last executing test programs:

2m55.375992451s ago: executing program 4 (id=44):
r0 = syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8,utf8,iocharset=cp862,iocharset=cp864,discard,errors=remount-ro,fmask=00000000000000000007777,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030304855cc046b4d3030303030303030303030333737372c0002e5cc2c3640"], 0x1, 0x1526, &(0x7f0000000780)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file1\x00'})
syz_clone3(&(0x7f0000003f40)={0x10200, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
r2 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, 0x0)
getgid()
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fchown(r4, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0)

2m55.121392005s ago: executing program 4 (id=45):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000003a0002"], 0x26}}, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r2, 0x0, 0x0, 0x0, &(0x7f0000000880)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x24)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
read$qrtrtun(r1, &(0x7f0000001680)=""/187, 0xbb)

2m54.501685839s ago: executing program 4 (id=48):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x2)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x3, 0x1)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x209, 0x400100, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
close(r0)

2m54.025279629s ago: executing program 4 (id=52):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setresuid(0xee01, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000005c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$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")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

2m53.771628718s ago: executing program 4 (id=54):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x10000000)

2m50.356733793s ago: executing program 4 (id=62):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[], 0x5, 0x6cb, &(0x7f0000001400)="$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")
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x13)
ptrace(0x4206, r3)

2m49.179255533s ago: executing program 32 (id=62):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[], 0x5, 0x6cb, &(0x7f0000001400)="$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")
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x13)
ptrace(0x4206, r3)

1m9.489771118s ago: executing program 2 (id=280):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0)

1m7.38454996s ago: executing program 2 (id=284):
syz_usb_connect$uac1(0x2, 0x82, &(0x7f0000000dc0)={{0x12, 0x1, 0x151, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x7, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x9}, [@extension_unit={0x9, 0x24, 0x8, 0x4, 0x6, 0x56, "5da3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x57, 0x5, 0x6, {0x7, 0x25, 0x1, 0x81, 0x1, 0x5099}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf, 0x3, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x7, 0x4, {0x7, 0x25, 0x1, 0x82, 0x2, 0x9}}}}}}}]}}, 0x0)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x3)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
unshare(0x22020400)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe22}, 0x1c)
listen(0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x4c6482, 0x0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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")

1m4.535634844s ago: executing program 2 (id=290):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x1, 0x2}, &(0x7f0000000340)=0x90)

1m3.058039931s ago: executing program 2 (id=292):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000001200)={[{@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x200)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r2, 0x100, 0x0)
getdents64(r2, 0x0, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118300000000008510000002000000850000005500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
ftruncate(0xffffffffffffffff, 0x81fd)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

1m2.028182598s ago: executing program 2 (id=294):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38)

58.391333949s ago: executing program 2 (id=302):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
r1 = eventfd2(0x2, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180), 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096, 0xeeef0000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

57.636597137s ago: executing program 33 (id=302):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
r1 = eventfd2(0x2, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180), 0xd, 0x5d8, &(0x7f0000000c00)="$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")
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096, 0xeeef0000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

14.602853151s ago: executing program 3 (id=392):
sched_setaffinity(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fanotify_init(0x4c, 0x0)

12.365852036s ago: executing program 0 (id=398):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x205, 0x4)
syz_clone(0x10814200, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, 0x0)

10.836650885s ago: executing program 0 (id=401):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000000)={[{@hide}, {@nocompress}, {@hide}, {@session={'session', 0x3d, 0x5a}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {}]}, 0x1, 0x54b, &(0x7f0000000580)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwiOYx+f8ztu5J/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+8DK+TWvmJMvyJW/E9yObmSrrry1e7my/F/czKbvpuVXFzkZPu/l//34NLkxGD/MQF/lt+/sKXNre3nK71e99VRBXIGXb04eltDeyb0TctpaGVCX1UrFfvOYj1UddPU4XIY6ZZyA+1EfqDm3VuqWK2WlS4s+x2vUXOaerDy/u2SbVfUw0JbO0Hoe3ceFkJ30TSbxmskdeLNcZ378QfxkYlUpJ2WUmvrvW45awBxpeKnVCplVSrZpVKxWCoVK/eq9+7b9uSBFfZH5ECNo/vQ4t/pCM/ewOFM9PO/NMWIJx1ZEjX05UpNAvGlNWJ73yD/f3NHj+13b/4fZPkru5tnJMn/19J310bl/xGxnNxrU7ZkW57LivSkJ115deoRneyrIVo8MRKKL0Za4iRrVH+NkqpUpCK2PJFFqUsoSupipClaQlmWUCLRySfKlUC0OBKJL4EomRdXbomSolSlKmVRoqUgy+JLRzxpSE2cpJU1WU+Oe1mUNSrGnUrFkcPIDz53XSmNGS35H4d3pOdv4DD+HuR/AAAAAABwblnJb9/j6/8puZos1U1T26cdFgAAAAAAOELJX/5n42IqXroqFtf/AAAAAACcN1Zyj50lInm5ni6tiZXcLsUvAQAAAAAAOCeSv/9fi4tkDpTrYu1Ml8L1PwAAAAAA58TPmXPsh+2L1p9/SRBMWW/bS19bG8ncvM7GhXS/Cx+3GNVnrOl+I0lRSYvJSVfPWrm00s4kmB/6xVpWHNZuAM5OAD9+TgCXJuVXuZHWubGalquDLWkv+bpp6oLrNx8UxXGmJyK9FH3/Yv0HSYb/i9eatnKy3usWnr7srSaxvI1bebvRn0DxwDyKY2J5ncy3kNxzMXTEU8mNGP1+85asrfe69t7xT6S7T+zv8c30mD7fyVxaa64/421+//hzcZ/FwqjR96MoHnLk7+RmWufm/M20GBJFKSuK0t4ohh+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+rTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxzu8H9lv2CxZ8SG88HrjO7m8ubV9e31j5Vn3WfdFqVSu2Hdt+15JppJh9AtyDwBgiL3P2LGG5v/Mp/BYdzOuqv+/85WCgjyVl9KTVVlI7jZIvnEwtNX8nq8hLGRcteaTNJk+4WVhzFXdf5K7HAbtlsbW3R9D+QR+EgAAnJy5jDz8Kfl/IeO6e38uH391nN/ztDYAAHA8dPDBykc/WUFg2k+K1WrRiRa1Cnz3kQpMraGV8SIduIuO19CqHfiR7/rNeOGxqelQhZ122w8iVfcD1fZDs5RMH6j6j34PdcvxIuOG7aZ2Qq1c34scN1I1E7qq3fm2acJFHSQ7h23tmrpxncj4ngr9TuDqglKh1nsqmpr2IlM38aKn2oFpOUFOPfabnZZWNR26gWlHftrgoC/j1f2glTRbOO2DDQDAGbG5tf18pdfrvjrGhaEd5058qAAAoC8jSwMAAAAAAAAAAAAAAAAAAAAAgDPgJO7/Y6G/MHFOD/hgKuiT7f3imRj7uV3IPHW8OfaTE4Bj9U8AAAD//5aOTX0=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0))
syz_mount_image$hfs(&(0x7f0000001740), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xddfa8828bb65ddb2, &(0x7f0000000240)=ANY=[@ANYRES16], 0x11, 0x2bd, &(0x7f0000000f80)="$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")
mount$nfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0)
mount$nfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0)

