last executing test programs:

3m36.534590923s ago: executing program 4 (id=273):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x82080, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000280)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x2}}, 0x1c}}, 0x20008080)

3m35.035285676s ago: executing program 4 (id=275):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
listen(0xffffffffffffffff, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
listen(r2, 0x32)
ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000200))
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0x4c, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x24000000)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480c5}, 0x4)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

3m34.250127027s ago: executing program 4 (id=278):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x0)

3m34.07528401s ago: executing program 4 (id=281):
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r0=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2d, r0})
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4)
ioctl(r1, 0x8916, &(0x7f0000000000))
ioctl(r1, 0x8936, &(0x7f0000000000))

3m33.931679222s ago: executing program 4 (id=284):
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @loopback, 0x3b00}, 0x1c)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007a4c897f660eee26cf5c7d44"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0xe7, 0x4ad92b8dda129f42)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})

3m29.246539682s ago: executing program 4 (id=302):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

3m14.149094277s ago: executing program 32 (id=302):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

2m11.928760865s ago: executing program 0 (id=633):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

2m6.566442525s ago: executing program 0 (id=660):
socket$l2tp(0x2, 0x2, 0x73)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
clock_nanosleep(0xfffffffa, 0x1, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000040)=0x80000000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000500))
clock_settime(0x3, &(0x7f00000000c0)={0x0, 0x3938700})
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0)
syz_usb_connect(0x6, 0x5f, &(0x7f0000000700)=ANY=[@ANYRESDEC=r1, @ANYBLOB="2cfed582f7275db22008c61439ac73e6c29c7f6532b2b1a25214a9bdfcdba472a12a89e98c5bd0c6a71111113bed331ab8ead08a05948483a8e2e40e61b90242737f74d6fc212b870cc0183c62b22a133303214e4acf8f7ff4b35872feaac999784fd37fcb2fe9dc2e20035b68353175439c2d6bb0b43f6ca6ad45ef310f180a6ab674f7fc443419efaffa99c37d1d1172984ddabf7330114156278edc7f4e01eec259c6b8eab135bdb5a9228cfb3b2d62e404a043c203ab515536c30cf8ad22659565ecf6ee73318b70587559965d0e2efcfff40e9a44af621e"], 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000880)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100fff000000224e0000", 0x58}], 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x40000c8)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x23, 0x6, 0x1, &(0x7f0000006740))
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000640)={0x1, 0x800})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)

2m2.030704413s ago: executing program 0 (id=675):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x38, 0x38, &(0x7f00000002c0)="0000000000000001", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m1.733384997s ago: executing program 0 (id=676):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"])
ioctl$KVM_RUN(r6, 0xae80, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r7 = socket$inet6(0xa, 0x80002, 0x0)
r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}})
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f0000000300)={{0x1, @name="c42a6838d28443227483ec8fe343db49cbeecd991aef557d83b98b12db1f5b3d"}, 0x8, 0x4, 0x47})
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1m57.606404658s ago: executing program 0 (id=690):
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @loopback, 0x3b00}, 0x1c)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007a4c897f660eee26cf5c7d4419eb0c43fbc9c8d3486f25c1b5ca774e7fd6988ecada7b5378efb5e933e31aea89"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0xe7, 0x4ad92b8dda129f42)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1m56.691762572s ago: executing program 0 (id=694):
socket$inet(0x2, 0x4000000000080001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x41)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
write(r1, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
setrlimit(0xe, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
fchdir(0xffffffffffffffff)

1m41.115753625s ago: executing program 33 (id=694):
socket$inet(0x2, 0x4000000000080001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x41)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
write(r1, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
setrlimit(0xe, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
fchdir(0xffffffffffffffff)

17.360633169s ago: executing program 6 (id=938):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x80002, 0x0)
syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_setup(0xad9, &(0x7f0000000080)={0x0, 0x7d2d, 0x10, 0x1, 0x255, 0x0, r1}, 0x0, 0x0)
r3 = syz_io_uring_setup(0x57a0, &(0x7f0000000080)={0x0, 0xd4b0, 0x40, 0x1, 0x228}, &(0x7f0000000100), &(0x7f0000000140))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000480)=""/239, &(0x7f0000000580)="59003d344af324fa710d0d5fee9f82f4841672fe66d61c06470ead8caad22f6a1365cf5dfa404e39e2697a1ab077c0ed32e5a3ce66096c090a06da51858363461f8f16b46403043024bb540e98a240d900d552b92f7d446c9c637c1d51b11c5acab79478aca4fe8b2785c881b0ac9a71a3f322c57bda29c1", &(0x7f0000000600), 0xfffffffe, r1, 0x4}, 0x38)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2007, @fd_index=0x1, 0x7, 0x6, 0x0, 0x14, 0x0, {0x0, r4}})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00')
preadv(r5, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x2000ff0f, 0x0)

16.858541706s ago: executing program 6 (id=940):
creat(0x0, 0x81)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x642da, 0xb5c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xfffffffffffffeec}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
close(r1)
close(0x3)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

15.072163293s ago: executing program 2 (id=944):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83a"], 0xffe)

11.185609581s ago: executing program 6 (id=950):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="736563757269747904000000000000000000000000000000000000000000000005"], 0x74)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
open(&(0x7f00000003c0)='./file0\x00', 0x10241, 0x0)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c000500010006000000240007800800"], 0x6c}}, 0x0)
r7 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
setreuid(0xffffffffffffffff, 0xee00)
keyctl$setperm(0x5, r7, 0x220c)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}})
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00', {0x0, 0x4, 0x0, 0x2}, 0x4f, [0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0xffff9519, 0x40000000, 0x0, 0x2, 0xfffffffe, 0x0, 0xfffffe00, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x8000, 0x2, 0x3, 0x3, 0x7, 0x0, 0x5ff339ba, 0x200, 0x8, 0x0, 0xa345, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf, 0x3562, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x200, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x3, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x400000, 0x0, 0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff1, 0x0, 0xfffffffb, 0x0, 0xfffffffd, 0x0, 0x4, 0x4, 0xffff, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x1000, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xde, 0x20000000, 0x0, 0x0, 0x4], [0x0, 0x0, 0x101, 0x0, 0x40, 0x0, 0x6, 0x0, 0xfffffffd, 0x53, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x483534d7, 0x1, 0x1, 0x0, 0x6, 0xd, 0x10001, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x10000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x68, 0x2, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x5, 0x200003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x4, 0x7fffffff, 0x5, 0x0, 0x0, 0x5, 0x48, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81, 0x6, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x10000, 0x9, 0x101, 0x7]}, 0x45c)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r1, 0x5501)

11.102478753s ago: executing program 1 (id=951):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "9945b5d12774ad6d", "c74c26db89640e62e9f6ce5d11effdedecfab0bf2b7632201e61fe4152e33e43", "f3be77ab", "4aea5e692ef7cd69"}, 0x38)
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)="bd", 0x1}], 0x1}}], 0x3, 0x4000000)

10.366262754s ago: executing program 2 (id=953):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x218240, 0x198)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file1\x00', 0x0, 0x2000, 0x0)
read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x40000, 0x40210221, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x0, 0x1, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0xdffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0xfffffffd, r2, r3, 0x0, 0x6e8}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

10.167492087s ago: executing program 6 (id=954):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0x1}, 0xc)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='exfat\x00', 0x8000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
acct(&(0x7f0000000500)='./file0\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_submit(0x0, 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, &(0x7f00000004c0)={{0x162771e3, 0xc}, {0x4, 0x7}, 0x8})
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x33, 0x0, &(0x7f0000000080))
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x580000}, &(0x7f0000000240)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r10, 0x6, 0xc, 0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}})

10.139306108s ago: executing program 2 (id=955):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x990, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = userfaultfd(0x80001)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40002)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x0})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
socket$tipc(0x1e, 0x5, 0x0)
openat$random(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000ffdbdf25fe80000000000000000000000000003b640101000000000000000000000000000000bb60000000040a00603000000000", @ANYBLOB="00000100000000007f00000000000000000000000000000000000000000000000000007f00000000000000ffffffffff0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x2f, 0x0, 0x0)

9.98367526s ago: executing program 1 (id=956):
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
eventfd(0x4)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$tipc(0x1e, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
socket(0xa, 0x3, 0x87)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

9.830198132s ago: executing program 3 (id=957):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmmsg(r4, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

7.797826333s ago: executing program 1 (id=960):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x2, @loopback}, @in6={0xa, 0xfffc, 0xffffffff, @private0}], 0x10)

7.278232161s ago: executing program 1 (id=961):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r4 = socket$inet6(0xa, 0x3, 0xff)
socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4)
write$binfmt_script(r4, &(0x7f00000000c0), 0x28)
recvmmsg(r4, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0)
openat$cgroup_ro(r3, 0x0, 0x275a, 0x0)
close(0xffffffffffffffff)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x1, 0x1000000, 0x0, 0x10, r3}])
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000040)=<r6=>0x0)
connect$nfc_raw(r3, &(0x7f0000000080)={0x27, r6, 0xffffffffffffffff, 0x1}, 0x10)
bind$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@null, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r7, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.293605066s ago: executing program 1 (id=964):
syz_io_uring_setup(0x184, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=<r0=>0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x9)
r5 = dup(r4)
r6 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0)
ftruncate(r6, 0x200004)
sendfile(r5, r6, 0x0, 0x80001d00c0d1)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r7, 0x0, 0x40000)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})

6.00384143s ago: executing program 3 (id=966):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
r9 = socket$inet(0x2b, 0x801, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xe8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xbc, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_LINK={0x8}, @TCA_U32_POLICE={0x1c, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40)
dup3(r2, r1, 0x0)
mount(0x0, 0x0, 0x0, 0x2099800, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4f4e300500", @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000300001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff0000000000000000"], 0x44}}, 0x0)

5.809168533s ago: executing program 5 (id=967):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
r1 = fsopen(&(0x7f0000000280)='tracefs\x00', 0x0)
r2 = socket$inet6(0xa, 0x800, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000080)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7f, 0x4}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r10 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r10, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
sendto$inet(r10, 0x0, 0x0, 0x11, 0x0, 0x0)
write$input_event(r0, &(0x7f0000000400)={{0x0, 0xea60}, 0x11, 0x8, 0x4}, 0x18)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ftruncate(r2, 0x81)
r11 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0xae001)
r12 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r12, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x3, 0x5, 0x9, 0x10000}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r13=>r0, {0xee01, 0xee00}}, './file0\x00'})
ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000000180)={r13, 0xdb4, {0x0, 0x0, 0x0, 0x8000000000000000, 0x3, 0x0, 0x9, 0x3, 0x0, "8b5305cb465790dcbc316feb7c2cd0a4b025b3e61b808646ab2efc01bf1d1b6c1737ad640db310cfef3c507d8f8f2000a23c798f9989ece2f0bc5bd73d2bfe6f", "e9c4445645f1e7aea823e0d28579969813ee3464ffce793c155efd2273d843699127c939b562ef3867a912d1d69a5fb9f62d90cdd69de46769a06c04ad9f82e5", "7ee6becd70000a03ad49958119b8f31a8be8c2802e99f20e7b5b4ead6add9534", [0xffffffffffffffff, 0x5]}})
ioctl$UI_DEV_DESTROY(r0, 0x5502)

4.00706028s ago: executing program 5 (id=968):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
io_destroy(0x0)
dup3(0xffffffffffffffff, r5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66, 0x0, 0x0, 0x0, 0xffffff7f}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
close(r0)

3.36192967s ago: executing program 5 (id=969):
syz_open_dev$sndctrl(0x0, 0x10001d, 0x4841c1)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0, @ANYBLOB="0100000000c1bb2bd18620a876bc800d3e117d332296237f03ea33c25e5950489bce5824444ca636c70cb8809ecd7b146718c3506be5232571f2405c79c84111cec0ca2d93565e17640a8e03"], 0x14}, 0x1, 0x40030000000000}, 0x800)
unshare(0x72030280)
socket(0xa, 0x801, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x0)
connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
preadv(r6, &(0x7f0000001080)=[{&(0x7f0000000e80)=""/156, 0x9c}], 0x1, 0x2, 0x6)

