235.886421][ T6731] Node 0 DMA32 free:1444604kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:45476kB inactive_anon:0kB active_file:73968kB inactive_file:159128kB unevictable:1536kB writepending:432kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:21616kB local_pcp:1560kB free_cma:0kB
[  235.917086][    C1] vkms_vblank_simulate: vblank timer overrun
[  235.923865][ T6731] lowmem_reserve[]: 0 0 0 0 0
[  235.929013][ T6731] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  235.955847][    C1] vkms_vblank_simulate: vblank timer overrun
[  235.962289][ T6731] lowmem_reserve[]: 0 0 0 0 0
[  235.967389][ T6731] Node 1 Normal free:3894280kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19024kB local_pcp:10996kB free_cma:0kB
[  235.997392][ T6731] lowmem_reserve[]: 0 0 0 0 0
[  236.002424][ T6731] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  236.016320][ T6731] Node 0 DMA32: 1921*4kB (UME) 1277*8kB (UME) 863*16kB (UME) 495*32kB (UME) 223*64kB (UME) 305*128kB (UME) 107*256kB (UME) 63*512kB (UME) 10*1024kB (ME) 16*2048kB (UME) 303*4096kB (UM) = 1444604kB
[  236.044649][ T6731] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  236.057070][ T6731] Node 1 Normal: 232*4kB (UME) 49*8kB (UME) 42*16kB (UME) 60*32kB (UME) 25*64kB (UME) 7*128kB (UME) 3*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3894280kB
[  236.075997][ T6731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  236.085860][ T6731] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  236.095353][ T6731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  236.105144][ T6731] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  236.114610][ T6731] 65030 total pagecache pages
[  236.119787][ T6731] 0 pages in swap cache
[  236.124167][ T6731] Free swap  = 124716kB
[  236.128510][ T6731] Total swap = 124996kB
[  236.132822][ T6731] 2097051 pages RAM
[  236.139751][ T6731] 0 pages HighMem/MovableOnly
[  236.144938][ T6731] 416965 pages reserved
[  236.155896][ T6731] 0 pages cma reserved
[  236.164917][ T6730] IPVS: using max 21 ests per chain, 50400 per kthread
[  238.298896][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.129'.
[  244.117180][ T5086] Bluetooth: hci4: command 0x0406 tx timeout
[  247.300925][ T6766] gadgetfs: bound to dummy_udc driver
[  248.288031][ T6786] loop3: detected capacity change from 0 to 128
[  248.357751][ T6786] EXT4-fs (loop3): Test dummy encryption mode enabled
[  248.439855][ T6786] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  249.015276][ T6786] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  249.137454][ T5086] Bluetooth: hci0: command 0x0406 tx timeout
[  249.497729][ T6801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.140'.
[  250.386138][ T6801] syz.4.140 (6801) used greatest stack depth: 16840 bytes left
[  251.485390][ T6786] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  251.778909][ T6818] capability: warning: `syz.0.138' uses 32-bit capabilities (legacy support in use)
[  252.427554][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  253.379959][ T6827] ubi0: attaching mtd0
[  253.404280][ T6827] ubi0: scanning is finished
[  253.409376][ T6827] ubi0: empty MTD device detected
[  255.074934][ T6827] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  256.134355][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  256.144514][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  256.478608][ T6846] capability: warning: `syz.4.147' uses deprecated v2 capabilities in a way that may be insecure
[  256.688052][ T6856] tipc: Started in network mode
[  256.693413][ T6856] tipc: Node identity 4, cluster identity 4711
[  256.700310][ T6856] tipc: Node number set to 4
[  257.876589][ T6864] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  257.909101][ T6864] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  257.920239][ T6864] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  260.128617][ T6884] netlink: 14 bytes leftover after parsing attributes in process `syz.4.152'.
[  260.806872][ T6885] trusted_key: encrypted_key: insufficient parameters specified
[  263.674761][ T5086] Bluetooth: hci0: command 0x0406 tx timeout
[  267.760462][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  267.771869][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  267.780296][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  267.789065][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  267.796946][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  267.804257][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  268.557956][ T6913] chnl_net:caif_netlink_parms(): no params data found
[  270.164863][ T5784] Bluetooth: hci1: command tx timeout
[  271.239562][ T6942] tty tty21: ldisc open failed (-12), clearing slot 20
[  271.377085][ T6913] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.384536][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.455441][ T6913] bridge_slave_0: entered allmulticast mode
[  271.496523][ T6913] bridge_slave_0: entered promiscuous mode
[  272.098579][ T6949] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5954] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6949]
[  272.174797][ T5784] Bluetooth: hci1: command tx timeout
[  272.913160][ T6913] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.134359][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.142267][ T6913] bridge_slave_1: entered allmulticast mode
[  273.223849][ T6953] netlink: 'syz.4.163': attribute type 1 has an invalid length.
[  273.825094][ T6913] bridge_slave_1: entered promiscuous mode
[  274.048188][ T6913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.069715][ T6913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.254911][ T5784] Bluetooth: hci1: command tx timeout
[  274.276134][ T6955] loop3: detected capacity change from 0 to 128
[  274.327391][ T6424] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.350025][ T6955] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  274.364983][ T6955] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  274.896244][ T6913] team0: Port device team_slave_0 added
[  275.159458][ T6913] team0: Port device team_slave_1 added
[  275.296996][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  275.889278][ T6424] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.130275][ T6424] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.148324][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.157716][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.195560][ T6913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.287306][ T6970] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  276.304173][ T6970] rtrs_client L2075: <s+>: Failed to resolve address, err: -19
[  276.312341][ T6970] rtrs_client L2618: <s+>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  277.166675][ T6424] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.179657][ T5784] Bluetooth: hci1: command tx timeout
[  277.225626][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  277.232659][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.281161][ T6913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.637074][ T6913] hsr_slave_0: entered promiscuous mode
[  278.736103][ T6913] hsr_slave_1: entered promiscuous mode
[  281.876628][ T6913] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  282.209410][ T6913] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  282.387932][ T6913] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  282.570357][ T6913] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  286.872854][ T6913] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.977965][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'.