9.516385815s ago: executing program 5 (id=405):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x800000000000002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=<r3=>0x0, &(0x7f00000005c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, r1, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)

9.372937854s ago: executing program 0 (id=406):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)

7.522689604s ago: executing program 5 (id=409):
timer_create(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000440)=0x97f, 0x4)
sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)

6.196686174s ago: executing program 1 (id=410):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x48b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x20000000009)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c)
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)

6.195844762s ago: executing program 3 (id=411):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)}, 0xa1}], 0x2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
io_destroy(0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB])
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x2, {0xa, 0x4e20, 0x5e, @mcast1, 0xc}}}, 0x38)

5.723346731s ago: executing program 5 (id=412):
r0 = getpid()
r1 = gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
rt_tgsigqueueinfo(r0, r1, 0xf, &(0x7f0000000080)={0xfffffffc, 0x0, 0x3})

4.913814343s ago: executing program 1 (id=413):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x28}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$packet(0x11, 0x3, 0x300)
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000003d0007010000000008000000047c000008000880040008001400018006000600800a00000800", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000)

4.07683183s ago: executing program 5 (id=414):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff1a)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x791db5641e51ecfe, 0x2c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
close_range(r1, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

4.017735856s ago: executing program 0 (id=415):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$alg(0x26, 0x5, 0x0)
syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.017191464s ago: executing program 1 (id=416):
socket$l2tp6(0xa, 0x2, 0x73)
socket$inet6(0xa, 0x3, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0})
io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0)

3.919591647s ago: executing program 3 (id=417):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
r1 = fsopen(&(0x7f00000003c0)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', r3, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x401, 0x2)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)

3.919186829s ago: executing program 6 (id=303):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x8, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)

3.895368082s ago: executing program 1 (id=418):
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9})
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c)

3.739523153s ago: executing program 3 (id=419):
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}, 0x0, 0x20040000})
io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

3.663516828s ago: executing program 5 (id=420):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x6c}, {0x0, 0x0, 0xfffffffffffffffe, 0xa0, 0x0, 0x4, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@local, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200, 0x0, 0x10}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)

3.64627356s ago: executing program 1 (id=421):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x4, 0x7fff}, &(0x7f0000000480)=0xc)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000c40)={0x8000203d})
syz_open_procfs(0x0, &(0x7f0000000140)='net/bnep\x00')
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xfffffffffffffff9}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xd2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)

2.171291729s ago: executing program 3 (id=422):
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r3}, 0x38)

1.516940695s ago: executing program 0 (id=423):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e9000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001680))
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001280)={r2, 0x2}, &(0x7f00000012c0)=0x8)

1.143619234s ago: executing program 6 (id=424):
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(r0, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0)
write(r4, 0x0, 0x0)

199.288993ms ago: executing program 3 (id=425):
syz_mount_image$hfsplus(&(0x7f0000001cc0), &(0x7f00000016c0)='./file2\x00', 0x44, &(0x7f0000000300)=ANY=[@ANYBLOB='umask=00000000000000000000000,decompose,nls=cp932,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f626172726965722c0000000000000b9c00000030303030303030c8f71132e94930303030342c00"], 0x20, 0x6e3, &(0x7f00000003c0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
capset(0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x46a, &(0x7f0000000940)="$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")
openat(0xffffffffffffff9c, 0x0, 0x141042, 0x80)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

75.827514ms ago: executing program 0 (id=426):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x514b, 0xfffffff1, 0x6, 0x7fffffff, 0x0, 0xc91d, 0x5, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc5}, 0x44080)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xb, 0xa}, {0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}}, 0x4000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0)

75.025212ms ago: executing program 1 (id=427):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x43, 0xc11, &(0x7f0000000d00)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x10000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x11e, 0x3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r4, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0)

16.033309ms ago: executing program 6 (id=428):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r5 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r0, r4})