2.605963611s ago: executing program 5 (id=970):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="06000000200d"], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
sendto$packet(r0, &(0x7f0000000180)="10031200e0ff02", 0x7, 0x0, &(0x7f0000000140), 0x14)
recvmmsg(r0, 0x0, 0x0, 0x40, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r2, &(0x7f0000000480)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x14)
r3 = dup(r2)
connect$802154_dgram(r3, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100000000000600d, 0x1)
r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x1c1140, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121)
r5 = socket$alg(0x26, 0x5, 0x0)
accept4(r5, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = dup(0xffffffffffffffff)
write$6lowpan_enable(r6, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000003c0)=ANY=[@ANYRES32=r2])
ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000040)=0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xffff0000, 0xe, 0x0, &(0x7f0000000140)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)

2.286111906s ago: executing program 3 (id=971):
socket$can_j1939(0x1d, 0x2, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x5, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2.247915117s ago: executing program 6 (id=972):
socket$inet(0x2, 0x4000000000080001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
chdir(0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x41)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000140), 0x0)
connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000180)={0x2, 0xfc}, 0x2)

2.038494769s ago: executing program 2 (id=973):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x18, 0x31, 0x103, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0)

1.442797779s ago: executing program 1 (id=974):
chdir(&(0x7f0000000300)='./file0\x00')
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x41)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = gettid()
syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x801)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x32}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x2c}}, 0x20040004)
setrlimit(0xe, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
listen(r4, 0x0)
connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.36360101s ago: executing program 5 (id=975):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="5001"], 0x150)
write$FUSE_OPEN(r2, &(0x7f0000000280)={0x20}, 0x20)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="f801"], 0x1f8)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000340)={0x30}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
chdir(&(0x7f0000000080)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)

1.35707712s ago: executing program 3 (id=976):
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
dup(r0)
openat2$dir(0xffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x801004}, 0xc, &(0x7f0000002800)={0x0, 0x3a0}, 0x1, 0x0, 0x0, 0x10}, 0x20004840)
mount$pvfs2(0x0, 0x0, 0x0, 0x112039, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
socket$netlink(0x10, 0x3, 0x15)

458.348724ms ago: executing program 3 (id=977):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x218240, 0x198)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file1\x00', 0x0, 0x2000, 0x0)
read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x40000, 0x40210221, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008280)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4c449d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e434f70e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507e7ce7ffb4d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f2e78855f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56cc27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dd6e5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51115821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae92f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36c7cedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b0", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x0, 0x1, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0xdffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0xfffffffd, r2, r3, 0x0, 0x6e8}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

435.110634ms ago: executing program 2 (id=978):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}], {0x14, 0x10}}, 0x84}}, 0x0)

356.144785ms ago: executing program 5 (id=979):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x0, 0x0, 0x0})

85.234679ms ago: executing program 2 (id=980):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0)
read$nci(r0, &(0x7f0000000100)=""/107, 0x6b)
write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4)

37.81694ms ago: executing program 3 (id=981):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffff19c0}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1200}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040834)

0s ago: executing program 6 (id=982):
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xcc83, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

kernel console output (not intermixed with test programs):