[  289.303151][ T6913] 8021q: adding VLAN 0 to HW filter on device team0
[  289.582129][ T6424] hsr_slave_0: left promiscuous mode
[  289.978419][ T6424] hsr_slave_1: left promiscuous mode
[  290.029402][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.043290][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.063763][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.874983][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.941137][ T6424] bridge_slave_1: left allmulticast mode
[  290.948104][ T6424] bridge_slave_1: left promiscuous mode
[  290.953952][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.480930][ T6424] bridge_slave_0: left allmulticast mode
[  292.493212][ T6424] bridge_slave_0: left promiscuous mode
[  292.512348][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.765321][ T6424] veth1_macvtap: left promiscuous mode
[  292.771046][ T6424] veth0_macvtap: left promiscuous mode
[  292.792560][ T6424] veth1_vlan: left promiscuous mode
[  292.798187][ T6424] veth0_vlan: left promiscuous mode
[  298.974084][ T7149] overlayfs: statfs failed on './file0'
[  300.281877][ T6424] team0 (unregistering): Port device team_slave_1 removed
[  300.372379][ T6424] team0 (unregistering): Port device team_slave_0 removed
[  300.505392][ T6424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.597867][ T6424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  301.787848][ T6424] bond0 (unregistering): Released all slaves
[  301.956821][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.964034][ T6412] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.165938][ T6454] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.173242][ T6454] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.203494][ T6913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  302.225438][ T6913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  303.422248][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'.
[  304.662784][ T7178] netlink: 35 bytes leftover after parsing attributes in process `syz.0.195'.
[  306.967340][ T6913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.031129][ T7193] loop3: detected capacity change from 0 to 128
[  307.082105][ T7193] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  307.160913][ T6424] IPVS: stop unused estimator thread 0...
[  308.476792][ T7216] tipc: Started in network mode
[  308.481968][ T7216] tipc: Node identity 4, cluster identity 4711
[  308.488347][ T7216] tipc: Node number set to 4
[  311.094470][ T7227] fuse: Bad value for 'fd'
[  312.248935][ T6913] veth0_vlan: entered promiscuous mode
[  312.369009][ T6913] veth1_vlan: entered promiscuous mode
[  312.971912][ T6913] veth0_macvtap: entered promiscuous mode
[  313.003838][ T6913] veth1_macvtap: entered promiscuous mode
[  313.112139][ T6913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.138040][ T6913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.166797][ T6913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.196703][ T6913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.231772][ T6913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.271644][ T6913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.336413][ T6913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.385395][ T6913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.428598][ T6913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.454716][ T6913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.494757][ T6913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.527352][ T6913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.064893][ T6913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.127127][ T6913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.259972][ T6913] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.296935][ T6913] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.334736][ T6913] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.343608][ T6913] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.588505][ T6454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.626034][ T6454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.705848][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.713788][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.671440][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  318.694743][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  320.770202][ T7286] ip_tables: iptables: counters copy to user failed while replacing table
[  320.865980][ T7286] ip_tables: iptables: counters copy to user failed while replacing table
[  321.077076][ T7291] loop3: detected capacity change from 0 to 128
[  321.125226][ T7291] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  321.253596][ T7294] sctp: [Deprecated]: syz.4.212 (pid 7294) Use of struct sctp_assoc_value in delayed_ack socket option.
[  321.253596][ T7294] Use struct sctp_sack_info instead
[  323.283707][ T7307] loop3: detected capacity change from 0 to 128
[  323.969751][ T7307] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  326.290368][ T7320] ip_tables: iptables: counters copy to user failed while replacing table
[  326.301193][ T7320] ip_tables: iptables: counters copy to user failed while replacing table
[  326.824620][ T7329] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5775] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7329]
[  329.621071][ T7342] loop6: detected capacity change from 0 to 128
[  329.722627][ T7342] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  329.805101][ T7342] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  331.149258][ T7361] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  331.272383][ T6913] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  332.630858][ T7372] ip_tables: iptables: counters copy to user failed while replacing table
[  332.642481][ T7372] ip_tables: iptables: counters copy to user failed while replacing table
[  332.804942][   T28] audit: type=1326 audit(1789414814.217:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.4.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a8659e159 code=0x0
[  335.936454][ T7394] ip_tables: iptables: counters copy to user failed while replacing table
[  336.810228][ T7394] ip_tables: iptables: counters copy to user failed while replacing table
[  339.315974][ T7420] ip_tables: iptables: counters copy to user failed while replacing table
[  339.333054][ T7420] ip_tables: iptables: counters copy to user failed while replacing table
[  343.673298][ T7460] ip_tables: iptables: counters copy to user failed while replacing table
[  343.855126][ T7462] ip_tables: iptables: counters copy to user failed while replacing table
[  344.865386][ T7476] ubi0: attaching mtd0
[  344.882432][ T7476] ubi0: scanning is finished
[  345.235415][ T7476] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  345.243177][ T7476] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  345.250639][ T7476] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  345.257811][ T7476] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  345.265563][ T7476] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  345.272455][ T7476] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  345.281526][ T7476] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1941606490
[  345.291862][ T7476] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  345.304881][ T7477] ubi0: background thread "ubi_bgt0d" started, PID 7477
[  351.156530][ T7522] ip_tables: iptables: counters copy to user failed while replacing table
[  351.660109][ T7523] ip_tables: iptables: counters copy to user failed while replacing table
[  360.270141][ T7593] trusted_key: encrypted_key: insufficient parameters specified
[  361.721008][ T7603] bridge0: port 3(syz_tun) entered blocking state
[  361.727849][ T7603] bridge0: port 3(syz_tun) entered disabled state
[  361.734519][ T7603] syz_tun: entered allmulticast mode
[  361.741582][ T7603] syz_tun: entered promiscuous mode
[  361.747714][ T7603] bridge0: port 3(syz_tun) entered blocking state
[  361.754318][ T7603] bridge0: port 3(syz_tun) entered listening state
[  367.375240][   T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  368.505593][   T56] usb 7-1: Using ep0 maxpacket: 32
[  368.518005][   T56] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  368.544849][   T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.579284][   T56] usb 7-1: config 0 descriptor??