0s ago: executing program 5 (id=429):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50)
r0 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r0, 0x0, 0x0)
connect$tipc(r0, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10)
r3 = socket$kcm(0xa, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts.
syzkaller login: [   40.300261][ T6478] cgroup: Unknown subsys name 'net'
[   40.554664][ T6478] cgroup: Unknown subsys name 'cpuset'
[   40.558325][ T6478] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   40.854619][ T6478] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   43.268380][ T6490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   43.271179][ T6490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   43.274075][ T6490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   43.278032][ T6490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   43.284132][ T6493] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   43.286723][ T6493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   43.289908][ T6495] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   43.292682][ T6495] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   43.303057][ T6495] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   43.305464][ T6495] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   43.306103][ T6498] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   43.313662][ T6495] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   43.317934][ T6495] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   43.321267][ T6495] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   43.323741][ T6495] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   43.327111][ T6495] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   43.329623][ T6495] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   43.332293][ T6495] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   43.341232][ T6495] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   43.344224][ T6495] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   43.346511][ T6495] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   43.349217][ T6495] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   43.351922][ T6495] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   43.354645][ T6495] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   43.362166][ T6498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   43.634221][ T6488] chnl_net:caif_netlink_parms(): no params data found
[   43.691100][ T6494] chnl_net:caif_netlink_parms(): no params data found
[   43.824341][ T6501] chnl_net:caif_netlink_parms(): no params data found
[   43.858299][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.858431][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.858556][ T6488] bridge_slave_0: entered allmulticast mode
[   43.859478][ T6488] bridge_slave_0: entered promiscuous mode
[   43.861423][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.861477][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.861577][ T6488] bridge_slave_1: entered allmulticast mode
[   43.863572][ T6488] bridge_slave_1: entered promiscuous mode
[   43.873472][ T6499] chnl_net:caif_netlink_parms(): no params data found
[   43.888783][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.888851][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.888982][ T6494] bridge_slave_0: entered allmulticast mode
[   43.889795][ T6494] bridge_slave_0: entered promiscuous mode
[   43.896459][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.896562][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.896674][ T6494] bridge_slave_1: entered allmulticast mode
[   43.897553][ T6494] bridge_slave_1: entered promiscuous mode
[   43.911835][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   43.936780][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   43.944570][ T6489] chnl_net:caif_netlink_parms(): no params data found
[   43.955212][ T6494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   43.984712][ T6488] team0: Port device team_slave_0 added
[   43.991453][ T6494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.012744][ T6488] team0: Port device team_slave_1 added
[   44.055790][ T6494] team0: Port device team_slave_0 added
[   44.057463][ T6494] team0: Port device team_slave_1 added
[   44.103912][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.103987][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.104025][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.105344][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.105370][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.105402][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.145481][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.146576][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.146713][ T6499] bridge_slave_0: entered allmulticast mode
[   44.147587][ T6499] bridge_slave_0: entered promiscuous mode
[   44.148850][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.148893][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.149001][ T6499] bridge_slave_1: entered allmulticast mode
[   44.149828][ T6499] bridge_slave_1: entered promiscuous mode
[   44.169085][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.169136][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.169174][ T6494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.170258][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.170281][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.170313][ T6494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.207269][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.207340][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.207442][ T6501] bridge_slave_0: entered allmulticast mode
[   44.208236][ T6501] bridge_slave_0: entered promiscuous mode
[   44.209509][ T6501] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.209553][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.209684][ T6501] bridge_slave_1: entered allmulticast mode
[   44.210472][ T6501] bridge_slave_1: entered promiscuous mode
[   44.223443][ T6499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.227849][ T6488] hsr_slave_0: entered promiscuous mode
[   44.228796][ T6488] hsr_slave_1: entered promiscuous mode
[   44.238404][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.240396][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.242589][ T6489] bridge_slave_0: entered allmulticast mode
[   44.245026][ T6489] bridge_slave_0: entered promiscuous mode
[   44.265079][ T6499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.289296][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.291322][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.292738][ T6489] bridge_slave_1: entered allmulticast mode
[   44.293785][ T6489] bridge_slave_1: entered promiscuous mode
[   44.303696][ T6501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.328331][ T6501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.336426][ T6499] team0: Port device team_slave_0 added
[   44.341151][ T6494] hsr_slave_0: entered promiscuous mode
[   44.341709][ T6494] hsr_slave_1: entered promiscuous mode
[   44.342147][ T6494] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   44.342219][ T6494] Cannot create hsr debugfs directory
[   44.355075][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.366991][ T6499] team0: Port device team_slave_1 added
[   44.388804][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.397218][ T6501] team0: Port device team_slave_0 added
[   44.418626][ T6501] team0: Port device team_slave_1 added
[   44.425221][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.425264][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.425307][ T6499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.426710][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.426735][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.426770][ T6499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.487191][ T6499] hsr_slave_0: entered promiscuous mode
[   44.487670][ T6499] hsr_slave_1: entered promiscuous mode
[   44.487980][ T6499] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   44.488008][ T6499] Cannot create hsr debugfs directory
[   44.507686][ T6489] team0: Port device team_slave_0 added
[   44.508714][ T6501] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.508740][ T6501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.508782][ T6501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.509921][ T6501] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.509946][ T6501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.509988][ T6501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.528436][ T6489] team0: Port device team_slave_1 added