adv: batadv0: Interface activated: batadv_slave_0
[   65.233219][ T4181] device veth0_vlan entered promiscuous mode
[   65.241245][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.251924][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.266177][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.280710][ T4167] device veth0_macvtap entered promiscuous mode
[   65.302697][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.311341][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.320816][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.329763][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.339330][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.349048][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.357795][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.371376][ T4168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.380262][ T4168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.389991][ T4168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.399185][ T4168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.427353][ T4167] device veth1_macvtap entered promiscuous mode
[   65.442792][ T4181] device veth1_vlan entered promiscuous mode
[   65.495941][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.506395][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.539758][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.550420][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.550914][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.570182][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.572559][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.585415][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.601702][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.633610][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.642518][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.651142][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.663081][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.675506][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.686539][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.697243][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.709629][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.730285][ T4166] device veth0_vlan entered promiscuous mode
[   65.740397][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.750652][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.760829][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.769579][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.797324][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.810483][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.819350][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.830016][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.833401][ T4212] Bluetooth: hci1: command 0x040f tx timeout
[   65.852350][ T4212] Bluetooth: hci2: command 0x040f tx timeout
[   65.858476][ T4212] Bluetooth: hci3: command 0x040f tx timeout
[   65.865869][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.873920][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.881742][ T4212] Bluetooth: hci0: command 0x040f tx timeout
[   65.896753][ T4181] device veth0_macvtap entered promiscuous mode
[   65.907718][ T4215] Bluetooth: hci4: command 0x040f tx timeout
[   65.914568][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.924630][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.927721][ T4166] device veth1_vlan entered promiscuous mode
[   65.962474][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.970632][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.979946][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.989643][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.999151][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.046145][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.055242][ T4181] device veth1_macvtap entered promiscuous mode
[   66.071759][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.111903][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.125221][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.134503][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.144632][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.154688][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.173084][ T4166] device veth0_macvtap entered promiscuous mode
[   66.192516][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.200425][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.217021][ T1429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.226681][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.236449][ T1429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.252937][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.281457][ T4166] device veth1_macvtap entered promiscuous mode
[   66.301781][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.321244][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.332194][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.342914][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.353373][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.364370][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.375663][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.386504][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.397995][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.430761][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.448058][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.463472][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.472261][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.498551][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.511394][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.523138][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.535314][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.546653][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.556817][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.567951][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.578113][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.591384][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.604516][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.618259][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.636989][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.648666][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.659558][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.669861][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.681121][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.699342][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.709950][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.721645][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.739157][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.747517][ T4245] loop1: detected capacity change from 0 to 32768
[   66.751131][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.779116][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.791010][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.801339][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.821353][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.830584][ T4245] XFS (loop1): Mounting V5 Filesystem
[   66.834414][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.857563][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.869686][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.883172][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.896967][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.910346][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.919235][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.936461][ T4166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.946838][ T4166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.956553][ T4166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.965328][ T4166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.981671][ T4245] XFS (loop1): Ending clean mount
[   66.985428][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.016229][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.039144][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.051647][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.123897][ T4257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   67.132774][ T4257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   67.156197][ T4245] syz.1.2 (4245) used greatest stack depth: 19648 bytes left
[   67.158429][ T4257] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.172005][ T4169] XFS (loop1): Unmounting Filesystem
[   67.172851][ T4257] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.187102][ T4257] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.195899][ T4257] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.420503][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.460266][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.484620][ T1429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.532592][ T1429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.587685][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.617173][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.630737][ T1429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.638624][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.648265][ T1429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.656873][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.735752][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.746813][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.903864][ T4212] Bluetooth: hci3: command 0x0419 tx timeout
[   67.909938][ T4212] Bluetooth: hci2: command 0x0419 tx timeout
[   67.932861][ T4212] Bluetooth: hci1: command 0x0419 tx timeout
[   67.985415][   T21] Bluetooth: hci4: command 0x0419 tx timeout
[   68.002309][   T21] Bluetooth: hci0: command 0x0419 tx timeout
[   68.083507][ T4275] loop2: detected capacity change from 0 to 128
[   68.131334][ T4278] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[   68.190358][ T4280] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12'.
[   68.199296][ T4275] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   68.284928][ T4280] device gretap0 entered promiscuous mode
[   68.303739][ T4275] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: none.
[   68.315929][ T4275] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   68.422309][ T4284] netlink: 5 bytes leftover after parsing attributes in process `syz.4.12'.
[   68.446944][ T4292] Zero length message leads to an empty skb
[   68.523096][ T4284] 0ªX¹¦D: renamed from gretap0
[   68.591796][ T4284] device 
30ªX¹¦D left promiscuous mode
[   68.626842][ T4284] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   69.031615][ T4308] loop2: detected capacity change from 0 to 2048
[   69.091837][ T4308] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   69.115596][ T4319] netlink: 68 bytes leftover after parsing attributes in process `syz.3.26'.
[   69.401699][ T4332] loop4: detected capacity change from 0 to 190
[   69.537500][ T4332] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid boot sector checksum.
[   69.578666][ T4332] ntfs: (device loop4): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing.
[   69.632669][ T4332] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[   69.682171][ T4332] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[   69.756504][ T4332] ntfs: volume version 3.1.
[   69.779950][ T4332] ntfs: (device loop4): load_system_files(): Volume is dirty.  Will not be able to remount read-write.  Run chkdsk and mount in Windows.
[   69.800636][ T4347] netlink: 68 bytes leftover after parsing attributes in process `syz.2.40'.
[   69.833137][ T4352] capability: warning: `syz.1.41' uses deprecated v2 capabilities in a way that may be insecure
[   69.842666][ T4332] ntfs: (device loop4): ntfs_read_locked_inode(): Inode is an extent inode!
[   69.893425][ T4332] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[   69.948655][ T4332] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[   70.017419][ T4356] loop2: detected capacity change from 0 to 2048
[   70.031235][ T4332] ntfs: (device loop4): ntfs_lookup_inode_by_name(): No index allocation attribute but index entry requires one. Directory inode 0x5 is corrupt or driver bug.
[   70.081444][ T4332] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[   70.126650][ T4332] attempt to access beyond end of device
[   70.126650][ T4332] loop4: rw=0, want=232, limit=190
[   70.154622][ T4356] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   70.451829][ T4358] ipt_CLUSTERIP: Please specify destination IP
[   71.040696][ T4380] netlink: 68 bytes leftover after parsing attributes in process `syz.2.54'.
[   71.264524][ T4387] loop2: detected capacity change from 0 to 2048
[   71.271860][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.280501][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.350688][ T4387] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   71.619407][ T4389] loop2: detected capacity change from 0 to 2048
[   71.764313][ T4389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   72.144431][ T4382] loop4: detected capacity change from 0 to 32768
[   72.346628][ T4382] XFS (loop4): Mounting V5 Filesystem
[   72.564129][ T4382] XFS (loop4): Ending clean mount
[   72.572277][ T1108] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 
[   72.624538][ T4413] block device autoloading is deprecated. It will be removed in Linux 5.19
[   72.672681][ T1108] XFS (loop4): Unmount and run xfs_repair
[   72.690109][ T1108] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[   72.731965][ T1108] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[   72.762232][ T1108] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[   72.771871][ T1108] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[   72.832146][ T1108] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[   72.865679][ T1108] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[   72.896587][ T1108] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[   72.915532][ T1108] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   72.929344][ T4420] loop2: detected capacity change from 0 to 2048
[   72.952155][ T1108] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   72.980864][ T4382] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74
[   73.010807][ T4420] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   73.012028][ T4382] XFS (loop4): Failed to initialize disk quotas.
[   73.127078][ T1108] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 
[   73.158825][ T1108] XFS (loop4): Unmount and run xfs_repair
[   73.192935][ T1108] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[   73.217229][ T1108] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[   73.239765][ T1108] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[   73.263405][ T1108] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[   73.296463][ T1108] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[   73.319230][ T1108] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[   73.343020][ T1108] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[   73.365595][ T1108] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   73.390716][ T1108] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   73.414404][ T4382] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74
[   73.537881][ T4181] XFS (loop4): Unmounting Filesystem
[   73.730249][ T4432] loop1: detected capacity change from 0 to 2048
[   73.828064][ T4440] loop2: detected capacity change from 0 to 128
[   73.838113][ T4432] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[   73.981234][ T4432] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none.
[   74.170429][ T4211] kernel write not supported for file bpf-prog (pid: 4211 comm: kworker/0:5)
[   74.355380][ T4450] loop1: detected capacity change from 0 to 512
[   74.416790][ T4450] =======================================================
[   74.416790][ T4450] WARNING: The mand mount option has been deprecated and
[   74.416790][ T4450]          and is ignored by this kernel. Remove the mand
[   74.416790][ T4450]          option from the mount to silence this warning.
[   74.416790][ T4450] =======================================================
[   74.539906][ T4450] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback.
[   74.561761][ T4450] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.720114][ T4456] block device autoloading is deprecated. It will be removed in Linux 5.19
[   74.751685][ T4458] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.760753][ T4458] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.769548][ T4458] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.778468][ T4458] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.973279][ T4465] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   75.044024][ T4466] loop1: detected capacity change from 0 to 2048
[   75.170288][ T4466] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   75.894571][ T4492] loop2: detected capacity change from 0 to 2048
[   77.098503][ T4500] loop4: detected capacity change from 0 to 8192
[   77.199631][ T4505] loop3: detected capacity change from 0 to 256
[   77.265628][ T4500] __ntfs_error: 11 callbacks suppressed
[   77.265646][ T4500] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid.
[   77.343831][ T4500] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
[   77.365299][ T4492] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   77.391882][ T4492] UDF-fs: Scanning with blocksize 512 failed
[   77.420320][ T4500] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume.
[   77.461567][ T4492] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   77.470910][ T4511] block device autoloading is deprecated. It will be removed in Linux 5.19
[   77.701543][ T4515] loop0: detected capacity change from 0 to 2048
[   77.893007][ T4515] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none.
[   78.059490][ T4528] loop2: detected capacity change from 0 to 2048
[   78.115139][ T4515] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none.
[   78.151002][ T4528] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   78.248288][ T4532] loop4: detected capacity change from 0 to 4096
[   78.250238][ T4513] loop1: detected capacity change from 0 to 32768
[   78.376537][ T4532] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   78.464628][ T4513] XFS (loop1): Mounting V5 Filesystem