[  368.644407][   T56] as10x_usb: device has been detected
[  368.833880][   T56] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  369.424279][   T56] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  369.702209][   T56] as10x_usb: error during firmware upload part1
[  369.715582][   T56] Registered device nBox DVB-T Dongle
[  369.737646][   T56] usb 7-1: USB disconnect, device number 2
[  369.863350][   T56] Unregistered device nBox DVB-T Dongle
[  370.183980][   T56] as10x_usb: device has been disconnected
[  371.407340][ T7657] tipc: Started in network mode
[  371.412356][ T7657] tipc: Node identity 4, cluster identity 4711
[  371.427621][ T7657] tipc: Node number set to 4
[  375.108358][ T7669] kAFS: No cell specified
[  376.975876][    C0] bridge0: port 3(syz_tun) entered learning state
[  378.148247][   T56] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  378.374869][   T56] usb 7-1: Using ep0 maxpacket: 32
[  378.415218][   T56] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  378.473866][   T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.595333][   T56] usb 7-1: config 0 descriptor??
[  379.225788][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  379.232187][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  379.246019][   T56] as10x_usb: device has been detected
[  379.288430][   T56] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  379.358275][   T56] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  379.417268][   T56] as10x_usb: error during firmware upload part1
[  379.443453][   T56] Registered device nBox DVB-T Dongle
[  379.523777][ T5816] usb 7-1: USB disconnect, device number 3
[  379.624727][ T5816] Unregistered device nBox DVB-T Dongle
[  379.628428][ T5816] as10x_usb: device has been disconnected
[  381.096843][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.289'.
[  381.106409][ T7730] netlink: 87 bytes leftover after parsing attributes in process `syz.0.289'.
[  382.769361][ T7741] overlayfs: failed to clone upperpath
[  383.015696][ T7741] Invalid ELF header magic: != ELF
[  385.051611][ T7759] loop6: detected capacity change from 0 to 512
[  385.130114][ T7759] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #2: block 3: comm syz.6.302: lblock 0 mapped to illegal pblock 3 (length 1)
[  385.171553][ T7759] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.302: error -117 reading directory block
[  385.247088][ T7759] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  385.331842][ T7759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.551255][ T7747] loop6: detected capacity change from 512 to 0
[  385.854793][ T7761] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 142: padding at end of block bitmap is not set
[  386.185191][ T7761] ext4lazyinit: attempt to access beyond end of device
[  386.185191][ T7761] loop6: rw=133121, sector=2, nr_sectors = 2 limit=0
[  386.314954][ T7761] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  386.323315][ T7761] EXT4-fs (loop6): I/O error while writing superblock
[  386.437035][ T6913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.485510][ T6913] syz-executor: attempt to access beyond end of device
[  386.485510][ T6913] loop6: rw=133121, sector=2, nr_sectors = 2 limit=0
[  386.504878][ T6913] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  386.513242][ T6913] EXT4-fs (loop6): I/O error while writing superblock
[  388.287632][ T7776] loop6: detected capacity change from 0 to 4096
[  389.375685][ T7776] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  390.631271][ T7776] ntfs3: loop6: Failed to load $Extend (-22).
[  390.684806][ T7776] ntfs3: loop6: Failed to initialize $Extend.
[  391.287338][ T5086] Bluetooth: hci1: command 0x0406 tx timeout
[  392.090127][ T7808] loop3: detected capacity change from 0 to 164
[  392.336153][    C0] bridge0: port 3(syz_tun) entered forwarding state
[  392.342951][    C0] bridge0: topology change detected, propagating
[  394.356280][ T7830] tipc: Started in network mode
[  394.361334][ T7830] tipc: Node identity 4, cluster identity 4711
[  394.367696][ T7830] tipc: Node number set to 4
[  395.690314][ T7833] loop3: detected capacity change from 0 to 512
[  397.469814][ T7833] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3.
[  400.227606][ T7861] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  405.262069][ T7890] loop6: detected capacity change from 0 to 1024
[  405.282080][ T7890] EXT4-fs: Ignoring removed nomblk_io_submit option
[  405.363764][ T7890] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2002c018, mo2=0102]
[  405.417016][ T7890] System zones: 0-1, 3-12
[  405.456739][ T7890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  405.881473][ T7890] EXT4-fs error (device loop6): ext4_discard_preallocations:5632: comm syz.6.328: Error -117 loading buddy information for 4294961127
[  406.991007][ T7890] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz.6.328: Invalid inode table block 5 in block_group 0
[  407.033981][ T7890] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  407.044867][ T7890] EXT4-fs error (device loop6): ext4_ext_truncate:4535: inode #18: comm syz.6.328: mark_inode_dirty error
[  407.073820][ T7890] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz.6.328: Invalid inode table block 5 in block_group 0
[  407.110766][ T7890] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  407.121755][ T7890] EXT4-fs error (device loop6): ext4_truncate:4314: inode #18: comm syz.6.328: mark_inode_dirty error
[  407.139202][ T7890] EXT4-fs error (device loop6) in ext4_setattr:5695: Corrupt filesystem
[  407.165739][ T7912] netlink: 'syz.3.325': attribute type 5 has an invalid length.
[  407.247610][ T6913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.479019][ T7919] ip_tables: iptables: counters copy to user failed while replacing table
[  408.366791][ T7919] ip_tables: iptables: counters copy to user failed while replacing table
[  413.094875][   T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  415.132124][ T7960] null_blk: disk nullb1 created
[  415.287499][   T23] usb 4-1: unable to read config index 0 descriptor/start: -61
[  416.495326][   T23] usb 4-1: can't read configurations, error -61
[  416.705317][   T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  417.676261][ T7980] gadgetfs: bound to dummy_udc driver
[  418.715067][   T23] usb 4-1: device descriptor read/all, error -71
[  418.747422][   T23] usb usb4-port1: attempt power cycle
[  421.077419][ T8000] netlink: 124 bytes leftover after parsing attributes in process `syz.0.339'.
[  431.423981][ T8071] kAFS: No cell specified
[  434.302653][ T8090] loop6: detected capacity change from 0 to 256
[  434.944396][ T8090] exFAT-fs (loop6): failed to read boot sector
[  434.950861][ T8090] exFAT-fs (loop6): failed to recognize exfat type
[  436.684579][ T8100] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  436.711006][ T8100] CIFS mount error: No usable UNC path provided in device string!
[  436.711006][ T8100] 
[  436.722117][ T8100] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  438.462364][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.6.368'.
[  438.474480][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.6.368'.
[  441.204715][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  441.244735][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  441.705477][ T8135] xt_connbytes: Forcing CT accounting to be enabled
[  441.712317][ T8135] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  441.724511][ T8135] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  448.204919][  T788] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  448.428925][  T788] usb 7-1: Using ep0 maxpacket: 32
[  448.569174][  T788] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  448.634867][  T788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.703491][  T788] usb 7-1: config 0 descriptor??