[   44.594942][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.595027][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.595073][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.596189][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.596214][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.596248][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.695831][ T6501] hsr_slave_0: entered promiscuous mode
[   44.697999][ T6501] hsr_slave_1: entered promiscuous mode
[   44.699974][ T6501] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   44.702919][ T6501] Cannot create hsr debugfs directory
[   44.732599][ T6489] hsr_slave_0: entered promiscuous mode
[   44.733107][ T6489] hsr_slave_1: entered promiscuous mode
[   44.733416][ T6489] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   44.733445][ T6489] Cannot create hsr debugfs directory
[   44.806454][ T6488] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   44.821554][ T6488] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   44.826173][ T6488] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   44.829662][ T6488] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   44.919613][ T6494] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   44.934938][ T6494] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   44.948774][ T6494] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   44.954669][ T6494] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   44.971130][ T6499] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   44.978889][ T6499] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   44.983751][ T6499] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   44.987720][ T6499] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.049065][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.065678][ T6501] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   45.071495][ T6501] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   45.087372][ T6501] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   45.091193][ T6501] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   45.111112][ T6488] 8021q: adding VLAN 0 to HW filter on device team0
[   45.138149][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.138277][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.139681][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.139728][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.153507][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.168412][ T6489] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   45.175168][ T6489] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   45.190860][ T6494] 8021q: adding VLAN 0 to HW filter on device team0
[   45.196778][ T6489] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   45.202505][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.202571][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.214810][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.214877][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.219540][ T6489] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   45.232869][ T6499] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.238996][ T6499] 8021q: adding VLAN 0 to HW filter on device team0
[   45.247518][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.247598][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.250100][ T6488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   45.287043][ T4073] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.287127][ T4073] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.298165][ T6501] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.322555][ T6501] 8021q: adding VLAN 0 to HW filter on device team0
[   45.335793][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.335864][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.359425][  T453] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.359501][  T453] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.373085][ T6498] Bluetooth: hci2: command tx timeout
[   45.373238][ T6498] Bluetooth: hci3: command tx timeout
[   45.373330][ T6498] Bluetooth: hci0: command tx timeout
[   45.373404][ T6498] Bluetooth: hci1: command tx timeout
[   45.418125][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.443217][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.453943][ T6495] Bluetooth: hci4: command tx timeout
[   45.468358][ T6489] 8021q: adding VLAN 0 to HW filter on device team0
[   45.503152][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.503239][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.504077][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.504134][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.517455][ T6488] veth0_vlan: entered promiscuous mode
[   45.520617][ T6488] veth1_vlan: entered promiscuous mode
[   45.619454][ T6494] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.634881][ T6499] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.645264][ T6488] veth0_macvtap: entered promiscuous mode
[   45.649431][ T6488] veth1_macvtap: entered promiscuous mode
[   45.658133][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.677781][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.693210][ T6488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.695717][ T6488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.698189][ T6488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.700620][ T6488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.726048][ T6499] veth0_vlan: entered promiscuous mode
[   45.730792][ T6499] veth1_vlan: entered promiscuous mode
[   45.741666][ T6499] veth0_macvtap: entered promiscuous mode
[   45.747937][ T6499] veth1_macvtap: entered promiscuous mode
[   45.767855][ T6494] veth0_vlan: entered promiscuous mode
[   45.781341][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.788249][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.801400][ T6501] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.809685][ T6499] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.811262][ T6499] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.811295][ T6499] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.811325][ T6499] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.818507][ T6494] veth1_vlan: entered promiscuous mode
[   45.830859][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.851307][ T6501] veth0_vlan: entered promiscuous mode
[   45.910805][ T6494] veth0_macvtap: entered promiscuous mode
[   45.935859][ T6501] veth1_vlan: entered promiscuous mode
[   45.941513][  T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.944356][  T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.951267][ T6494] veth1_macvtap: entered promiscuous mode
[   45.957301][  T453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.957355][  T453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.007168][ T1618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.007227][ T1618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.007844][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.007873][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.009431][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.029225][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.051463][ T6501] veth0_macvtap: entered promiscuous mode
[   46.057567][ T6501] veth1_macvtap: entered promiscuous mode
[   46.075377][ T6494] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.075446][ T6494] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.075477][ T6494] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.075506][ T6494] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.099463][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.113409][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.118990][ T6501] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.121697][ T6501] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.124306][ T6501] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.126669][ T6501] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.127010][ T6488] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.162822][ T1618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.162882][ T1618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.189525][  T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.189592][  T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.238387][ T6489] veth0_vlan: entered promiscuous mode