[   78.480273][ T4532] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   78.538573][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   78.594761][ T4552] fuse: Bad value for 'group_id'
[   78.609001][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   78.656104][ T4181] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5806: Corrupt filesystem
[   78.688190][ T4513] XFS (loop1): Ending clean mount
[   78.695496][ T4513] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 
[   78.712823][ T4557] syz.0.119[4557] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   78.712932][ T4557] syz.0.119[4557] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   78.724957][ T4181] EXT4-fs error (device loop4): ext4_quota_off:6493: inode #3: comm syz-executor: mark_inode_dirty error
[   78.731677][ T4513] XFS (loop1): Unmount and run xfs_repair
[   78.770163][ T4181] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5806: Corrupt filesystem
[   78.783990][ T4513] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   78.788337][ T4181] EXT4-fs error (device loop4): ext4_quota_off:6493: inode #4: comm syz-executor: mark_inode_dirty error
[   78.791437][ T4513] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[   78.791459][ T4513] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[   78.791477][ T4513] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[   78.863067][ T4513] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[   78.874270][ T4513] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[   78.883610][ T4513] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[   78.920395][ T4513] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.954475][ T4513] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   78.973314][ T4513] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74
[   79.052773][ T4513] XFS (loop1): Failed to initialize disk quotas.
[   79.121041][   T23] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 
[   79.144763][   T23] XFS (loop1): Unmount and run xfs_repair
[   79.171139][   T23] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   79.190992][   T23] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[   79.220598][   T23] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[   79.248834][ T4572] loop4: detected capacity change from 0 to 512
[   79.265662][   T23] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[   79.285304][   T23] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[   79.305217][   T23] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[   79.320591][ T4572] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   79.322311][   T23] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[   79.381464][ T4572] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   79.398682][   T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.408099][   T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.430541][ T4572] EXT4-fs (loop4): 1 truncate cleaned up
[   79.433073][ T4513] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74
[   79.437489][ T4572] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   79.571652][ T4169] XFS (loop1): Unmounting Filesystem
[   79.860813][ T4575] loop2: detected capacity change from 0 to 32768
[   80.062451][ T4575] XFS (loop2): Mounting V5 Filesystem
[   80.071372][ T4586] loop1: detected capacity change from 0 to 2048
[   80.123696][ T4586] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   80.181497][ T4575] XFS (loop2): Ending clean mount
[   80.218938][ T4243] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[   80.232716][ T4243] XFS (loop2): Unmount and run xfs_repair
[   80.238559][ T4243] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   80.247803][ T4243] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[   80.272285][ T4243] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[   80.301183][ T4243] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[   80.320910][ T4243] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[   80.353519][ T4243] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[   80.363323][ T4243] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[   80.374420][ T4243] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[   80.383726][ T4243] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[   80.393180][ T4593] fuse: Bad value for 'group_id'
[   80.399313][ T4575] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[   80.443704][ T4595] loop1: detected capacity change from 0 to 512
[   80.451228][ T4593] block device autoloading is deprecated. It will be removed in Linux 5.19
[   80.453534][ T4575] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504).  Shutting down filesystem.
[   80.482746][ T4575] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[   80.518442][ T4166] XFS (loop2): Unmounting Filesystem
[   80.562848][ T4595] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   80.622571][ T4595] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended
[   80.645024][ T4595] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.132: inode #15: comm syz.1.132: iget: illegal inode #
[   80.679757][ T4595] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.132: couldn't read orphan inode 15 (err -117)
[   80.694341][ T4595] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000005,user_xattr,usrjquota=,,errors=continue. Quota mode: none.
[   81.240350][ T4612] netlink: 'syz.2.140': attribute type 3 has an invalid length.
[   81.483797][ T4616] loop2: detected capacity change from 0 to 2048
[   81.517877][   T13] cfg80211: failed to load regulatory.db
[   81.578741][ T4616] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   81.695112][ T4618] fuse: Bad value for 'group_id'
[   81.711210][ T4605] loop4: detected capacity change from 0 to 32768
[   81.719464][ T4606] loop1: detected capacity change from 0 to 32768
[   81.866085][ T4605] XFS (loop4): Mounting V5 Filesystem
[   81.877013][ T4625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.144'.
[   81.955160][ T4631] loop2: detected capacity change from 0 to 4096
[   82.048879][ T4605] XFS (loop4): Ending clean mount
[   82.055598][ T1108] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 
[   82.068547][ T1108] XFS (loop4): Unmount and run xfs_repair
[   82.074657][ T1108] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[   82.082599][ T1108] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[   82.093701][ T1108] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[   82.102372][ T4606] XFS (loop1): Mounting V5 Filesystem
[   82.103992][ T1108] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[   82.117385][ T1108] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[   82.123342][ T4639] fuse: Invalid rootmode
[   82.127134][ T1108] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[   82.139955][ T1108] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[   82.149317][ T1108] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   82.158792][ T1108] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   82.178769][ T4605] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74
[   82.192991][ T4631] ntfs: volume version 3.1.
[   82.226564][ T4605] XFS (loop4): Failed to initialize disk quotas.
[   82.356417][ T4605] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 
[   82.388004][ T4605] XFS (loop4): Unmount and run xfs_repair
[   82.432289][ T4605] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[   82.439731][ T4605] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[   82.458753][ T4606] XFS (loop1): Ending clean mount
[   82.472542][ T4606] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 
[   82.504303][ T4606] XFS (loop1): Unmount and run xfs_repair
[   82.510229][ T4606] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   82.522158][ T4605] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[   82.561591][ T4605] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[   82.570827][ T4606] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[   82.595364][ T4605] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[   82.605628][ T4606] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[   82.625386][ T4606] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[   82.635846][ T4605] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[   82.655853][ T4606] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[   82.665009][ T4605] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[   82.701087][ T4606] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[   82.720540][ T4605] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   82.735454][ T4606] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[   82.769185][ T4605] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   82.773371][ T4606] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   82.784128][ T4605] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74
[   82.811053][ T4606] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   82.822273][ T4606] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74
[   82.843899][ T4181] XFS (loop4): Unmounting Filesystem
[   82.855993][ T4606] XFS (loop1): Failed to initialize disk quotas.
[   82.968411][ T4243] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 
[   82.997564][ T4243] XFS (loop1): Unmount and run xfs_repair
[   83.016215][ T4243] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   83.033354][ T4243] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[   83.051327][ T4243] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[   83.069265][ T4243] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[   83.088334][ T4243] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[   83.104241][ T4243] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[   83.120690][ T4243] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[   83.134317][ T4243] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   83.147934][ T4243] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   83.168462][ T4606] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74
[   83.250789][ T4169] XFS (loop1): Unmounting Filesystem
[   83.399372][ T4658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.156'.
[   83.541851][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   83.552881][ T4662] fuse: Bad value for 'rootmode'
[   83.638480][ T4666] process 'syz.0.157' launched './file0' with NULL argv: empty string added
[   84.089844][ T4688] netlink: 40 bytes leftover after parsing attributes in process `syz.1.168'.
[   84.307237][ T4696] fuse: Bad value for 'rootmode'
[   84.506712][ T4700] loop1: detected capacity change from 0 to 2048
[   84.605354][ T4700] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   84.857802][ T4715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'.
[   84.995694][ T4721] loop3: detected capacity change from 0 to 164
[   85.135322][ T4725] fuse: Bad value for 'rootmode'
[   85.218538][ T4727] loop2: detected capacity change from 0 to 764
[   85.334334][ T4727] Symlink component flag not implemented
[   85.371118][ T4727] Symlink component flag not implemented (7)
[   85.595223][ T4741] loop2: detected capacity change from 0 to 128
[   85.680600][ T4743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.194'.
[   85.879579][ T4751] fuse: Unknown parameter 'use00000000000000000000'
[   86.119896][ T4757] loop2: detected capacity change from 0 to 512
[   86.234918][ T4757] [EXT4 FS bs=4096, gc=1, bpg=7872, ipg=32, mo=a842c018, mo2=0000]
[   86.246732][ T4757] System zones: 0-2, 18-18, 34-34
[   86.260070][ T4757] EXT4-fs (loop2): orphan cleanup on readonly fs
[   86.286575][ T4757] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.202: bg 0: block 97: padding at end of block bitmap is not set
[   86.399162][ T4757] Quota error (device loop2): write_blk: dquota write failed
[   86.444751][ T4757] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   86.458595][ T4766] loop3: detected capacity change from 0 to 512
[   86.475527][ T4757] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.202: Failed to acquire dquot type 0
[   86.532965][ T4757] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2932: inode #15: comm syz.2.202: corrupted xattr block 19
[   86.560077][ T4766] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size
[   86.570586][ T4757] EXT4-fs warning (device loop2): ext4_evict_inode:302: xattr delete (err -117)
[   86.612987][ T4757] EXT4-fs (loop2): 1 orphan inode deleted
[   86.619916][  T154] Quota error (device loop2): remove_tree: Getting block too big (0 >= 6)
[   86.638602][  T154] EXT4-fs error (device loop2): ext4_release_dquot:6227: comm kworker/u4:2: Failed to release dquot type 0
[   86.726891][ T4757] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,debug,,errors=continue. Quota mode: writeback.
[   86.990137][ T4757] syz.2.202 (4757) used greatest stack depth: 19200 bytes left
[   86.999617][ T4774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.207'.
[   87.366244][ T4785] fuse: Unknown parameter 'use00000000000000000000'
[   88.063669][ T4795] tmpfs: Unknown parameter ''
[   88.118243][ T4779] loop4: detected capacity change from 0 to 32768
[   88.233067][ T4779] XFS: ikeep mount option is deprecated.
[   88.401745][ T4779] XFS (loop4): Mounting V5 Filesystem
[   88.574467][ T4789] loop2: detected capacity change from 0 to 32768
[   88.642524][ T4789] XFS (loop2): Mounting V5 Filesystem
[   88.680871][ T4779] XFS (loop4): Ending clean mount
[   88.787286][ T4779] XFS (loop4): Quotacheck needed: Please wait.
[   88.788013][ T4819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'.
[   88.847749][ T4779] XFS (loop4): Quotacheck: Done.
[   88.920256][ T4789] XFS (loop2): Ending clean mount
[   88.963885][ T4789] XFS (loop2): Quotacheck needed: Please wait.
[   89.080798][ T4789] XFS (loop2): Quotacheck: Done.
[   89.122870][ T4824] fuse: Unknown parameter 'use00000000000000000000'
[   89.220356][ T4166] XFS (loop2): Unmounting Filesystem
[   89.494254][ T4181] XFS (loop4): Unmounting Filesystem
[   90.377220][ T4832] loop3: detected capacity change from 0 to 32768
[   90.541667][ T4832] XFS (loop3): Mounting V5 Filesystem
[   90.668595][ T4832] XFS (loop3): Ending clean mount
[   90.816968][ T4853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'.
[   90.834011][ T4168] XFS (loop3): Unmounting Filesystem
[   91.070437][ T4857] fuse: Unknown parameter 'user_i00000000000000000000'
[   91.377827][ T4866] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   91.445409][ T4866] CIFS mount error: No usable UNC path provided in device string!
[   91.445409][ T4866] 
[   91.466899][ T4866] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   91.587023][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   91.620577][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   91.650170][ T4838] loop2: detected capacity change from 0 to 65536
[   91.658669][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.675702][ T4871] device bridge_slave_0 left promiscuous mode
[   91.683673][ T4871] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.719362][ T4871] device bridge_slave_1 left promiscuous mode
[   91.733853][ T4871] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.774570][ T4871] bond0: (slave bond_slave_0): Releasing backup interface
[   91.783334][ T4838] XFS (loop2): Mounting V5 Filesystem
[   91.806062][ T4871] bond0: (slave bond_slave_1): Releasing backup interface
[   91.884305][ T4871] team0: Port device team_slave_0 removed
[   91.913234][ T4871] team0: Port device team_slave_1 removed
[   91.938870][ T4871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.948205][ T4838] XFS (loop2): Ending clean mount
[   91.959672][ T4871] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.968497][ T4838] XFS (loop2): Quotacheck needed: Please wait.
[   91.993080][ T4871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.000933][ T4871] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.033217][ T4874] team0: Mode changed to "loadbalance"
[   92.033251][ T4838] XFS (loop2): Quotacheck: Done.
[   92.057860][ T4838] overlayfs: missing 'workdir'
[   92.219352][ T4166] XFS (loop2): Unmounting Filesystem
[   92.235350][ T4892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'.
[   92.574605][ T4899] fuse: Unknown parameter 'user_i00000000000000000000'
[   93.165441][ T4904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'.
[   93.467197][ T4904] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   93.838727][ T4913] 9pnet_virtio: no channels available for device syz
[   95.312078][    C1] sched: RT throttling activated
[   95.319228][   T23] Bluetooth: hci4: command 0x2016 tx timeout
[   96.542447][ T4943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'.
[   97.344504][ T4952] fuse: Unknown parameter 'user_i00000000000000000000'
[   98.832099][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   98.841112][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   98.850127][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   98.859225][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   99.666883][ T4990] netlink: 9 bytes leftover after parsing attributes in process `syz.2.265'.
[   99.736024][ T4990] device gretap0 entered promiscuous mode
[   99.822175][ T4991] netlink: 5 bytes leftover after parsing attributes in process `syz.2.265'.
[   99.838730][ T4991] 0ªX¹¦D: renamed from gretap0
[   99.881012][ T4991] device 
30ªX¹¦D left promiscuous mode
[   99.934154][ T4991] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  100.630404][ T5003] fuse: Unknown parameter 'fd0x0000000000000004'
[  102.462785][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[  102.492103][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  102.502145][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  102.512104][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  102.522111][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  102.532098][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  103.342670][ T4213] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  103.655022][ T5047] input: syz1 as /devices/virtual/input/input6
[  103.722249][ T4213] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  103.762347][ T4213] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  103.812626][ T4213] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  103.821977][ T4213] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  103.835987][ T4213] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  104.102399][ T4213] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  105.397148][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  105.407276][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.414827][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.579354][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  105.586887][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  105.597662][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.605338][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.612956][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.620668][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.740168][ T4213] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  105.908662][ T5056] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  106.174774][ T4213] usb 1-1: Product: syz