[  448.775888][  T788] as10x_usb: device has been detected
[  448.805720][  T788] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  448.885477][ T8176] fuse: Unknown parameter '000000000000000000000030x0000000000000003'
[  448.904583][  T788] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  448.937993][  T788] as10x_usb: error during firmware upload part1
[  448.995059][  T788] Registered device nBox DVB-T Dongle
[  449.168211][   T56] usb 7-1: USB disconnect, device number 4
[  450.664556][   T56] Unregistered device nBox DVB-T Dongle
[  450.688907][   T56] as10x_usb: device has been disconnected
[  457.524876][ T8224] netlink: 84 bytes leftover after parsing attributes in process `syz.0.381'.
[  466.481013][ T8294] ip_tables: iptables: counters copy to user failed while replacing table
[  466.544757][ T8295] ip_tables: iptables: counters copy to user failed while replacing table
[  469.354783][ T5886] IPVS: starting estimator thread 0...
[  469.544876][ T8317] IPVS: using max 16 ests per chain, 38400 per kthread
[  483.535061][ T5886] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  483.814771][ T5886] usb 4-1: Using ep0 maxpacket: 32
[  484.614815][ T5886] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  484.654332][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.541032][ T5886] usb 4-1: config 0 descriptor??
[  485.615343][ T5886] as10x_usb: device has been detected
[  485.676287][ T5886] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  485.795395][ T5886] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  485.851072][ T5886] as10x_usb: error during firmware upload part1
[  485.905561][ T5886] Registered device nBox DVB-T Dongle
[  485.960017][   T27] IPVS: starting estimator thread 0...
[  486.105763][ T8428] IPVS: using max 26 ests per chain, 62400 per kthread
[  486.218172][   T56] usb 4-1: USB disconnect, device number 5
[  487.896969][   T56] Unregistered device nBox DVB-T Dongle
[  487.927911][   T56] as10x_usb: device has been disconnected
[  493.992505][ T8472] loop6: detected capacity change from 0 to 512
[  494.055416][ T8472] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  494.110576][ T8472] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  494.238917][ T8472] EXT4-fs (loop6): 1 truncate cleaned up
[  494.266686][ T8472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  495.580317][ T6913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.785208][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  501.791607][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  501.857147][    T9] IPVS: starting estimator thread 0...
[  501.994832][ T8526] IPVS: using max 18 ests per chain, 43200 per kthread
[  502.709922][ T8544] kAFS: No cell specified
[  504.372242][ T8558] ubi: mtd0 is already attached to ubi0
[  520.215803][ T8660] ip_tables: iptables: counters copy to user failed while replacing table
[  520.272619][ T8660] ip_tables: iptables: counters copy to user failed while replacing table
[  527.264256][ T8712] Bluetooth: ISO socket layer initialized
[  534.401903][ T8776] sctp: [Deprecated]: syz.6.483 (pid 8776) Use of struct sctp_assoc_value in delayed_ack socket option.
[  534.401903][ T8776] Use struct sctp_sack_info instead
[  549.906724][ T8910] loop3: detected capacity change from 0 to 512
[  550.106236][ T8910] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  550.214306][ T8910] EXT4-fs (loop3): 1 truncate cleaned up
[  550.310398][ T8910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  553.449385][ T8913] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  553.584622][ T8913] EXT4-fs (loop3): Remounting filesystem read-only
[  554.179978][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.875545][ T8937] sctp: [Deprecated]: syz.3.511 (pid 8937) Use of struct sctp_assoc_value in delayed_ack socket option.
[  554.875545][ T8937] Use struct sctp_sack_info instead
[  563.225958][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  563.232635][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  572.372704][ T5784] Bluetooth: hci4: unexpected event for opcode 0x2003
[  581.495480][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'.
[  583.860681][ T9076] loop3: detected capacity change from 0 to 4096
[  583.916265][ T9076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  584.144456][ T9075] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present
[  584.155261][ T9075] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  584.164851][ T9075] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.545: Failed to acquire dquot type 1
[  584.237801][ T9075] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  586.964269][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.992066][ T9097] loop6: detected capacity change from 0 to 256
[  587.010598][ T9097] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  587.039392][ T9097] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  587.514319][ T9101] No such timeout policy "syz1"
[  587.604228][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.717108][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.806097][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.202005][   T49] tipc: Left network mode
[  590.562619][ T9123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  590.642899][ T9123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  590.653352][ T9123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  590.671216][ T9123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  590.686525][ T9123] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  590.696574][ T9123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  593.040123][ T9123] Bluetooth: hci0: command tx timeout
[  595.054683][ T9123] Bluetooth: hci0: command tx timeout
[  595.182549][ T9119] chnl_net:caif_netlink_parms(): no params data found
[  596.792001][ T9119] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.814809][ T9119] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.832437][ T9119] bridge_slave_0: entered allmulticast mode
[  596.867976][ T9119] bridge_slave_0: entered promiscuous mode
[  596.906406][ T9119] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.913622][ T9119] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.982399][ T9119] bridge_slave_1: entered allmulticast mode
[  597.006641][ T9119] bridge_slave_1: entered promiscuous mode
[  597.134979][ T9123] Bluetooth: hci0: command tx timeout
[  597.396551][ T9119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  597.427269][ T9119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  597.491476][ T9174] overlayfs: failed to clone upperpath
[  598.317737][ T9119] team0: Port device team_slave_0 added
[  598.472159][ T9119] team0: Port device team_slave_1 added
[  598.580732][ T9119] batman_adv: batadv0: Adding interface: batadv_slave_0
[  598.732387][ T9119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  598.812089][ T9119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  599.508778][ T9123] Bluetooth: hci0: command tx timeout
[  600.103731][   T49] hsr_slave_0: left promiscuous mode
[  600.121971][   T49] hsr_slave_1: left promiscuous mode
[  600.161792][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  600.194281][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  600.203243][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  600.213566][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  600.234781][   T49] bridge_slave_1: left allmulticast mode
[  600.240525][   T49] bridge_slave_1: left promiscuous mode
[  600.261568][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  600.280943][   T49] bridge_slave_0: left allmulticast mode
[  600.292936][   T49] bridge_slave_0: left promiscuous mode
[  600.300758][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.410389][   T49] veth1_macvtap: left promiscuous mode
[  600.423860][   T49] veth0_macvtap: left promiscuous mode
[  600.430330][   T49] veth1_vlan: left promiscuous mode
[  600.436990][   T49] veth0_vlan: left promiscuous mode
[  603.336377][   T49] team_slave_1 (unregistering): left allmulticast mode
[  603.349864][   T49] team0 (unregistering): Port device team_slave_1 removed
[  603.430734][   T49] team_slave_0 (unregistering): left allmulticast mode
[  603.439319][   T49] team0 (unregistering): Port device team_slave_0 removed
[  603.500986][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  603.511417][   T49] bond_slave_1 (unregistering): left allmulticast mode
[  603.572801][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  603.584937][   T49] bond_slave_0 (unregistering): left allmulticast mode
[  604.108660][   T49] bond0 (unregistering): Released all slaves
[  604.273465][ T9119] batman_adv: batadv0: Adding interface: batadv_slave_1
[  604.292644][ T9119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  604.326378][ T9119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  605.604426][ T9119] hsr_slave_0: entered promiscuous mode
[  606.250946][ T9119] hsr_slave_1: entered promiscuous mode
[  606.360942][ T9119] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  606.412802][ T9119] Cannot create hsr debugfs directory
[  609.132033][   T49] IPVS: stop unused estimator thread 0...