[   46.243485][ T6489] veth1_vlan: entered promiscuous mode
[   46.275330][  T304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.275386][  T304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.286336][  T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.286394][  T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.303859][ T6489] veth0_macvtap: entered promiscuous mode
[   46.320384][ T6489] veth1_macvtap: entered promiscuous mode
[   46.328654][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.334588][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.338424][ T6489] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.341033][ T6489] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.343627][ T6489] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.346020][ T6489] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.532540][ T6495] Bluetooth: hci1: command tx timeout
[   47.534199][ T6495] Bluetooth: hci0: command tx timeout
[   47.534270][ T6495] Bluetooth: hci3: command tx timeout
[   47.534314][ T6495] Bluetooth: hci2: command tx timeout
[   47.534354][ T6495] Bluetooth: hci4: command tx timeout
[   48.719312][ T6590] loop1: detected capacity change from 0 to 512
[   48.808349][ T6590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.867480][  T453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.888393][  T453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.862330][ T6498] Bluetooth: hci4: command tx timeout
[   49.862400][ T6498] Bluetooth: hci2: command tx timeout
[   49.862447][ T6498] Bluetooth: hci3: command tx timeout
[   49.862480][ T6498] Bluetooth: hci0: command tx timeout
[   49.862512][ T6498] Bluetooth: hci1: command tx timeout
[   49.874712][ T6608] loop0: detected capacity change from 0 to 128
[   49.909404][ T6608] vfat: Bad value for 'gid'
[   49.911160][ T6608] vfat: Bad value for 'gid'
[   51.004465][  T453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.004527][  T453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.869073][ T6495] Bluetooth: hci3: SCO packet for unknown connection handle 0
[   51.932093][ T6498] Bluetooth: hci0: command tx timeout
[   51.935903][ T6498] Bluetooth: hci3: command tx timeout
[   51.935982][ T6498] Bluetooth: hci2: command tx timeout
[   51.936034][ T6498] Bluetooth: hci4: command tx timeout
[   51.940626][ T6495] Bluetooth: hci1: command tx timeout
[   51.969188][ T6494] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.983330][ T6630] loop1: detected capacity change from 0 to 2048
[   53.045541][ T6630] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   53.050170][ T6630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   54.313200][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'.
[   54.313943][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'.
[   54.646415][ T6647] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.653783][   T31] audit: type=1326 audit(54.630:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb695a768 code=0x7ffc0000
[   54.653857][   T31] audit: type=1326 audit(54.630:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb695a768 code=0x7ffc0000
[   54.653925][   T31] audit: type=1326 audit(54.630:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb695a768 code=0x7ffc0000
[   54.653980][   T31] audit: type=1326 audit(54.630:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb695a768 code=0x7ffc0000
[   54.654024][   T31] audit: type=1326 audit(54.630:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb695a768 code=0x7ffc0000
[   54.654067][   T31] audit: type=1326 audit(54.630:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffb695a768 code=0x7ffc0000
[   54.654110][   T31] audit: type=1326 audit(54.630:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb695a768 code=0x7ffc0000
[   54.654154][   T31] audit: type=1326 audit(54.630:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb695a768 code=0x7ffc0000
[   54.654197][   T31] audit: type=1326 audit(54.630:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb695a768 code=0x7ffc0000
[   54.654240][   T31] audit: type=1326 audit(54.630:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb695a768 code=0x7ffc0000
[   54.766538][ T6647] wireguard0: entered promiscuous mode
[   54.766596][ T6647] wireguard0: entered allmulticast mode
[   61.717017][ T6712] loop4: detected capacity change from 0 to 8
[   62.703522][ T6725] loop1: detected capacity change from 0 to 128
[   62.725511][ T6725] =======================================================
[   62.725511][ T6725] WARNING: The mand mount option has been deprecated and
[   62.725511][ T6725]          and is ignored by this kernel. Remove the mand
[   62.725511][ T6725]          option from the mount to silence this warning.
[   62.725511][ T6725] =======================================================
[   62.756554][ T6725] EXT4-fs (loop1): Test dummy encryption mode enabled
[   62.799302][ T6725] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   62.814740][ T6712] Illegal XDP return value 3212055552 on prog  (id 2) dev N/A, expect packet loss!
[   62.822820][ T6727] loop3: detected capacity change from 0 to 2048
[   62.823503][ T6727] udf: Unknown parameter 'rootdir-00000000000000000004'
[   63.542041][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'.
[   63.555086][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'.
[   63.566333][ T6727] loop3: detected capacity change from 0 to 512
[   63.681563][ T6727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.743153][ T6744] loop4: detected capacity change from 0 to 256
[   63.745545][ T6744] exfat: Deprecated parameter 'utf8'
[   63.747284][ T6744] exfat: Deprecated parameter 'utf8'
[   63.748944][ T6744] exfat: Deprecated parameter 'utf8'
[   63.750602][ T6744] exfat: Bad value for 'allow_utime'
[   63.857118][   T31] kauditd_printk_skb: 11 callbacks suppressed
[   63.859004][   T31] audit: type=1400 audit(63.830:23): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6738 comm="syz.0.43" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0
[   64.134339][ T6501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.168581][ T6737] loop2: detected capacity change from 0 to 32768
[   64.493830][ T2393] ieee802154 phy0 wpan0: encryption failed: -22
[   64.493970][ T2393] ieee802154 phy1 wpan1: encryption failed: -22
[   64.846342][ T6737] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   64.919457][ T6494] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   64.948132][ T6768] tipc: Started in network mode
[   64.948229][ T6768] tipc: Node identity 4, cluster identity 4711
[   64.948271][ T6768] tipc: Node number set to 4
[   65.014268][ T6737] XFS (loop2): Ending clean mount
[   65.029386][ T6777] loop4: detected capacity change from 0 to 128
[   65.155374][ T6772] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   65.246883][ T6737] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   66.049779][ T6786] loop1: detected capacity change from 0 to 512
[   66.472017][ T6795] Cannot find add_set index 0 as target
[   67.541310][ T6786] EXT4-fs (loop1): Test dummy encryption mode enabled
[   67.735893][ T6786] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.428353][ T6786] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   68.555227][ T6786] EXT4-fs error (device loop1): ext4_add_entry:2419: inode #2: comm syz.1.55: Directory hole found for htree leaf block 0
[   68.555886][ T6786] EXT4-fs (loop1): Remounting filesystem read-only
[   68.597231][  T128] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.629436][ T6494] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[   69.623362][   T24] cfg80211: failed to load regulatory.db
[   69.808068][  T128] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.088916][ T6828] netfs: Couldn't get user pages (rc=-14)
[   71.108684][  T128] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.388670][ T6490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.391895][ T6490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.397709][ T6490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.401287][ T6490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.122351][ T6490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.618923][  T128] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.250801][ T6854] netlink: 'syz.3.72': attribute type 1 has an invalid length.
[   74.465707][ T6861] ipvlan0: entered promiscuous mode
[   74.465787][ T6861] ipvlan0: entered allmulticast mode
[   74.465809][ T6861] veth0_vlan: entered allmulticast mode
[   75.212253][ T6490] Bluetooth: hci1: command tx timeout