[  106.182460][ T4213] usb 1-1: Manufacturer: syz
[  106.482342][ T4213] usb 1-1: can't set config #1, error -71
[  106.578171][ T5061] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.612010][ T4213] usb 1-1: USB disconnect, device number 2
[  106.770592][ T5061] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.567389][ T4213] libceph: connect (1)[c::]:6789 error -101
[  107.609472][ T4213] libceph: mon0 (1)[c::]:6789 connect error
[  107.846115][ T4212] libceph: connect (1)[c::]:6789 error -101
[  107.852367][ T4212] libceph: mon0 (1)[c::]:6789 connect error
[  107.927858][ T5093] crypto_alloc_aead failed rc=-4
[  108.124146][ T4213] libceph: connect (1)[c::]:6789 error -101
[  108.130196][ T4213] libceph: mon0 (1)[c::]:6789 connect error
[  108.316592][ T5085] ceph: No mds server is up or the cluster is laggy
[  109.502983][ T5120] trusted_key: encrypted_key: insufficient parameters specified
[  110.170089][ T5047] ODEBUG: Out of memory. ODEBUG disabled
[  111.742171][ T4243] Bluetooth: hci4: command 0x0405 tx timeout
[  112.406242][ T5171] 9pnet_virtio: no channels available for device syz
[  112.435471][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'.
[  113.975865][ T5207] syz.3.336 uses obsolete (PF_INET,SOCK_PACKET)
[  114.046094][ T5209] netlink: 'syz.0.338': attribute type 1 has an invalid length.
[  114.219010][ T5209] 8021q: adding VLAN 0 to HW filter on device bond1
[  114.300452][ T5217] device ip6erspan0 entered promiscuous mode
[  114.345366][ T5217] bond1: (slave ip6erspan0): making interface the new active one
[  114.406491][ T5217] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  114.422236][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  114.911561][ T5047] Set syz1 is full, maxelem 65536 reached
[  118.079144][   T21] Bluetooth: hci4: command 0x0405 tx timeout
[  121.982262][ T5327] tipc: Started in network mode
[  121.987465][ T5327] tipc: Node identity ac14140f, cluster identity 4711
[  121.995007][ T5327] tipc: New replicast peer: 255.255.255.255
[  122.001496][ T5327] tipc: Enabled bearer <udp:syz2>, priority 10
[  123.104112][ T4988] tipc: Node number set to 2886997007
[  127.433699][   T26] audit: type=1800 audit(1744488209.563:2): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.382" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  127.589949][ T5365] device geneve2 entered promiscuous mode
[  127.810716][ T5370] 9pnet_virtio: no channels available for device syz
[  128.349103][ T5356] chnl_net:caif_netlink_parms(): no params data found
[  129.021855][ T5356] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.050057][ T5356] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.079892][ T5356] device bridge_slave_0 entered promiscuous mode
[  129.182305][    T7] Bluetooth: hci5: command 0x0409 tx timeout
[  129.203848][ T5400] device gretap0 entered promiscuous mode
[  129.264864][ T5400] device macsec1 entered promiscuous mode
[  129.283572][ T5356] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.320043][ T5356] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.398459][ T5356] device bridge_slave_1 entered promiscuous mode
[  129.545018][ T4180] Bluetooth: hci0: Received unexpected HCI Event 00000000
[  129.566851][ T5356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.589572][ T5356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.692909][ T5414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.399'.
[  129.706808][ T5356] team0: Port device team_slave_0 added
[  129.735665][ T5356] team0: Port device team_slave_1 added
[  129.961254][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.996818][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.192177][ T5356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.436680][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.765269][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.859272][ T5356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.127369][ T5356] device hsr_slave_0 entered promiscuous mode
[  131.138217][ T5356] device hsr_slave_1 entered promiscuous mode
[  131.168878][ T5356] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  131.207504][ T5356] Cannot create hsr debugfs directory
[  131.262383][   T13] Bluetooth: hci5: command 0x041b tx timeout
[  132.402020][ T5356] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  132.507876][ T4984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.540817][ T5356] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  132.571496][ T5356] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  132.609506][ T4984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.693179][ T5356] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  132.704063][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.710438][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.898017][ T4984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.064340][ T4984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.343944][ T4213] Bluetooth: hci5: command 0x040f tx timeout
[  133.602809][ T5356] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.711513][ T5356] 8021q: adding VLAN 0 to HW filter on device team0
[  133.834693][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  133.850964][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  134.050089][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  134.093084][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  134.162778][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.169873][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.238944][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  134.292217][   T26] audit: type=1326 audit(1744488216.473:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a59603169 code=0x7ffc0000
[  134.331501][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  134.381131][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.388308][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.417653][   T26] audit: type=1326 audit(1744488216.483:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a59603169 code=0x7ffc0000
[  134.501452][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  134.553374][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  134.684266][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  134.731533][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  134.787938][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  134.845401][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  134.901352][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  134.961327][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  135.001712][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  135.065923][ T5356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  135.152640][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  135.193414][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  135.210984][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  135.272934][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  135.422254][ T4212] Bluetooth: hci5: command 0x0419 tx timeout
[  135.895985][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  135.918021][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  135.958418][ T5356] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.013647][ T4984] device hsr_slave_0 left promiscuous mode
[  137.053503][ T4984] device hsr_slave_1 left promiscuous mode
[  137.110003][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.139437][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.171727][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.201275][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.219972][ T4984] device bridge_slave_1 left promiscuous mode
[  137.233332][ T4984] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.245998][ T5527] fuse: Bad value for 'fd'
[  137.272983][ T4984] device bridge_slave_0 left promiscuous mode
[  137.282312][ T4984] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.306706][ T4984] device veth1_macvtap left promiscuous mode
[  137.347473][ T4984] device veth0_macvtap left promiscuous mode
[  137.355746][ T5527] block device autoloading is deprecated. It will be removed in Linux 5.19
[  137.379374][ T4984] device veth1_vlan left promiscuous mode
[  137.398338][ T4984] device veth0_vlan left promiscuous mode
[  138.023152][ T4984] team0 (unregistering): Port device team_slave_1 removed
[  138.062878][ T4984] team0 (unregistering): Port device team_slave_0 removed
[  138.092638][ T4984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.128401][ T4984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.362020][ T4984] bond0 (unregistering): Released all slaves
[  138.523179][ T5533] bridge0: port 1(netdevsim0) entered blocking state
[  138.531188][ T5533] bridge0: port 1(netdevsim0) entered disabled state
[  138.607197][ T5533] device netdevsim0 entered promiscuous mode
[  138.644924][ T5533] bridge0: port 1(netdevsim0) entered blocking state
[  138.651910][ T5533] bridge0: port 1(netdevsim0) entered forwarding state
[  140.311518][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'.
[  140.443950][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  140.444561][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  140.751734][ T5560] 9pnet_virtio: no channels available for device syz
[  140.771215][ T5356] device veth0_vlan entered promiscuous mode
[  140.873902][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  140.994818][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  141.026453][ T5565] fuse: Bad value for 'fd'
[  141.124130][ T5356] device veth1_vlan entered promiscuous mode
[  141.155518][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  141.257587][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  141.290265][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  141.361014][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  141.466915][ T5356] device veth0_macvtap entered promiscuous mode
[  141.479916][ T5356] device veth1_macvtap entered promiscuous mode
[  141.508438][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.519396][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.529317][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.541218][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.639599][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.650165][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.661554][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.703638][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  141.790150][ T5578] ptrace attach of "./syz-executor exec"[4168] was attempted by ""[5578]
[  142.612648][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  142.621642][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  142.649864][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  143.533325][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  143.563785][    T7] Bluetooth: hci5: command 0x0405 tx timeout
[  143.629493][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.650606][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.699110][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.752317][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.787620][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.831290][ T5356] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.902121][ T5356] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.955898][ T5356] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.994849][ T5356] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.070340][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  144.086148][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  144.119716][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  145.883690][ T4767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.896542][ T4767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.953498][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  145.980762][ T4767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.002196][ T4767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.027065][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  146.102360][ T4213] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  146.116720][ T5634] fuse: Bad value for 'fd'
[  146.195852][   T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  146.532392][ T4213] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  146.589195][ T4213] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  146.656750][ T4213] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  146.672134][ T4213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.712757][   T21] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  146.752435][ T5658] ptrace attach of "./syz-executor exec"[5356] was attempted by ""[5658]
[  147.104319][   T21] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  147.195768][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.495179][   T21] usb 2-1: Product: syz
[  147.499390][   T21] usb 2-1: Manufacturer: syz
[  147.504511][   T21] usb 2-1: SerialNumber: syz
[  147.610082][   T21] usb 2-1: can't set config #1, error -71
[  147.620138][   T21] usb 2-1: USB disconnect, device number 2
[  147.673431][ T5664] 9pnet: Insufficient options for proto=fd
[  147.712377][ T4213] usb 3-1: usb_control_msg returned -32
[  147.719118][ T4213] usbtmc 3-1:16.0: can't read capabilities
[  147.829815][ T5673] fuse: Bad value for 'fd'
[  147.967887][ T4215] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  148.152488][ T5682] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -32
[  148.192215][   T21] usb 3-1: USB disconnect, device number 2
[  148.286936][ T5687] nfs4: Unknown parameter 'Tsc'
[  148.316209][ T5687] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  149.032408][ T4215] usb 1-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config
[  149.115787][ T4215] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  149.184517][ T4215] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  149.224378][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.263419][ T4215] usb 1-1: config 0 descriptor??
[  149.398794][ T5705] netlink: 40 bytes leftover after parsing attributes in process `syz.2.463'.
[  149.513822][ T4215] usb 1-1: string descriptor 0 read error: -71
[  149.532128][   T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  149.562277][ T4170] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  149.564277][ T4215] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  149.640034][ T5716] 9pnet: Insufficient options for proto=fd
[  149.659533][ T4215] usb 1-1: USB disconnect, device number 3
[  149.687256][ T5720] fuse: Bad value for 'fd'
[  149.744635][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.469'.
[  149.780602][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.469'.
[  149.892464][   T21] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  149.922464][ T4170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  149.942202][   T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.062410][   T21] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  150.112580][   T21] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  150.120673][   T21] usb 2-1: Manufacturer: syz
[  150.132360][ T4170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  150.151762][ T4170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.184464][   T21] usb 2-1: config 0 descriptor??
[  150.212130][ T4170] usb 6-1: Product: syz
[  150.225208][ T4170] usb 6-1: Manufacturer: syz
[  150.260507][ T4170] usb 6-1: SerialNumber: syz
[  150.362316][   T21] rc_core: IR keymap rc-hauppauge not found
[  150.368530][   T21] Registered IR keymap rc-empty
[  150.400704][   T21] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  150.458021][   T21] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9
[  150.553588][   T21] usb 2-1: USB disconnect, device number 3
[  150.564719][ T4170] cdc_ether: probe of 6-1:1.0 failed with error -22
[  150.622365][ T4170] usb 6-1: USB disconnect, device number 2
[  150.635240][ T5741] misc userio: The device must be registered before sending interrupts
[  151.136510][ T5749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.476'.
[  151.182347][ T4170] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  151.443360][ T4170] usb 6-1: Using ep0 maxpacket: 8
[  151.463185][ T4180] Bluetooth: hci0: Dropping invalid advertising data
[  151.470438][ T4180] Bluetooth: hci0: Malicious advertising data.
[  151.697232][ T4170] usb 6-1: config index 0 descriptor too short (expected 301, got 59)
[  151.705537][ T4170] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  151.720726][ T4170] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  151.752390][ T4170] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  151.771569][ T4170] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 2304, setting to 1024
[  151.788618][ T5770] 9pnet: Insufficient options for proto=fd
[  151.801365][ T4170] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  151.855716][ T4170] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  151.890682][ T4170] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  151.917532][ T4170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.212292][ T4170] usb 6-1: usb_control_msg returned -32
[  152.217925][ T4170] usbtmc 6-1:16.0: can't read capabilities
[  152.406793][ T5779] fuse: Bad value for 'fd'
[  152.837446][ T4212] usb 6-1: USB disconnect, device number 3
[  152.852272][ T5783] usbtmc 6-1:16.0: usb_control_msg returned -71
[  153.648297][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  153.716265][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  153.745350][ T5809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.488'.
[  153.772191][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  153.820838][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  153.861289][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  153.923031][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  153.930584][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  153.998246][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  154.171932][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  154.228706][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  154.268355][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  154.602194][ T5816] trusted_key: encrypted_key: insufficient parameters specified