[  609.463187][ T9265] netlink: 52 bytes leftover after parsing attributes in process `syz.4.585'.
[  609.553946][ T9119] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  609.603455][ T9119] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  609.685216][ T9119] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  609.855071][ T9119] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  610.177705][ T9119] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.223005][ T9119] 8021q: adding VLAN 0 to HW filter on device team0
[  610.280247][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.287540][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.354160][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.361437][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.681758][ T9119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  614.927526][ T9119] 8021q: adding VLAN 0 to HW filter on device batadv0
[  615.682348][ T9320] Timeout policy `syz1' can only be used by L3 protocol number 17157
[  616.310472][ T9119] veth0_vlan: entered promiscuous mode
[  616.362306][ T9119] veth1_vlan: entered promiscuous mode
[  616.481838][ T9119] veth0_macvtap: entered promiscuous mode
[  616.539366][ T9119] veth1_macvtap: entered promiscuous mode
[  616.597313][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  616.649898][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.669509][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  616.719078][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.774632][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  616.811892][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.856426][ T9119] batman_adv: batadv0: Interface activated: batadv_slave_0
[  617.177075][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  617.325786][ T9341] loop6: detected capacity change from 0 to 512
[  617.926217][ T9341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  617.956680][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  618.008621][ T9341] System zones: 1-12
[  618.013092][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  618.038808][ T9341] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.592: missing EA_INODE flag
[  618.077141][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  618.091247][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  618.120554][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  618.133931][ T9119] batman_adv: batadv0: Interface activated: batadv_slave_1
[  618.149985][ T9341] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.592: error while reading EA inode 12 err=-117
[  618.183199][ T9341] EXT4-fs (loop6): 1 orphan inode deleted
[  618.196971][ T9341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.002832][ T9119] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  619.042694][ T9119] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  619.066610][ T9119] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  619.086428][ T9119] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  620.366087][ T6913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.105114][ T6420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.113035][ T6420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.324192][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.535568][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  624.771143][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  624.781685][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  630.982616][ T9408] ip_tables: iptables: counters copy to user failed while replacing table
[  631.100930][ T9408] ip_tables: iptables: counters copy to user failed while replacing table
[  631.476833][ T9418] ip_tables: iptables: counters copy to user failed while replacing table
[  631.493997][ T9418] ip_tables: iptables: counters copy to user failed while replacing table
[  633.730490][ T9446] loop6: detected capacity change from 0 to 8
[  635.196876][ T9446] SQUASHFS error: Failed to read block 0x6de: -5
[  635.203777][ T9446] SQUASHFS error: Unable to read metadata cache entry [6dc]
[  635.211334][ T9446] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  639.579700][   T28] audit: type=1800 audit(1789415120.977:3): pid=9470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.619" name=08 dev="sda1" ino=2051 res=0 errno=0
[  640.706226][ T9474] ip_tables: iptables: counters copy to user failed while replacing table
[  640.815049][ T9474] ip_tables: iptables: counters copy to user failed while replacing table
[  641.259698][ T9481] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  643.659022][ T9496] loop7: detected capacity change from 0 to 8
[  645.976901][ T9494] SQUASHFS error: Failed to read block 0x6de: -5
[  645.983360][ T9494] SQUASHFS error: Unable to read metadata cache entry [6dc]
[  645.990898][ T9494] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  651.244473][ T9525] ip_tables: iptables: counters copy to user failed while replacing table
[  651.266124][ T9525] ip_tables: iptables: counters copy to user failed while replacing table
[  651.699551][ T9537] netlink: 52 bytes leftover after parsing attributes in process `syz.6.635'.
[  652.453122][ T9535] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop6": -EINTR
[  653.622356][ T9552] binder: 9545:9552 ioctl c0306201 0 returned -14
[  654.566572][ T9550] tty tty3: ldisc open failed (-12), clearing slot 2
[  658.505814][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  658.518283][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  658.536498][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  658.545251][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  658.565053][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  658.579378][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  660.438180][ T9429] bridge0: port 3(syz_tun) entered disabled state
[  660.618760][ T9429] syz_tun (unregistering): left allmulticast mode
[  660.655989][ T9429] syz_tun (unregistering): left promiscuous mode
[  660.662484][ T9429] bridge0: port 3(syz_tun) entered disabled state
[  660.808777][ T9610] loop7: detected capacity change from 0 to 8
[  660.819749][ T9123] Bluetooth: hci2: command tx timeout
[  660.989850][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.187855][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.934860][ T9123] Bluetooth: hci2: command tx timeout
[  664.862124][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.977935][ T9123] Bluetooth: hci2: command tx timeout
[  665.088268][ T9584] chnl_net:caif_netlink_parms(): no params data found
[  666.757267][ T9642] ip_tables: iptables: counters copy to user failed while replacing table
[  668.088377][ T9123] Bluetooth: hci2: command tx timeout
[  668.106427][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.214939][ T9650] loop6: detected capacity change from 0 to 8
[  668.907275][ T9584] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.924688][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.932014][ T9584] bridge_slave_0: entered allmulticast mode
[  668.967033][ T9584] bridge_slave_0: entered promiscuous mode
[  669.003643][ T9584] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.027886][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.044839][ T9584] bridge_slave_1: entered allmulticast mode
[  669.052394][ T9584] bridge_slave_1: entered promiscuous mode
[  669.330126][ T9584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  669.398780][ T9584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  669.809721][   T49] tipc: Left network mode
[  670.359508][ T9584] team0: Port device team_slave_0 added
[  670.397143][ T9584] team0: Port device team_slave_1 added
[  671.190235][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  671.209541][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  671.284747][ T9584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  671.624799][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  671.648675][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  671.784649][ T9584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  673.782873][ T9584] hsr_slave_0: entered promiscuous mode
[  673.835154][ T9584] hsr_slave_1: entered promiscuous mode
[  673.874747][ T9584] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  673.914356][ T9584] Cannot create hsr debugfs directory
[  676.728079][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.6.674'.