[   75.253496][ T6869] loop2: detected capacity change from 0 to 256
[   75.296132][ T6869] FAT-fs (loop2): Directory bread(block 64) failed
[   75.296261][ T6869] FAT-fs (loop2): Directory bread(block 65) failed
[   75.296334][ T6869] FAT-fs (loop2): Directory bread(block 66) failed
[   75.296371][ T6869] FAT-fs (loop2): Directory bread(block 67) failed
[   75.296430][ T6869] FAT-fs (loop2): Directory bread(block 68) failed
[   75.296466][ T6869] FAT-fs (loop2): Directory bread(block 69) failed
[   75.296532][ T6869] FAT-fs (loop2): Directory bread(block 70) failed
[   75.296568][ T6869] FAT-fs (loop2): Directory bread(block 71) failed
[   75.296627][ T6869] FAT-fs (loop2): Directory bread(block 72) failed
[   75.296663][ T6869] FAT-fs (loop2): Directory bread(block 73) failed
[   75.359118][ T6871] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.709978][ T6883] loop3: detected capacity change from 0 to 8
[   75.934688][ T6883] SQUASHFS error: Failed to read block 0x2fc: -5
[   75.934846][ T6883] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   75.934924][ T6883] SQUASHFS error: read_indexes: reading block [2fa:0]
[   75.935189][ T6883] SQUASHFS error: Failed to read block 0xfc: -5
[   75.935832][ T6883] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   75.935938][ T6883] SQUASHFS error: read_indexes: reading block [2fa:0]
[   75.936678][ T6883] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   75.936823][ T6883] SQUASHFS error: read_indexes: reading block [2fa:0]
[   75.937233][ T6883] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   75.937339][ T6883] SQUASHFS error: read_indexes: reading block [2fa:0]
[   75.937777][ T6883] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   75.937808][ T6883] SQUASHFS error: read_indexes: reading block [2fa:0]
[   75.938427][ T6883] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   75.938512][ T6883] SQUASHFS error: read_indexes: reading block [2fa:0]
[   75.938943][ T6883] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   75.939049][ T6883] SQUASHFS error: read_indexes: reading block [2fa:0]
[   75.939891][ T6883] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   75.940009][ T6883] SQUASHFS error: read_indexes: reading block [2fa:0]
[   75.940199][ T6883] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   75.940304][ T6883] SQUASHFS error: read_indexes: reading block [2fa:0]
[   76.585610][  T128] bridge_slave_1: left allmulticast mode
[   76.585712][  T128] bridge_slave_1: left promiscuous mode
[   76.586352][  T128] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.278826][  T128] bridge_slave_0: left allmulticast mode
[   77.281745][  T128] bridge_slave_0: left promiscuous mode
[   77.283664][  T128] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.302227][ T6490] Bluetooth: hci1: command tx timeout
[   79.372257][ T6490] Bluetooth: hci1: command tx timeout
[   80.082881][ T6929] ptrace attach of "./syz-executor exec"[6494] was attempted by "./syz-executor exec"[6929]
[   81.532123][ T6490] Bluetooth: hci1: command tx timeout
[   83.546455][  T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.721816][  T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.813741][  T128] bond0 (unregistering): Released all slaves
[   84.588639][  T128] tipc: Left network mode
[   84.596804][ T6841] chnl_net:caif_netlink_parms(): no params data found
[   84.665345][ T6956] trusted_key: syz.1.92 sent an empty control message without MSG_MORE.
[   86.279538][ T6996] loop1: detected capacity change from 0 to 40427
[   86.789475][ T6996] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3fffff
[   86.793629][ T6996] F2FS-fs (loop1): invalid crc value
[   88.335338][ T6841] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.335447][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.344051][ T6841] bridge_slave_0: entered allmulticast mode
[   88.345630][ T6841] bridge_slave_0: entered promiscuous mode
[   88.363132][ T6998] loop3: detected capacity change from 0 to 256
[   88.829428][ T6998] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[   89.983489][ T6841] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.985475][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.987673][ T6841] bridge_slave_1: entered allmulticast mode
[   89.990250][ T6841] bridge_slave_1: entered promiscuous mode
[   90.139027][ T7021] binder: 7019:7021 tried to acquire reference to desc 0, got 1 instead
[   90.260832][ T7031] capability: warning: `syz.1.105' uses deprecated v2 capabilities in a way that may be insecure
[   90.296470][   T26] binder: release 7019:7021 transaction 5 out, still active
[   90.329985][   T26] binder: send failed reply for transaction 5, target dead
[   93.310091][ T6841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.327935][ T6841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.419577][  T128] hsr_slave_0: left promiscuous mode
[   93.470233][  T128] hsr_slave_1: left promiscuous mode
[   93.472498][  T128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.474930][  T128] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.477906][  T128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.480833][  T128] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.574155][  T128] veth1_macvtap: left promiscuous mode
[   93.574338][  T128] veth0_macvtap: left promiscuous mode
[   93.574460][  T128] veth1_vlan: left promiscuous mode
[   93.574578][  T128] veth0_vlan: left promiscuous mode
[   98.446491][ T7109] syz.0.122 uses obsolete (PF_INET,SOCK_PACKET)
[  101.783584][  T128] team0 (unregistering): Port device team_slave_1 removed
[  101.954072][  T128] team0 (unregistering): Port device team_slave_0 removed
[  104.183352][ T6841] team0: Port device team_slave_0 added
[  104.217480][ T7121] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  104.217588][ T7121] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  104.289417][ T6841] team0: Port device team_slave_1 added
[  104.517125][ T7133] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  104.517203][ T7133] Cannot find add_set index 0 as target
[  105.763573][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.765700][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.773417][ T6841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.805231][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.805288][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.805355][ T6841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.287819][ T6841] hsr_slave_0: entered promiscuous mode
[  108.306804][ T6841] hsr_slave_1: entered promiscuous mode
[  108.307181][ T6841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.307222][ T6841] Cannot create hsr debugfs directory
[  110.070182][ T7181] binder: 7180:7181 tried to acquire reference to desc 0, got 1 instead
[  110.075943][ T1767] binder: release 7180:7181 transaction 11 out, still active
[  110.075991][ T1767] binder: undelivered TRANSACTION_COMPLETE
[  110.076020][ T1767] binder: undelivered TRANSACTION_COMPLETE
[  110.084124][ T1767] binder: undelivered transaction 10, process died.
[  110.084167][ T1767] binder: send failed reply for transaction 11, target dead
[  110.131788][ T7182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.136'.
[  110.134713][ T7182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'.
[  110.139964][ T7182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.136'.
[  110.142920][ T7182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.136'.
[  110.186530][   T31] audit: type=1326 audit(110.170:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7153 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55a768 code=0x7fc00000
[  110.237468][ T7188] loop3: detected capacity change from 0 to 1764
[  110.355450][ T6841] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  110.443690][ T6841] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  110.453165][ T6841] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  110.503538][ T6841] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  110.540113][ T7201] process 'syz.3.143' launched './file1' with NULL argv: empty string added
[  111.487817][ T6841] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.500550][ T6841] 8021q: adding VLAN 0 to HW filter on device team0
[  112.347582][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.347658][ T6809] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.490373][ T6809] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.490465][ T6809] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.500734][ T7214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.509750][ T7214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.896884][ T6841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.475972][ T7272] loop3: detected capacity change from 0 to 8