[  155.009717][ T5820] misc userio: No port type given on /dev/userio
[  155.028499][ T5820] misc userio: The device must be registered before sending interrupts
[  155.386076][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  155.480636][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  155.518662][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  155.556671][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  155.602283][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  155.650818][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  155.677873][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  155.708650][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  155.747331][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  155.856956][ T5829] netlink: 68 bytes leftover after parsing attributes in process `syz.2.492'.
[  155.886869][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  156.422178][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[  156.431168][ T5831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.491'.
[  157.042264][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[  157.462148][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  157.469941][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  157.615140][ T5835] 9pnet: Insufficient options for proto=fd
[  157.630841][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  157.682161][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  157.865264][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  157.891063][ T5842] fuse: Bad value for 'fd'
[  157.931846][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  157.971092][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  158.015083][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  158.069005][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  158.078596][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  158.102509][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'.
[  158.121607][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  158.143903][ T5853] device ipvlan2 entered promiscuous mode
[  158.162443][ T4212] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID vffffff.ff Device [syz0] on syz0
[  158.173873][ T5853] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  158.213348][ T5853] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  158.363031][ T5857] tun0: tun_chr_ioctl cmd 1074025675
[  158.368369][ T5857] tun0: persist enabled
[  158.431239][ T5858] tun0: tun_chr_ioctl cmd 1074025675
[  158.446288][ T5858] tun0: persist enabled
[  158.470878][ T5860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.500'.
[  158.698727][ T5869] misc userio: No port type given on /dev/userio
[  158.708240][ T5869] misc userio: The device must be registered before sending interrupts
[  159.537498][ T5878] netlink: 68 bytes leftover after parsing attributes in process `syz.0.505'.
[  159.547708][ T5877] ipt_CLUSTERIP: Please specify destination IP
[  159.782013][ T5882] 9pnet: Insufficient options for proto=fd
[  159.861076][ T5886] fuse: Invalid rootmode
[  159.919024][ T5888] 9pnet: p9_fd_create_unix (5888): problem connecting socket: ./file0/file0: -2
[  160.230199][ T5896] netlink: 40 bytes leftover after parsing attributes in process `syz.3.512'.
[  160.767734][ T5914] misc userio: No port type given on /dev/userio
[  160.778722][ T5914] misc userio: The device must be registered before sending interrupts
[  161.632879][ T5923] fuse: Invalid rootmode
[  161.651817][ T5925] 9pnet: Insufficient options for proto=fd
[  162.142652][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'.
[  162.151648][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.522'.
[  162.202148][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'.
[  164.051505][ T5978] fuse: Invalid rootmode
[  164.365841][ T5992] 9pnet: Insufficient options for proto=fd
[  166.322478][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'.
[  166.346298][ T6027] device ipvlan2 entered promiscuous mode
[  166.443851][ T6027] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  166.730530][ T6027] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  167.773880][ T6044] 9pnet: Insufficient options for proto=fd
[  168.923102][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.5.550'.
[  168.992180][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.5.550'.
[  169.184456][ T6064] fuse: Bad value for 'rootmode'
[  169.872272][ T5948] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  170.442298][ T5948] usb 3-1: Using ep0 maxpacket: 32
[  170.762240][ T5948] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  170.855536][ T5948] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  170.972835][ T5948] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  171.005603][ T5948] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  171.019131][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0
[  172.446373][ T6106] 9pnet: Insufficient options for proto=fd
[  172.792261][ T5948] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  172.801452][ T5948] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  172.819426][ T5948] usb 3-1: Product: syz
[  172.825245][ T5948] usb 3-1: Manufacturer: syz
[  172.842902][ T5948] usb 3-1: config 0 descriptor??
[  172.855507][ T6111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.565'.
[  172.862261][ T5948] usb 3-1: can't set config #0, error -71
[  172.889518][ T5948] usb 3-1: USB disconnect, device number 3
[  172.900839][ T6111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.565'.
[  173.956911][ T6129] loop1: detected capacity change from 0 to 512
[  174.106468][ T6137] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  174.138094][ T6129] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  175.335361][ T6158] 9pnet: Insufficient options for proto=fd
[  175.679140][ T6171] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  175.811950][ T6141] syz.0.571 (6141): drop_caches: 2
[  177.680920][ T6181] loop0: detected capacity change from 0 to 32768
[  177.878108][ T6181] XFS (loop0): Mounting V5 Filesystem
[  177.929479][ T6225] program syz.1.595 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  178.056307][ T6181] XFS (loop0): Ending clean mount
[  178.085206][ T6181] XFS (loop0): Quotacheck needed: Please wait.
[  178.178601][ T6181] XFS (loop0): Quotacheck: Done.
[  178.388230][ T4167] XFS (loop0): Unmounting Filesystem
[  178.785837][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'.
[  180.050168][ T6242] loop5: detected capacity change from 0 to 32768
[  180.401864][ T6242] XFS (loop5): Mounting V5 Filesystem
[  180.620934][ T6242] XFS (loop5): Ending clean mount
[  181.032550][ T4243] Process accounting resumed
[  181.477122][ T5356] XFS (loop5): Unmounting Filesystem
[  182.953382][ T4243] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  183.002441][ T4243] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  183.020294][ T4243] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  183.040579][ T4243] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  183.067828][ T4243] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  183.099472][ T6343] 9pnet_virtio: no channels available for device syz
[  184.014835][ T6350] 9pnet_virtio: no channels available for device syz
[  185.044000][ T6367] loop0: detected capacity change from 0 to 512
[  185.123446][ T6372] 9pnet_virtio: no channels available for device syz
[  185.205679][ T6367] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  186.012255][ T4215] Bluetooth: hci1: command 0x0406 tx timeout
[  186.048147][ T4215] Bluetooth: hci2: command 0x0406 tx timeout
[  186.081229][ T4215] Bluetooth: hci0: command 0x0406 tx timeout
[  186.119998][ T4215] Bluetooth: hci3: command 0x0406 tx timeout
[  186.174699][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'.
[  187.288246][ T6409] loop3: detected capacity change from 0 to 512
[  187.426114][ T6409] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  188.915062][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.971614][ T6432] bond0: (slave rose0): Enslaving as an active interface with an up link
[  189.115526][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  190.364315][   T26] audit: type=1326 audit(1744488272.623:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a59603169 code=0x7ffc0000
[  190.700300][   T26] audit: type=1326 audit(1744488272.623:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a59603169 code=0x7ffc0000
[  191.013204][ T6465] sp0: Synchronizing with TNC
[  194.146991][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.153441][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  195.034870][ T6535] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0
[  195.362149][ T4212] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  195.752330][ T4212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.801517][ T4212] usb 3-1: config 0 has no interfaces?
[  196.173339][ T4212] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  196.218591][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.275968][ T4212] usb 3-1: Product: syz
[  196.319132][ T4212] usb 3-1: Manufacturer: syz
[  196.353824][ T4212] usb 3-1: SerialNumber: syz
[  196.398486][ T4212] usb 3-1: config 0 descriptor??
[  196.666917][ T4212] usb 3-1: USB disconnect, device number 4
[  198.672444][ T6575] loop9: detected capacity change from 0 to 8
[  198.686844][ T6577] fuse: Unknown parameter 'fd0x0000000000000004'
[  198.776881][ T6575]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  198.849698][ T6575] loop9: partition table partially beyond EOD, truncated
[  198.902409][ T6575] loop9: p1 size 81768186 extends beyond EOD, truncated
[  199.158213][ T6578]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  199.204482][ T6578] loop9: partition table partially beyond EOD, truncated
[  199.282295][ T6578] loop9: p1 size 81768186 extends beyond EOD, truncated
[  199.478685][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.686'.
[  199.720340][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'.
[  199.823577][ T6590] device bridge_slave_1 left promiscuous mode
[  199.866235][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.040273][ T6590] device bridge_slave_0 left promiscuous mode
[  200.089770][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.219518][ T6624] befs: (nullb0): No write support. Marking filesystem read-only
[  202.421532][ T6624] befs: (nullb0): invalid magic header
[  202.792193][ T5948] kernel write not supported for file /amidi2 (pid: 5948 comm: kworker/1:7)
[  202.848811][ T6634] program syz.3.701 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  205.700170][ T6663] /dev/nullb0: Can't open blockdev
[  205.883368][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'.
[  205.908979][ T4213] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  206.031373][ T4213] Bluetooth: hci5: Injecting HCI hardware error event
[  206.086284][ T4180] Bluetooth: hci5: hardware error 0x00
[  207.189838][ T6672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.314596][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'.
[  207.859797][ T6684] sp0: Synchronizing with TNC
[  208.927896][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.722'.
[  209.421864][ T6715] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  209.570022][ T6718] afs: Unknown parameter 'Ì”ÿ'
[  209.764324][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'.
[  210.397274][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'.
[  211.162166][ T4213] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  211.482617][ T4213] usb 3-1: Using ep0 maxpacket: 8
[  211.939779][ T4213] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  212.714848][ T4213] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  212.754025][ T4213] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  212.755631][ T6749] ceph: No mds server is up or the cluster is laggy
[  212.778077][   T23] libceph: connect (1)[c::]:6789 error -101
[  212.797166][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  212.919258][ T4170] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  212.982106][ T4213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.083223][ T4213] usbtmc 3-1:16.0: bulk endpoints not found
[  213.322441][ T4170] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.359357][ T4170] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  213.582392][ T4170] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  213.638026][ T4213] usb 3-1: USB disconnect, device number 5
[  213.673676][ T4170] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  214.030316][ T4170] usb 2-1: Product: syz
[  214.298856][ T6769] input: syz1 as /devices/virtual/input/input10
[  214.540830][ T4170] usb 2-1: Manufacturer: syz
[  214.546223][ T4170] usb 2-1: SerialNumber: syz
[  214.566675][ T4170] usb 2-1: config 0 descriptor??
[  214.875100][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'.
[  215.442440][ T4212] usb 2-1: USB disconnect, device number 4
[  216.772187][   T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  217.052231][   T21] usb 6-1: Using ep0 maxpacket: 8
[  217.202977][   T21] usb 6-1: config 0 has no interfaces?
[  217.208512][   T21] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  217.335880][   T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.353150][   T21] usb 6-1: config 0 descriptor??
[  217.936172][   T21] usb 6-1: USB disconnect, device number 4
[  219.400896][ T6824] 9pnet_virtio: no channels available for device syz
[  219.410788][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'.
[  220.753523][ T4213] Bluetooth: hci4: command 0x0409 tx timeout
[  221.008413][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.761'.
[  221.670724][ T6817] chnl_net:caif_netlink_parms(): no params data found
[  222.190800][ T6868] 9pnet_virtio: no channels available for device syz
[  222.200014][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'.
[  222.792238][ T4211] Bluetooth: hci4: command 0x041b tx timeout
[  222.820892][   T26] audit: type=1326 audit(1744488305.073:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.1.766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2287e8d169 code=0x0
[  222.865052][ T6875] netlink: 156 bytes leftover after parsing attributes in process `syz.1.766'.
[  223.505425][ T4988] Bluetooth: hci0: command 0x0401 tx timeout
[  223.577884][ T6817] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.662386][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.734613][ T6817] device bridge_slave_0 entered promiscuous mode
[  223.844521][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.905382][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.010687][ T6817] device bridge_slave_1 entered promiscuous mode
[  224.452113][ T6902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.771'.
[  224.467794][ T6817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.621345][ T6817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.971290][ T4988] Bluetooth: hci4: command 0x040f tx timeout
[  225.658212][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout
[  226.291591][ T6817] team0: Port device team_slave_0 added
[  226.349959][ T6817] team0: Port device team_slave_1 added
[  226.927396][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.962055][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.023307][   T21] Bluetooth: hci4: command 0x0419 tx timeout
[  227.509632][ T6817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.684802][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.691783][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.043040][ T6817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.536249][ T6817] device hsr_slave_0 entered promiscuous mode
[  228.677714][ T6817] device hsr_slave_1 entered promiscuous mode
[  228.707960][ T6817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  228.819050][ T6817] Cannot create hsr debugfs directory
[  230.086608][ T6817] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  230.195616][ T6817] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  230.293206][ T6817] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  230.393189][ T6817] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  230.683403][ T6934] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  231.133612][ T6817] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.244498][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  231.272890][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  231.486143][ T6817] 8021q: adding VLAN 0 to HW filter on device team0
[  231.566602][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  231.633023][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  231.694292][ T4984] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.701385][ T4984] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.893918][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  231.952976][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  232.041872][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  232.122648][ T4984] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.129747][ T4984] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.280275][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  232.434203][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  232.524756][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  232.653543][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  232.738690][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  232.822140][ T4988] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  232.845612][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  232.983952][ T6817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  232.994707][ T6957] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0
[  233.124056][ T6817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  233.212394][ T4988] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.267114][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  233.286000][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  233.295028][ T4988] usb 6-1: config 0 has no interfaces?