[  679.353958][ T9596] IPVS: starting estimator thread 0...
[  679.547665][ T9744] IPVS: using max 26 ests per chain, 62400 per kthread
[  681.825948][   T49] hsr_slave_0: left promiscuous mode
[  681.882249][   T49] hsr_slave_1: left promiscuous mode
[  681.982557][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  682.002691][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  682.056125][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  682.080819][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  683.168590][   T49] bridge_slave_1: left allmulticast mode
[  683.174322][   T49] bridge_slave_1: left promiscuous mode
[  683.205308][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  683.235739][   T49] bridge_slave_0: left allmulticast mode
[  683.241431][   T49] bridge_slave_0: left promiscuous mode
[  683.247597][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  683.294734][ T5784] Bluetooth: hci0: command 0x0406 tx timeout
[  683.342001][   T49] veth1_macvtap: left promiscuous mode
[  683.402464][   T49] veth0_macvtap: left promiscuous mode
[  683.424904][   T49] veth1_vlan: left promiscuous mode
[  683.430423][   T49] veth0_vlan: left promiscuous mode
[  686.011817][ T9791] ip_tables: iptables: counters copy to user failed while replacing table
[  686.099824][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  686.106980][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  687.986085][ T9806] x_tables: duplicate underflow at hook 3
[  692.605715][ T9815] loop6: detected capacity change from 0 to 512
[  692.640771][ T9815] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  692.733529][ T9815] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  692.784003][ T9815] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended
[  692.795314][   T49] team0 (unregistering): Port device team_slave_1 removed
[  692.835167][ T9815] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.694: inode #15: comm syz.6.694: iget: illegal inode #
[  692.881846][ T9815] EXT4-fs (loop6): Remounting filesystem read-only
[  692.892304][ T9815] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  693.011109][   T49] team0 (unregistering): Port device team_slave_0 removed
[  693.176287][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  693.420535][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  693.452709][ T6913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  697.498745][   T49] bond0 (unregistering): Released all slaves
[  697.725141][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.691'.
[  697.737543][ T9584] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  697.763167][ T9584] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  697.837585][ T9584] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  697.848213][ T9837] loop7: detected capacity change from 0 to 1024
[  697.922721][ T9837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  697.952509][ T9584] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  698.695707][   T28] audit: type=1800 audit(1789415180.007:4): pid=9851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.697" name="file1" dev="loop7" ino=15 res=0 errno=0
[  699.224148][   T28] audit: type=1800 audit(1789415180.067:5): pid=9851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.697" name="file1" dev="loop7" ino=15 res=0 errno=0
[  699.371630][ T9119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  699.781278][ T9584] 8021q: adding VLAN 0 to HW filter on device bond0
[  699.867385][ T9584] 8021q: adding VLAN 0 to HW filter on device team0
[  699.924366][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state
[  699.932810][ T6412] bridge0: port 1(bridge_slave_0) entered forwarding state
[  699.999022][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.006319][ T6412] bridge0: port 2(bridge_slave_1) entered forwarding state
[  702.574250][   T49] IPVS: stop unused estimator thread 0...
[  704.471688][ T9584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  709.008380][ T9928] bridge0: port 4(team0) entered blocking state
[  709.015230][ T9928] bridge0: port 4(team0) entered disabled state
[  709.021892][ T9928] team0: entered allmulticast mode
[  709.027146][ T9928] team_slave_0: entered allmulticast mode
[  709.033275][ T9928] team_slave_1: entered allmulticast mode
[  709.041974][ T9928] team0: entered promiscuous mode
[  709.047165][ T9928] team_slave_0: entered promiscuous mode
[  709.053175][ T9928] team_slave_1: entered promiscuous mode
[  709.062361][ T9928] bridge0: port 4(team0) entered blocking state
[  709.069085][ T9928] bridge0: port 4(team0) entered listening state
[  710.094187][ T9584] veth0_vlan: entered promiscuous mode
[  710.489956][ T9584] veth1_vlan: entered promiscuous mode
[  710.605544][ T9941] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  710.621701][ T9940] block device autoloading is deprecated and will be removed.
[  710.688387][ T9584] veth0_macvtap: entered promiscuous mode
[  710.718517][ T9584] veth1_macvtap: entered promiscuous mode
[  710.730082][ T9945] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6913] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            
[  710.777912][ T9934] md: invalid raid superblock magic on ram2
[  710.888010][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  710.903838][ T9934] md: ram2 does not have a valid v0.0 superblock, not importing!
[  710.913688][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.924146][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  710.935641][ T9934] md: md_import_device returned -22
[  710.941013][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.974886][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  711.013971][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.043180][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_0
[  711.079239][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  711.325941][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.938160][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  711.969042][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.994564][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  712.024577][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  712.038333][ T9957] loop6: detected capacity change from 0 to 8
[  712.071918][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_1
[  712.241069][ T9584] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  712.443712][ T9584] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  712.477847][ T9952] SQUASHFS error: Failed to read block 0x6de: -5
[  712.485108][ T9952] SQUASHFS error: Unable to read metadata cache entry [6dc]
[  712.492607][ T9952] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  712.602763][ T9584] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  712.757797][ T9584] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  713.774658][ T5784] Bluetooth: hci0: command 0x0406 tx timeout
[  714.475233][ T6420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.483153][ T6420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.880020][ T6426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.895458][ T6426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.948733][ T9984] netlink: 'syz.7.727': attribute type 12 has an invalid length.