[  117.694932][ T6841] veth0_vlan: entered promiscuous mode
[  117.698926][ T6841] veth1_vlan: entered promiscuous mode
[  118.451730][ T6841] veth0_macvtap: entered promiscuous mode
[  118.457634][ T6841] veth1_macvtap: entered promiscuous mode
[  118.466774][ T6841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.474678][ T6841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.478495][ T6841] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.490508][ T6841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.490572][ T6841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.490610][ T6841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.637747][ T7291] loop2: detected capacity change from 0 to 256
[  118.744742][ T7291] FAT-fs (loop2): Directory bread(block 64) failed
[  118.744821][ T7291] FAT-fs (loop2): Directory bread(block 65) failed
[  118.744901][ T7291] FAT-fs (loop2): Directory bread(block 66) failed
[  118.744945][ T7291] FAT-fs (loop2): Directory bread(block 67) failed
[  118.745066][ T7291] FAT-fs (loop2): Directory bread(block 68) failed
[  118.745122][ T7291] FAT-fs (loop2): Directory bread(block 69) failed
[  118.745192][ T7291] FAT-fs (loop2): Directory bread(block 70) failed
[  118.745235][ T7291] FAT-fs (loop2): Directory bread(block 71) failed
[  118.745303][ T7291] FAT-fs (loop2): Directory bread(block 72) failed
[  118.745346][ T7291] FAT-fs (loop2): Directory bread(block 73) failed
[  119.493132][ T6809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.495449][ T6809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.579611][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.579672][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.589547][ T7282] loop1: detected capacity change from 0 to 32768
[  120.666747][ T7282] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  120.876438][ T7282] XFS (loop1): Ending clean mount
[  123.235474][ T7356] loop3: detected capacity change from 0 to 256
[  123.355255][ T7356] FAT-fs (loop3): Directory bread(block 64) failed
[  123.358622][ T7356] FAT-fs (loop3): Directory bread(block 65) failed
[  123.367874][ T7356] FAT-fs (loop3): Directory bread(block 66) failed
[  123.371084][ T7356] FAT-fs (loop3): Directory bread(block 67) failed
[  123.543146][ T7356] FAT-fs (loop3): Directory bread(block 68) failed
[  123.565821][ T7356] FAT-fs (loop3): Directory bread(block 69) failed
[  123.601590][ T7356] FAT-fs (loop3): Directory bread(block 70) failed
[  123.614134][ T7356] FAT-fs (loop3): Directory bread(block 71) failed
[  123.680824][ T7356] FAT-fs (loop3): Directory bread(block 72) failed
[  123.748635][ T7356] FAT-fs (loop3): Directory bread(block 73) failed
[  123.915127][ T6494] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  126.232512][ T2393] ieee802154 phy0 wpan0: encryption failed: -22
[  126.232594][ T2393] ieee802154 phy1 wpan1: encryption failed: -22
[  127.860808][ T7391] loop3: detected capacity change from 0 to 1024
[  128.081723][ T7389] loop2: detected capacity change from 0 to 2048
[  128.099839][ T7389] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.406190][ T7391] hfsplus: xattr searching failed
[  129.406364][ T7391] hfsplus: xattr searching failed
[  129.406476][ T7391] hfsplus: xattr searching failed
[  129.697795][ T7391] hfsplus: xattr searching failed
[  137.002162][ T7483] netlink: 104 bytes leftover after parsing attributes in process `syz.1.198'.
[  138.797556][ T7491] TCP: out of memory -- consider tuning tcp_mem
[  140.129986][ T7495] netlink: 44 bytes leftover after parsing attributes in process `syz.0.202'.
[  140.142894][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.143596][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.481044][ T7531] netlink: 'syz.1.211': attribute type 4 has an invalid length.
[  142.862537][ T1767] kernel write not supported for file bpf-prog (pid: 1767 comm: kworker/0:2)
[  142.949359][ T7560] loop3: detected capacity change from 0 to 512
[  143.228595][ T7560] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.218: bad orphan inode 4
[  143.587890][ T7560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.846311][ T7573] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.846474][ T7573] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.846507][ T7573] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.846538][ T7573] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.848704][ T7573] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  145.996690][ T6501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.900371][ T7607] loop5: detected capacity change from 0 to 64
[  148.225243][ T7607] syz.5.228: attempt to access beyond end of device
[  148.225243][ T7607] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  148.225523][ T7607] Buffer I/O error on dev loop5, logical block 134217734, async page read
[  148.377176][ T7607] Trying to free block not in datazone
[  148.500886][ T7604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'.
[  148.696503][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'.
[  151.009847][ T7646] loop1: detected capacity change from 0 to 2048
[  151.073076][ T7650] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.882632][ T7646] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12
[  152.963607][ T7646] Remounting filesystem read-only
[  153.040693][ T7672] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  155.822368][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'.
[  156.495465][ T7715] binder: 7708:7715 tried to acquire reference to desc 0, got 1 instead
[  156.495551][ T7715] binder: 7708:7715 ioctl c0306201 200003c0 returned -14
[  156.502656][ T7715] binder: 7708:7715 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  156.502715][ T7715] binder: 7715 RLIMIT_NICE not set
[  156.502758][ T7715] binder: 7715 RLIMIT_NICE not set
[  156.502802][ T7715] binder: send failed reply for transaction 16 to 7708:7715
[  156.502944][ T7715] binder: 7708:7715 ioctl c0306201 20000540 returned -14
[  156.802073][ T7726] overlayfs: conflicting options: nfs_export=on,index=off
[  158.933487][ T6495] Bluetooth: hci0: command 0x0406 tx timeout
[  158.959338][ T6538] binder: undelivered TRANSACTION_COMPLETE
[  158.959401][ T6538] binder: undelivered TRANSACTION_ERROR: 29201
[  160.527373][ T7754] netfs: Couldn't get user pages (rc=-14)
[  162.582929][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.263'.
[  163.670785][ T7780] loop2: detected capacity change from 0 to 32768
[  163.682649][ T7780] btrfs: Unknown parameter 'subj_type'
[  166.080049][ T7795] loop5: detected capacity change from 0 to 2048
[  166.747724][ T7795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.820203][ T7814] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  167.971746][ T6841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.392310][ T7837] delete_channel: no stack
[  168.709791][ T7840] loop2: detected capacity change from 0 to 8
[  169.248613][ T6493] Bluetooth: hci2: command 0x0406 tx timeout
[  169.248703][ T6493] Bluetooth: hci4: command 0x0406 tx timeout
[  169.248757][ T6493] Bluetooth: hci0: command 0x0406 tx timeout
[  169.248815][ T6493] Bluetooth: hci3: command 0x0406 tx timeout
[  169.287867][ T7840] SQUASHFS error: Unable to read inode 0x11f
[  169.654182][ T7853] sctp: [Deprecated]: syz.5.274 (pid 7853) Use of struct sctp_assoc_value in delayed_ack socket option.
[  169.654182][ T7853] Use struct sctp_sack_info instead
[  170.756497][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'.
[  170.756858][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'.
[  171.697173][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.697489][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.904707][ T7872] loop2: detected capacity change from 0 to 256
[  172.584854][ T7872] vfat: Bad value for 'uni_xlate'
[  175.883875][ T7901] tipc: Started in network mode
[  175.883944][ T7901] tipc: Node identity 7f000001, cluster identity 4711
[  175.884597][ T7901] tipc: Enabled bearer <udp:syz2>, priority 10
[  175.988608][ T7909] loop2: detected capacity change from 0 to 1024
[  176.015350][ T7901] loop3: detected capacity change from 0 to 2048
[  176.044217][ T7901] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.098073][ T7901] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[  176.114813][ T7901] tipc: Enabled bearer <udp:syz0>, priority 10