[  233.382669][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  233.463284][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  233.502353][ T4988] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  233.511439][ T4988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.563915][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  233.622103][ T4988] usb 6-1: Product: syz
[  233.646824][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  233.672100][ T4988] usb 6-1: Manufacturer: syz
[  233.676737][ T4988] usb 6-1: SerialNumber: syz
[  233.778916][ T4988] usb 6-1: config 0 descriptor??
[  234.031461][ T6967] netlink: 'syz.2.786': attribute type 10 has an invalid length.
[  234.075938][ T5948] usb 6-1: USB disconnect, device number 5
[  234.261195][ T6967] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  234.879158][ T6977] 9pnet_virtio: no channels available for device syz
[  234.888456][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'.
[  235.002700][ T5349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  235.046441][ T5349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  235.531729][ T6817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.758386][ T6988] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3107265034/3107265036
[  235.834394][ T6988] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3107265034/3107265036
[  237.039278][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  237.141873][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  237.287291][ T6817] device veth0_vlan entered promiscuous mode
[  237.421157][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  237.441082][   T26] audit: type=1326 audit(1744488319.693:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2287e29359 code=0x7ffc0000
[  237.463054][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  237.465327][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  237.612896][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  237.688690][   T26] audit: type=1326 audit(1744488319.763:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2287e29359 code=0x7ffc0000
[  237.716761][ T6817] device veth1_vlan entered promiscuous mode
[  237.892100][   T26] audit: type=1326 audit(1744488319.763:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2287e29359 code=0x7ffc0000
[  237.936153][ T4767] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.058992][ T4767] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.141286][   T26] audit: type=1326 audit(1744488319.763:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2287e29359 code=0x7ffc0000
[  238.208499][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  238.243014][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  238.310114][   T26] audit: type=1326 audit(1744488319.763:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2287e29359 code=0x7ffc0000
[  238.459141][ T6817] device veth0_macvtap entered promiscuous mode
[  238.522838][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  238.531853][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  238.543784][   T26] audit: type=1326 audit(1744488319.763:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2287e29359 code=0x7ffc0000
[  238.642928][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  238.725158][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.744955][   T26] audit: type=1326 audit(1744488319.763:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2287e29359 code=0x7ffc0000
[  238.767888][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.870233][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.942877][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.982056][   T26] audit: type=1326 audit(1744488319.763:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2287e29359 code=0x7ffc0000
[  239.032298][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.084882][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.142113][   T26] audit: type=1326 audit(1744488319.763:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2287e29359 code=0x7ffc0000
[  239.304568][ T4767] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.360574][   T26] audit: type=1326 audit(1744488319.763:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2287e29359 code=0x7ffc0000
[  239.415853][ T4767] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.533072][ T6817] device veth1_macvtap entered promiscuous mode
[  239.541453][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  239.637614][ T4767] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.737312][ T4767] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.845970][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.924994][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.002130][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.092965][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.181569][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.276970][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.356275][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.428408][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.504314][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.573289][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.808'.
[  240.656651][ T7041] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  240.665604][ T7041] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  240.674409][ T7041] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  240.683178][ T7041] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  240.888121][ T7047] cgroup: fork rejected by pids controller in /syz2
[  241.012877][ T7041] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.021778][ T7041] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.030872][ T7041] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.039809][ T7041] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.599207][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  241.628638][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  241.801888][ T4767] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.873359][ T4767] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.165235][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.292111][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.532067][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.592057][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.673339][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.734914][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.813243][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.298147][ T4243] Process accounting resumed
[  243.759810][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  243.809782][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  243.888219][ T6817] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.921314][ T6817] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.932102][ T4212] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  244.012149][ T6817] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.020961][ T6817] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.192203][ T4212] usb 6-1: Using ep0 maxpacket: 32
[  244.325482][ T4212] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  244.384217][ T4212] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  244.458331][ T4212] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  244.541155][ T4212] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  244.642099][ T4212] usb 6-1: config 0 interface 0 has no altsetting 0
[  244.902337][ T4212] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  244.962943][ T4212] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  245.062153][ T4212] usb 6-1: Product: syz
[  245.082144][ T4212] usb 6-1: Manufacturer: syz
[  245.122113][ T4212] usb 6-1: SerialNumber: syz
[  245.220168][ T4212] usb 6-1: config 0 descriptor??
[  245.297389][ T4212] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  245.392408][ T4212] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  245.463645][ T5586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.522236][ T5586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.217877][ T7085] usb 6-1: USB disconnect, device number 6
[  246.226578][ T7085] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  246.373031][ T4767] bond1: (slave ip6erspan0): Releasing active interface
[  246.529493][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  246.601104][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.692350][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.703306][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  247.911293][ T7112] 9pnet_virtio: no channels available for device syz
[  247.920580][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.827'.
[  250.353210][ T7117] chnl_net:caif_netlink_parms(): no params data found
[  250.382279][ T1108] Bluetooth: hci1: command 0x0409 tx timeout
[  250.566123][ T1108] libceph: connect (1)[c::]:6789 error -101
[  250.582547][ T7138] ceph: No mds server is up or the cluster is laggy
[  250.595980][ T1108] libceph: mon0 (1)[c::]:6789 connect error
[  250.772588][ T4767] device hsr_slave_0 left promiscuous mode
[  250.911872][ T4767] device hsr_slave_1 left promiscuous mode
[  250.938568][ T4767] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.032175][ T4767] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.139830][ T4767] device bridge_slave_1 left promiscuous mode
[  251.224312][ T4767] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.353179][ T4767] device bridge_slave_0 left promiscuous mode
[  251.359442][ T4767] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.622528][ T4767] device veth1_macvtap left promiscuous mode
[  251.700081][ T4767] device veth0_macvtap left promiscuous mode
[  251.750811][ T4767] device veth1_vlan left promiscuous mode
[  251.802191][ T4767] device veth0_vlan left promiscuous mode
[  251.819341][ T7156] loop6: detected capacity change from 0 to 512
[  252.011371][ T7156] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities
[  252.462306][ T5172] Bluetooth: hci1: command 0x041b tx timeout
[  253.355856][ T4767] bond1 (unregistering): Released all slaves
[  254.513964][ T4767] team0 (unregistering): Port device team_slave_1 removed
[  254.542243][ T4170] Bluetooth: hci1: command 0x040f tx timeout
[  254.699535][ T4767] team0 (unregistering): Port device team_slave_0 removed
[  254.870325][ T4767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  255.042374][ T4767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  255.584701][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.591040][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  256.141285][ T4767] bond0 (unregistering): Released all slaves
[  256.541491][ T7171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  256.549343][ T7171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  256.560361][ T7171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  256.568160][ T7171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  256.576485][ T7171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  256.584275][ T7171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  256.705429][ T1108] Bluetooth: hci1: command 0x0419 tx timeout
[  257.302574][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  257.313814][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  257.321345][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  257.333000][ T7191] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  257.688000][ T7198] exFAT-fs (nullb0): invalid boot record signature
[  258.292526][ T7198] exFAT-fs (nullb0): failed to read boot sector
[  258.377319][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.402477][ T7198] exFAT-fs (nullb0): failed to recognize exfat type
[  258.822410][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.013330][ T7117] device bridge_slave_0 entered promiscuous mode
[  259.068322][ T7209] loop5: detected capacity change from 0 to 512
[  259.143695][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.252046][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.272098][ T7209] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities
[  259.327392][ T7117] device bridge_slave_1 entered promiscuous mode
[  259.604747][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.847'.
[  259.692440][ T7212] netlink: 20 bytes leftover after parsing attributes in process `syz.6.847'.
[  259.968706][ T7117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.030317][ T7117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.112201][ T4212] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  260.522312][ T4212] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  260.530507][ T7117] team0: Port device team_slave_0 added
[  260.531468][ T4212] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  260.683389][ T7117] team0: Port device team_slave_1 added
[  260.751325][ T4212] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  260.962714][ T4212] usb 6-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping
[  261.152148][ T4212] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  261.305623][ T4212] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  261.552332][ T4212] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  261.566859][ T4212] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  262.319827][ T4212] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  262.504682][ T4212] usb 6-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping
[  262.646822][ T4212] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  262.832155][ T4212] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  263.022231][ T4212] usb 6-1: unable to read config index 2 descriptor/start: -71
[  263.091338][ T4212] usb 6-1: can't read configurations, error -71
[  263.290494][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.303520][ T7246] 9pnet_virtio: no channels available for device syz
[  263.312575][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.855'.
[  263.640398][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.022169][ T7117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.202628][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.209750][ T7254] sp0: Synchronizing with TNC
[  264.280103][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.621258][ T7117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.222231][ T7257] afs: Unknown parameter 'Ì”ÿ'
[  265.286246][ T7117] device hsr_slave_0 entered promiscuous mode
[  265.600787][ T7117] device hsr_slave_1 entered promiscuous mode
[  265.969498][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.857'.
[  266.018648][ T7117] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  266.034942][ T7117] Cannot create hsr debugfs directory
[  266.437632][ T7268] loop5: detected capacity change from 0 to 512
[  266.767191][ T7268] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities
[  267.913292][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  268.302605][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  268.373278][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  268.381072][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  268.932460][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  268.940172][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  271.167113][ T7305] 9pnet_virtio: no channels available for device syz
[  271.176223][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'.
[  271.708094][ T7117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.972850][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'.
[  272.416425][ T7117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.532695][ T7322] loop5: detected capacity change from 0 to 512
[  272.675243][ T7117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.746613][ T7322] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities
[  273.129834][ T7117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.146451][ T7342] 9pnet_virtio: no channels available for device syz
[  274.157009][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'.
[  274.352016][ T7350] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0
[  274.436628][ T7351] exFAT-fs (nullb0): invalid boot record signature
[  274.540455][ T7351] exFAT-fs (nullb0): failed to read boot sector
[  274.612351][ T7351] exFAT-fs (nullb0): failed to recognize exfat type
[  274.635800][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.880'.
[  274.665993][ T7117] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  274.732499][ T7357] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  274.972714][ T7117] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  275.151195][ T7117] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  275.335463][ T7117] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  276.903472][ T7373] 9pnet_virtio: no channels available for device syz
[  277.042551][ T7376] loop3: detected capacity change from 0 to 512
[  277.267447][ T7376] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  277.563135][ T7117] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.783125][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  277.791205][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  277.913583][ T7117] 8021q: adding VLAN 0 to HW filter on device team0
[  278.273325][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  278.423446][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  278.840414][ T7392] 9pnet_virtio: no channels available for device syz
[  278.849155][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.890'.
[  279.051672][ T4984] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.058875][ T4984] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.068323][ T7399] exFAT-fs (nullb0): invalid boot record signature
[  279.162035][ T7399] exFAT-fs (nullb0): failed to read boot sector
[  279.239931][ T7399] exFAT-fs (nullb0): failed to recognize exfat type
[  279.272826][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.892'.
[  279.315900][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  279.715245][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  279.746790][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  280.182650][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.189807][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.481699][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  280.713695][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  280.837694][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.896'.
[  280.916352][ T7416] loop6: detected capacity change from 0 to 512
[  281.029708][ T7418] fuse: Invalid rootmode
[  281.141687][ T7416] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities
[  281.313880][ T7393] syz.1.891 (7393): drop_caches: 2