[  719.766908][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  719.782452][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  719.799119][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  719.987006][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  719.995144][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  720.002671][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  721.133474][ T6415] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  721.667177][ T6415] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  721.958173][ T6415] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.189643][ T5784] Bluetooth: hci2: command tx timeout
[  722.337397][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.728'.
[  722.348337][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.6.728'.
[  722.357842][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.728'.
[  722.370946][T10036] netlink: 36 bytes leftover after parsing attributes in process `syz.6.728'.
[  723.381588][ T6415] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  724.494630][    C0] bridge0: port 4(team0) entered learning state
[  724.554707][ T5784] Bluetooth: hci2: command tx timeout
[  726.579205][ T9123] Bluetooth: hci2: command tx timeout
[  726.686327][ T9999] chnl_net:caif_netlink_parms(): no params data found
[  727.425787][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.445015][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.452374][ T9999] bridge_slave_0: entered allmulticast mode
[  727.486334][ T9999] bridge_slave_0: entered promiscuous mode
[  727.631944][ T9999] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.660888][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state
[  727.685005][ T9999] bridge_slave_1: entered allmulticast mode
[  727.724932][ T9999] bridge_slave_1: entered promiscuous mode
[  727.894984][ T9999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  727.973761][ T9999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  728.746227][ T9123] Bluetooth: hci2: command tx timeout
[  730.760236][ T9999] team0: Port device team_slave_0 added
[  730.783024][ T9999] team0: Port device team_slave_1 added
[  731.674170][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  731.692783][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  731.724842][ T9999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  731.738312][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  731.745427][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  731.988785][ T9999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  732.007047][T10095] UDC core: g1: couldn't find an available UDC or it's busy
[  733.477872][T10117] loop7: detected capacity change from 0 to 8
[  734.274876][T10117] SQUASHFS error: Failed to read block 0x6de: -5
[  734.281369][T10117] SQUASHFS error: Unable to read metadata cache entry [6dc]
[  734.288988][T10117] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  736.662774][ T9999] hsr_slave_0: entered promiscuous mode
[  736.874120][ T9999] hsr_slave_1: entered promiscuous mode
[  736.916826][ T9999] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  736.924437][ T9999] Cannot create hsr debugfs directory
[  738.453667][T10141] loop7: detected capacity change from 0 to 1024
[  738.521625][T10140] loop6: detected capacity change from 0 to 2048
[  738.539770][ T9821] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  739.854696][    C0] bridge0: port 4(team0) entered forwarding state
[  739.861228][    C0] bridge0: topology change detected, propagating
[  740.475339][T10144] netlink: 36 bytes leftover after parsing attributes in process `syz.6.753'.
[  740.493990][T10144] syz.6.753 uses obsolete (PF_INET,SOCK_PACKET)
[  742.208310][ T6415] hsr_slave_0: left promiscuous mode
[  742.328231][ T6415] hsr_slave_1: left promiscuous mode
[  742.345453][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  742.370203][ T6415] batman_adv: batadv0: Removing interface: batadv_slave_0
[  742.402016][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  742.422746][ T6415] batman_adv: batadv0: Removing interface: batadv_slave_1
[  742.452893][ T6415] bridge_slave_1: left allmulticast mode
[  742.464668][ T6415] bridge_slave_1: left promiscuous mode
[  742.475623][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.536670][ T6415] bridge_slave_0: left allmulticast mode
[  742.542569][ T6415] bridge_slave_0: left promiscuous mode
[  742.734461][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.545075][ T6415] veth1_macvtap: left promiscuous mode
[  743.550762][ T6415] veth0_macvtap: left promiscuous mode
[  743.580381][ T6415] veth1_vlan: left promiscuous mode
[  743.592040][ T6415] veth0_vlan: left promiscuous mode
[  746.800762][ T6415] team0 (unregistering): Port device team_slave_1 removed
[  746.866141][ T6415] team0 (unregistering): Port device team_slave_0 removed
[  746.934800][ T6415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  747.000177][ T6415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  747.449890][ T6415] bond0 (unregistering): Released all slaves
[  747.541475][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  747.554611][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  748.251589][ T9999] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  748.265037][ T9999] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  748.283371][ T9999] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  748.295648][ T9999] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  748.442816][ T9999] 8021q: adding VLAN 0 to HW filter on device bond0
[  748.482019][ T9999] 8021q: adding VLAN 0 to HW filter on device team0
[  748.508295][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.515581][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  748.547655][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  748.554952][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  748.620587][ T9999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  748.907696][ T9999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  749.425374][ T9999] veth0_vlan: entered promiscuous mode
[  749.441216][ T9999] veth1_vlan: entered promiscuous mode
[  749.506776][ T9999] veth0_macvtap: entered promiscuous mode
[  749.530353][ T9999] veth1_macvtap: entered promiscuous mode
[  749.554175][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  749.567528][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  749.577922][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  749.589724][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  749.600155][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  749.611072][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  749.633864][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_0
[  749.659199][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  749.673712][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  749.687609][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  749.703160][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  749.714762][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  749.731306][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  749.750598][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_1
[  749.773156][ T9999] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  749.782517][ T9999] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  749.797544][ T9999] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  749.806740][ T9999] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  749.935333][ T6415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.943253][ T6415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.997831][ T6415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  750.009053][ T6415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  750.248210][T10246] loop7: detected capacity change from 0 to 128
[  752.526631][T10246] EXT4-fs (loop7): Test dummy encryption mode enabled
[  752.906174][T10246] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  752.936638][T10246] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  753.108422][T10260] loop8: detected capacity change from 0 to 8
[  753.418746][T10260] SQUASHFS error: Failed to read block 0x6de: -5
[  753.425470][T10260] SQUASHFS error: Unable to read metadata cache entry [6dc]
[  753.432927][T10260] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  754.058580][T10246] fscrypt (loop7): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  754.501214][ T9119] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  759.683774][T10307] syz.8.772: attempt to access beyond end of device
[  759.683774][T10307] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0
[  759.699493][T10307] isofs_fill_super: bread failed, dev=nbd8, iso_blknum=16, block=32
[  760.853580][T10319] tipc: Started in network mode
[  760.858693][T10319] tipc: Node identity 4, cluster identity 4711
[  760.864998][T10319] tipc: Node number set to 4
[  762.322446][T10320] rtc_cmos 00:00: Alarms can be up to one day in the future
[  766.283620][ T5816] ==================================================================
[  766.291776][ T5816] BUG: KASAN: vmalloc-out-of-bounds in drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0
[  766.301404][ T5816] Read of size 3072 at addr ffffc90003de1000 by task kworker/1:5/5816
[  766.309630][ T5816] 
[  766.312098][ T5816] CPU: 1 PID: 5816 Comm: kworker/1:5 Not tainted syzkaller #0
[  766.319614][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  766.329712][ T5816] Workqueue: events drm_fb_helper_damage_work
[  766.335897][ T5816] Call Trace:
[  766.339305][ T5816]  <TASK>
[  766.342319][ T5816]  dump_stack_lvl+0x18c/0x250
[  766.347136][ T5816]  ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0
[  766.353749][ T5816]  ? show_regs_print_info+0x20/0x20
[  766.359002][ T5816]  ? load_image+0x420/0x420
[  766.363587][ T5816]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  766.369654][ T5816]  print_report+0xa8/0x210
[  766.374133][ T5816]  ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0
[  766.380693][ T5816]  kasan_report+0x117/0x150
[  766.385280][ T5816]  ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0
[  766.391839][ T5816]  kasan_check_range+0x241/0x290
[  766.396874][ T5816]  ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0
[  766.403428][ T5816]  __asan_memcpy+0x29/0x70
[  766.407899][ T5816]  drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0
[  766.414285][ T5816]  ? drm_fbdev_generic_helper_fb_probe+0x520/0x520
[  766.420834][ T5816]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  766.426863][ T5816]  drm_fb_helper_damage_work+0x22f/0x6f0
[  766.432557][ T5816]  ? drm_fb_helper_resume_worker+0x50/0x50
[  766.438415][ T5816]  ? preempt_schedule_thunk+0x1a/0x30
[  766.443885][ T5816]  ? process_scheduled_works+0x975/0x1600
[  766.449682][ T5816]  ? process_scheduled_works+0x975/0x1600
[  766.455456][ T5816]  process_scheduled_works+0xa60/0x1600
[  766.461066][ T5816]  ? worker_attach_to_pool+0x370/0x370
[  766.466579][ T5816]  ? assign_work+0x3cc/0x5d0
[  766.471214][ T5816]  worker_thread+0xa5e/0xfe0
[  766.475867][ T5816]  kthread+0x2fa/0x390
[  766.479973][ T5816]  ? pr_cont_work+0x550/0x550
[  766.484694][ T5816]  ? kthread_blkcg+0xd0/0xd0
[  766.489331][ T5816]  ret_from_fork+0x48/0x80
[  766.493824][ T5816]  ? kthread_blkcg+0xd0/0xd0
[  766.498457][ T5816]  ret_from_fork_asm+0x11/0x20
[  766.503286][ T5816]  </TASK>
[  766.506414][ T5816] 
[  766.508769][ T5816] The buggy address belongs to a 768-page vmalloc region starting at 0xffffc90003ae1000 allocated at drm_fbdev_generic_helper_fb_probe+0x247/0x520
[  766.523679][ T5816] Memory state around the buggy address:
[  766.529343][ T5816]  ffffc90003de0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.537441][ T5816]  ffffc90003de0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.545536][ T5816] >ffffc90003de1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  766.553632][ T5816]                    ^
[  766.557726][ T5816]  ffffc90003de1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  766.565820][ T5816]  ffffc90003de1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  766.573915][ T5816] ==================================================================
[  767.133433][ T5816] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  767.140711][ T5816] CPU: 1 PID: 5816 Comm: kworker/1:5 Not tainted syzkaller #0
[  767.148178][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  767.158241][ T5816] Workqueue: events drm_fb_helper_damage_work
[  767.164332][ T5816] Call Trace:
[  767.167619][ T5816]  <TASK>
[  767.170568][ T5816]  dump_stack_lvl+0x18c/0x250
[  767.175263][ T5816]  ? show_regs_print_info+0x20/0x20
[  767.180470][ T5816]  ? load_image+0x420/0x420
[  767.185027][ T5816]  panic+0x2ca/0x720
[  767.188970][ T5816]  ? bpf_jit_dump+0xd0/0xd0
[  767.193521][ T5816]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[  767.199702][ T5816]  ? _raw_spin_unlock+0x40/0x40
[  767.204595][ T5816]  ? print_memory_metadata+0x314/0x400
[  767.210088][ T5816]  ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0
[  767.216621][ T5816]  check_panic_on_warn+0x84/0xa0
[  767.221580][ T5816]  ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0
[  767.228105][ T5816]  end_report+0x6f/0x130
[  767.232376][ T5816]  kasan_report+0x128/0x150
[  767.236934][ T5816]  ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0
[  767.243473][ T5816]  kasan_check_range+0x241/0x290
[  767.248495][ T5816]  ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0
[  767.255015][ T5816]  __asan_memcpy+0x29/0x70
[  767.259451][ T5816]  drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0
[  767.265813][ T5816]  ? drm_fbdev_generic_helper_fb_probe+0x520/0x520
[  767.272354][ T5816]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  767.278356][ T5816]  drm_fb_helper_damage_work+0x22f/0x6f0
[  767.284074][ T5816]  ? drm_fb_helper_resume_worker+0x50/0x50
[  767.289902][ T5816]  ? preempt_schedule_thunk+0x1a/0x30
[  767.295293][ T5816]  ? process_scheduled_works+0x975/0x1600
[  767.301041][ T5816]  ? process_scheduled_works+0x975/0x1600
[  767.306800][ T5816]  process_scheduled_works+0xa60/0x1600
[  767.312370][ T5816]  ? worker_attach_to_pool+0x370/0x370
[  767.317844][ T5816]  ? assign_work+0x3cc/0x5d0
[  767.322447][ T5816]  worker_thread+0xa5e/0xfe0
[  767.327077][ T5816]  kthread+0x2fa/0x390
[  767.331154][ T5816]  ? pr_cont_work+0x550/0x550
[  767.335847][ T5816]  ? kthread_blkcg+0xd0/0xd0
[  767.340446][ T5816]  ret_from_fork+0x48/0x80
[  767.344871][ T5816]  ? kthread_blkcg+0xd0/0xd0
[  767.349466][ T5816]  ret_from_fork_asm+0x11/0x20
[  767.354243][ T5816]  </TASK>
[  767.357869][ T5816] Kernel Offset: disabled
[  767.362227][ T5816] Rebooting in 86400 seconds..