[  281.402250][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  281.478685][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  281.573343][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  281.698319][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  281.759445][ T7432] usb usb8: usbfs: process 7432 (syz.5.902) did not claim interface 0 before use
[  281.818307][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  282.139239][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  282.308879][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  282.390812][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  282.510655][ T7117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  282.570111][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.898'.
[  282.710943][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.898'.
[  282.895934][ T7424] device team0 entered promiscuous mode
[  283.012143][ T7424] device team0 left promiscuous mode
[  283.054917][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  283.232305][   T26] kauditd_printk_skb: 57 callbacks suppressed
[  283.232332][   T26] audit: type=1800 audit(1744488365.483:75): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.905" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  283.396167][ T7455] exFAT-fs (nullb0): invalid boot record signature
[  283.592054][ T7455] exFAT-fs (nullb0): failed to read boot sector
[  283.598917][ T7455] exFAT-fs (nullb0): failed to recognize exfat type
[  283.677564][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'.
[  284.996433][ T7481] loop6: detected capacity change from 0 to 512
[  285.359866][ T7481] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities
[  285.612342][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  285.619930][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  285.652160][ T4243] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  285.742266][ T4767] tipc: Disabling bearer <udp:syz2>
[  285.750705][ T4767] tipc: Left network mode
[  285.756901][ T7117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.032311][ T4243] usb 4-1: config 0 has no interfaces?
[  286.039166][ T4243] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  286.454268][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.915'.
[  286.682888][ T4243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.693803][ T4243] usb 4-1: config 0 descriptor??
[  286.712803][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  286.836809][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  287.163370][ T4243] usb 4-1: string descriptor 0 read error: -71
[  287.196835][ T4243] usb 4-1: USB disconnect, device number 2
[  287.298612][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  287.330042][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  287.443205][ T7117] device veth0_vlan entered promiscuous mode
[  287.504830][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  287.566008][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  287.680698][ T7117] device veth1_vlan entered promiscuous mode
[  287.766149][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  288.024605][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.6.919'.
[  288.455647][   T26] audit: type=1326 audit(1744488370.713:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a59603169 code=0x7ffc0000
[  288.997456][   T26] audit: type=1326 audit(1744488370.743:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a59603169 code=0x7ffc0000
[  289.470484][ T7536] exFAT-fs (nullb0): invalid boot record signature
[  289.514296][ T7536] exFAT-fs (nullb0): failed to read boot sector
[  289.569607][ T7117] device veth0_macvtap entered promiscuous mode
[  289.657782][ T7536] exFAT-fs (nullb0): failed to recognize exfat type
[  289.666729][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.921'.
[  289.686216][ T7539] block device autoloading is deprecated. It will be removed in Linux 5.19
[  289.724753][ T7539] 9pnet_virtio: no channels available for device syz
[  289.754051][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  289.796424][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  290.661320][ T7117] device veth1_macvtap entered promiscuous mode
[  290.733706][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  290.864586][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.069855][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.192077][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.298918][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.401610][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.525062][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.623743][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.746537][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.884619][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.024429][ T7547] device hsr_slave_0 left promiscuous mode
[  292.108417][ T7547] device hsr_slave_1 left promiscuous mode
[  292.443833][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  292.498900][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  292.623474][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.692471][ T7553] loop1: detected capacity change from 0 to 512
[  292.710179][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.822885][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.922109][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.032092][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.125389][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.264599][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.291025][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.351482][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.380507][ T7553] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  293.634550][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  293.713002][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  293.831720][ T7117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.932143][ T7117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.940885][ T7117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.142095][ T4243] Bluetooth: hci1: command 0x0405 tx timeout
[  294.152039][ T7117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.322126][ T7569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.930'.
[  294.726903][ T4767] IPVS: stopping master sync thread 6535 ...
[  294.741317][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.863817][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.977545][ T4767] bond0: (slave wlan1): Releasing backup interface
[  295.317407][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  295.583676][ T4984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.682702][ T4984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.843880][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  295.957619][ T4767] device hsr_slave_0 left promiscuous mode
[  296.062427][ T4767] device hsr_slave_1 left promiscuous mode
[  296.808807][ T4767] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  296.851435][ T4767] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.732498][ T4767] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.740412][ T4767] batman_adv: batadv0: Removing interface: batadv_slave_1
[  298.112615][ T4767] device veth1_macvtap left promiscuous mode
[  298.118645][ T4767] device veth0_macvtap left promiscuous mode
[  298.263576][ T4767] device veth1_vlan left promiscuous mode
[  298.315310][ T4767] device veth0_vlan left promiscuous mode
[  300.026452][ T7595] ksmbd: Unknown IPC event: 6, ignore.
[  300.739887][ T7627] loop2: detected capacity change from 0 to 512
[  301.065721][ T7627] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  303.721438][ T7644] kvm [7643]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x3
[  303.760208][ T4767] team0 (unregistering): Port device team_slave_1 removed
[  303.915327][ T4767] team0 (unregistering): Port device team_slave_0 removed
[  304.082487][ T4767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.313165][ T4767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  305.639800][ T4767] bond0 (unregistering): Released all slaves
[  305.912319][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.6.940'.
[  306.732593][ T7662] input: syz0 as /devices/virtual/input/input16
[  307.443535][ T7677] exFAT-fs (nullb0): invalid boot record signature
[  307.557155][ T7677] exFAT-fs (nullb0): failed to read boot sector
[  307.563928][ T7677] exFAT-fs (nullb0): failed to recognize exfat type
[  310.751882][ T7697] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  312.359587][ T7716] input: syz0 as /devices/virtual/input/input18
[  316.104520][ T7751] netlink: 'syz.2.973': attribute type 4 has an invalid length.
[  317.033622][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.040085][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.074566][ T7761] fuse: Bad value for 'fd'
[  317.499455][ T4179] Bluetooth: hci4: Unknown advertising packet type: 0x7474
[  317.499794][ T4179] ==================================================================
[  317.515656][ T4179] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11d6/0x3f50
[  317.523521][ T4179] Read of size 1 at addr ffff88807d881c0a by task kworker/u5:5/4179
[  317.531614][ T4179] 
[  317.533961][ T4179] CPU: 1 PID: 4179 Comm: kworker/u5:5 Not tainted 5.15.180-syzkaller #0
[  317.542316][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  317.552401][ T4179] Workqueue: hci4 hci_rx_work
[  317.557121][ T4179] Call Trace:
[  317.560413][ T4179]  <TASK>
[  317.563355][ T4179]  dump_stack_lvl+0x1e3/0x2d0
[  317.568061][ T4179]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  317.573721][ T4179]  ? _printk+0xd1/0x120
[  317.577926][ T4179]  ? __wake_up_klogd+0xcc/0x100
[  317.582804][ T4179]  ? panic+0x860/0x860
[  317.586894][ T4179]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  317.592380][ T4179]  print_address_description+0x63/0x3b0
[  317.597945][ T4179]  ? hci_le_meta_evt+0x11d6/0x3f50
[  317.603074][ T4179]  kasan_report+0x16b/0x1c0
[  317.607596][ T4179]  ? hci_le_meta_evt+0x11d6/0x3f50
[  317.612731][ T4179]  hci_le_meta_evt+0x11d6/0x3f50
[  317.618206][ T4179]  ? __lock_acquire+0x1ff0/0x1ff0
[  317.623283][ T4179]  ? hci_remote_host_features_evt+0x280/0x280
[  317.629459][ T4179]  ? __mutex_unlock_slowpath+0x218/0x750
[  317.635116][ T4179]  ? hci_event_packet+0x3b4/0x1550
[  317.640254][ T4179]  ? mutex_unlock+0x10/0x10
[  317.644785][ T4179]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  317.650790][ T4179]  ? print_irqtrace_events+0x210/0x210
[  317.656280][ T4179]  hci_event_packet+0xc41/0x1550
[  317.661251][ T4179]  ? rcu_lock_release+0x20/0x20
[  317.666131][ T4179]  ? hci_send_to_monitor+0x99/0x4d0
[  317.671346][ T4179]  hci_rx_work+0x237/0xa10
[  317.675794][ T4179]  process_one_work+0x8a1/0x10c0
[  317.680779][ T4179]  ? worker_detach_from_pool+0x260/0x260
[  317.686442][ T4179]  ? _raw_spin_lock_irqsave+0x120/0x120
[  317.692008][ T4179]  ? kthread_data+0x4e/0xc0
[  317.696529][ T4179]  ? wq_worker_running+0x97/0x170
[  317.701654][ T4179]  worker_thread+0xaca/0x1280
[  317.706381][ T4179]  kthread+0x3f6/0x4f0
[  317.710731][ T4179]  ? rcu_lock_release+0x20/0x20
[  317.715598][ T4179]  ? kthread_blkcg+0xd0/0xd0
[  317.720203][ T4179]  ret_from_fork+0x1f/0x30
[  317.724648][ T4179]  </TASK>
[  317.727672][ T4179] 
[  317.729997][ T4179] Allocated by task 7767:
[  317.734325][ T4179]  ____kasan_kmalloc+0xba/0xf0
[  317.739095][ T4179]  __kmalloc_node_track_caller+0x195/0x390
[  317.744911][ T4179]  __alloc_skb+0x12c/0x590
[  317.749338][ T4179]  vhci_write+0xbc/0x430
[  317.753585][ T4179]  vfs_write+0xacd/0xe50
[  317.757836][ T4179]  ksys_write+0x1a2/0x2c0
[  317.762174][ T4179]  do_syscall_64+0x3b/0xb0
[  317.766602][ T4179]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  317.772505][ T4179] 
[  317.774832][ T4179] Last potentially related work creation:
[  317.780571][ T4179]  kasan_save_stack+0x36/0x60
[  317.785255][ T4179]  kasan_record_aux_stack+0xba/0x100
[  317.790553][ T4179]  kvfree_call_rcu+0x118/0x8a0
[  317.795328][ T4179]  batadv_hard_if_event+0x8aa/0x17c0
[  317.800628][ T4179]  raw_notifier_call_chain+0xd0/0x170
[  317.806015][ T4179]  unregister_netdevice_many+0xe98/0x1840
[  317.811744][ T4179]  default_device_exit_batch+0x390/0x3f0
[  317.817405][ T4179]  cleanup_net+0x886/0xc90
[  317.821848][ T4179]  process_one_work+0x8a1/0x10c0
[  317.826825][ T4179]  worker_thread+0xaca/0x1280
[  317.831530][ T4179]  kthread+0x3f6/0x4f0
[  317.835624][ T4179]  ret_from_fork+0x1f/0x30
[  317.840066][ T4179] 
[  317.842400][ T4179] The buggy address belongs to the object at ffff88807d881800
[  317.842400][ T4179]  which belongs to the cache kmalloc-1k of size 1024
[  317.856470][ T4179] The buggy address is located 10 bytes to the right of
[  317.856470][ T4179]  1024-byte region [ffff88807d881800, ffff88807d881c00)
[  317.870291][ T4179] The buggy address belongs to the page:
[  317.875953][ T4179] page:ffffea0001f62000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d880
[  317.886136][ T4179] head:ffffea0001f62000 order:3 compound_mapcount:0 compound_pincount:0
[  317.894482][ T4179] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  317.902514][ T4179] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441dc0
[  317.911128][ T4179] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  317.919732][ T4179] page dumped because: kasan: bad access detected
[  317.926172][ T4179] page_owner tracks the page as allocated
[  317.931962][ T4179] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4168, ts 61974490354, free_ts 61916942978
[  317.949012][ T4179]  get_page_from_freelist+0x3b78/0x3d40
[  317.954629][ T4179]  __alloc_pages+0x272/0x700
[  317.959246][ T4179]  new_slab+0xbb/0x4b0
[  317.963341][ T4179]  ___slab_alloc+0x6f6/0xe10
[  317.967960][ T4179]  kmem_cache_alloc_trace+0x1a0/0x290
[  317.973356][ T4179]  batadv_hard_if_event+0xea3/0x17c0
[  317.978706][ T4179]  raw_notifier_call_chain+0xd0/0x170
[  317.984145][ T4179]  register_netdevice+0x128e/0x16a0
[  317.989373][ T4179]  geneve_configure+0x6c6/0xa60
[  317.994252][ T4179]  geneve_newlink+0xfb/0x1a0
[  317.998869][ T4179]  rtnl_newlink+0x14ca/0x2050
[  318.003575][ T4179]  rtnetlink_rcv_msg+0x99d/0xef0
[  318.008628][ T4179]  netlink_rcv_skb+0x1cf/0x410
[  318.013427][ T4179]  netlink_unicast+0x7c0/0x990
[  318.018218][ T4179]  netlink_sendmsg+0xa30/0xd60
[  318.023015][ T4179]  __sys_sendto+0x564/0x720
[  318.027546][ T4179] page last free stack trace:
[  318.032230][ T4179]  free_unref_page_prepare+0xc34/0xcf0
[  318.037715][ T4179]  free_unref_page+0x95/0x2d0
[  318.042420][ T4179]  __unfreeze_partials+0x1b7/0x210
[  318.047554][ T4179]  put_cpu_partial+0x132/0x1a0
[  318.052350][ T4179]  ___cache_free+0xe3/0x100
[  318.056880][ T4179]  qlist_free_all+0x36/0x90
[  318.061409][ T4179]  kasan_quarantine_reduce+0x162/0x180
[  318.066892][ T4179]  __kasan_slab_alloc+0x2f/0xc0
[  318.071769][ T4179]  slab_post_alloc_hook+0x53/0x380
[  318.076914][ T4179]  kmem_cache_alloc+0xf3/0x280
[  318.081700][ T4179]  __kernfs_new_node+0xdb/0x750
[  318.086577][ T4179]  kernfs_new_node+0x136/0x230
[  318.091367][ T4179]  __kernfs_create_file+0x45/0x2e0
[  318.096504][ T4179]  sysfs_add_file_mode_ns+0x308/0x3e0
[  318.101904][ T4179]  sysfs_create_file_ns+0x196/0x2a0
[  318.107235][ T4179]  device_add+0x541/0xfd0
[  318.111591][ T4179] 
[  318.113926][ T4179] Memory state around the buggy address:
[  318.119658][ T4179]  ffff88807d881b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  318.127789][ T4179]  ffff88807d881b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  318.135875][ T4179] >ffff88807d881c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  318.143949][ T4179]                       ^
[  318.148294][ T4179]  ffff88807d881c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  318.156375][ T4179]  ffff88807d881d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  318.164455][ T4179] ==================================================================
[  318.172536][ T4179] Disabling lock debugging due to kernel taint
[  318.197728][ T4179] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  318.204963][ T4179] CPU: 1 PID: 4179 Comm: kworker/u5:5 Tainted: G    B             5.15.180-syzkaller #0
[  318.214792][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  318.224867][ T4179] Workqueue: hci4 hci_rx_work
[  318.229714][ T4179] Call Trace:
[  318.233010][ T4179]  <TASK>
[  318.235955][ T4179]  dump_stack_lvl+0x1e3/0x2d0
[  318.240672][ T4179]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  318.246339][ T4179]  ? panic+0x860/0x860
[  318.250432][ T4179]  ? preempt_schedule_irq+0x155/0x1c0
[  318.255832][ T4179]  panic+0x318/0x860
[  318.259748][ T4179]  ? check_panic_on_warn+0x1d/0xa0
[  318.264881][ T4179]  ? fb_is_primary_device+0xd0/0xd0
[  318.270105][ T4179]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  318.275765][ T4179]  ? check_panic_on_warn+0x1d/0xa0
[  318.280908][ T4179]  ? check_panic_on_warn+0x6a/0xa0
[  318.286049][ T4179]  check_panic_on_warn+0x7e/0xa0
[  318.291196][ T4179]  ? hci_le_meta_evt+0x11d6/0x3f50
[  318.296336][ T4179]  end_report+0x6d/0xf0
[  318.300518][ T4179]  kasan_report+0x18e/0x1c0
[  318.305055][ T4179]  ? hci_le_meta_evt+0x11d6/0x3f50
[  318.310197][ T4179]  hci_le_meta_evt+0x11d6/0x3f50
[  318.315158][ T4179]  ? __lock_acquire+0x1ff0/0x1ff0
[  318.320216][ T4179]  ? hci_remote_host_features_evt+0x280/0x280
[  318.326307][ T4179]  ? __mutex_unlock_slowpath+0x218/0x750
[  318.331965][ T4179]  ? hci_event_packet+0x3b4/0x1550
[  318.337109][ T4179]  ? mutex_unlock+0x10/0x10
[  318.341650][ T4179]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  318.347658][ T4179]  ? print_irqtrace_events+0x210/0x210
[  318.353155][ T4179]  hci_event_packet+0xc41/0x1550
[  318.358121][ T4179]  ? rcu_lock_release+0x20/0x20
[  318.363009][ T4179]  ? hci_send_to_monitor+0x99/0x4d0
[  318.368235][ T4179]  hci_rx_work+0x237/0xa10
[  318.372685][ T4179]  process_one_work+0x8a1/0x10c0
[  318.377657][ T4179]  ? worker_detach_from_pool+0x260/0x260
[  318.383317][ T4179]  ? _raw_spin_lock_irqsave+0x120/0x120
[  318.388963][ T4179]  ? kthread_data+0x4e/0xc0
[  318.393499][ T4179]  ? wq_worker_running+0x97/0x170
[  318.398547][ T4179]  worker_thread+0xaca/0x1280
[  318.403265][ T4179]  kthread+0x3f6/0x4f0
[  318.407352][ T4179]  ? rcu_lock_release+0x20/0x20
[  318.412229][ T4179]  ? kthread_blkcg+0xd0/0xd0
[  318.416837][ T4179]  ret_from_fork+0x1f/0x30
[  318.421292][ T4179]  </TASK>
[  318.424578][ T4179] Kernel Offset: disabled
[  318.429011][ T4179] Rebooting in 86400 seconds..