[  176.163155][ T7909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.011579][ T6499] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  177.011602][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'.
[  177.082140][ T7920] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  177.082207][ T7920] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  177.142874][   T24] tipc: Node number set to 2130706433
[  177.197195][ T6499] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  180.331128][ T6499] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.108231][ T7973] netlink: 'syz.0.306': attribute type 1 has an invalid length.
[  183.160910][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  183.164601][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  183.165283][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  183.165927][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  183.166378][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  183.191591][ T6942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.310636][ T7973] 8021q: adding VLAN 0 to HW filter on device bond1
[  183.404238][ T7982] bond1: (slave gretap1): making interface the new active one
[  183.408499][ T7982] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  184.873834][ T6942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.071751][ T8006] loop5: detected capacity change from 0 to 2048
[  185.133723][ T8007] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.212362][ T6495] Bluetooth: hci3: command tx timeout
[  185.221040][ T8011] netlink: 'syz.0.314': attribute type 1 has an invalid length.
[  185.230715][ T8006] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12
[  185.231576][ T8006] Remounting filesystem read-only
[  185.265397][ T8006] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  185.992221][ T6942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.012922][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.314'.
[  187.694192][ T2393] ieee802154 phy0 wpan0: encryption failed: -22
[  187.694277][ T2393] ieee802154 phy1 wpan1: encryption failed: -22
[  187.739051][ T6495] Bluetooth: hci3: command tx timeout
[  188.138818][ T8014] bond2: (slave veth3): Enslaving as an active interface with a down link
[  188.454079][ T8017] bond2: (slave veth5): Enslaving as an active interface with a down link
[  188.454690][ T8017] Zero length message leads to an empty skb
[  188.625129][ T6942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.651478][ T8023] 8021q: adding VLAN 0 to HW filter on device bond2
[  189.630733][ T7974] chnl_net:caif_netlink_parms(): no params data found
[  189.812032][ T6495] Bluetooth: hci3: command tx timeout
[  190.126989][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'.
[  191.695391][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.696323][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.703159][ T7974] bridge_slave_0: entered allmulticast mode
[  191.732853][ T7974] bridge_slave_0: entered promiscuous mode
[  191.853135][ T6495] Bluetooth: hci3: command tx timeout
[  192.172636][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.202324][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.202509][ T7974] bridge_slave_1: entered allmulticast mode
[  192.204199][ T7974] bridge_slave_1: entered promiscuous mode
[  192.255609][ T6942] bridge_slave_1: left allmulticast mode
[  192.257363][ T6942] bridge_slave_1: left promiscuous mode
[  192.259293][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.437470][ T6942] bridge_slave_0: left allmulticast mode
[  192.439058][ T6942] bridge_slave_0: left promiscuous mode
[  192.440865][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.762118][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  201.888293][ T8175] netlink: 616 bytes leftover after parsing attributes in process `syz.1.348'.
[  201.888461][ T8175] netlink: 616 bytes leftover after parsing attributes in process `syz.1.348'.
[  204.933883][ T8201] loop3: detected capacity change from 0 to 40427
[  204.974616][ T8201] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3fffff
[  204.988448][ T8201] F2FS-fs (loop3): invalid crc value
[  205.122334][ T8201] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  205.686550][ T8214] loop3: detected capacity change from 0 to 1024
[  205.715168][ T8214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.617555][ T6501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.828926][ T6942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.982447][ T6942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.033715][ T6942] bond0 (unregistering): Released all slaves
[  208.064649][ T7974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.066962][ T7974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.245008][ T7974] team0: Port device team_slave_0 added
[  208.246459][ T7974] team0: Port device team_slave_1 added
[  208.424002][ T8237] loop3: detected capacity change from 0 to 512
[  209.225835][ T8237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.403369][ T7974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.405798][ T7974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.413732][ T7974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.449050][ T7974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.452549][ T6501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.082009][ T7974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.082131][ T7974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.163486][ T7974] hsr_slave_0: entered promiscuous mode
[  214.164078][ T7974] hsr_slave_1: entered promiscuous mode
[  214.183738][ T7974] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  214.183810][ T7974] Cannot create hsr debugfs directory
[  217.042799][ T6942] hsr_slave_0: left promiscuous mode
[  217.043225][ T6942] hsr_slave_1: left promiscuous mode
[  217.043589][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.043648][ T6942] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.172620][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.172686][ T6942] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.230037][ T6942] veth1_macvtap: left promiscuous mode
[  217.230121][ T6942] veth0_macvtap: left promiscuous mode
[  217.230232][ T6942] veth1_vlan: left promiscuous mode
[  217.231078][ T6942] veth0_vlan: left promiscuous mode
[  221.805531][ T6942] team0 (unregistering): Port device team_slave_1 removed
[  221.985456][ T6942] team0 (unregistering): Port device team_slave_0 removed
[  224.495487][ T7974] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  224.498278][ T7974] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  224.527987][ T7974] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  224.555688][ T7974] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  224.796727][ T8391] netlink: 'syz.1.394': attribute type 1 has an invalid length.
[  224.807726][ T7974] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.611554][ T8395] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  225.654961][ T7974] 8021q: adding VLAN 0 to HW filter on device team0
[  225.814743][ T6813] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.814827][ T6813] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.835475][ T6810] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.835562][ T6810] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.878691][ T1618] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  226.228483][ T1618] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  226.468717][ T8391] 8021q: adding VLAN 0 to HW filter on device bond1
[  229.091525][ T7974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.595297][ T7974] veth0_vlan: entered promiscuous mode
[  230.598278][ T7974] veth1_vlan: entered promiscuous mode
[  230.676447][ T7974] veth0_macvtap: entered promiscuous mode
[  230.680406][ T7974] veth1_macvtap: entered promiscuous mode
[  230.691482][ T7974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.736395][ T7974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.765671][ T7974] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.769807][ T7974] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.773381][ T7974] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.776028][ T7974] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.306597][ T6809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.306657][ T6809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.450878][   T24] IPVS: starting estimator thread 0...
[  233.594253][ T8490] IPVS: using max 31 ests per chain, 74400 per kthread
[  234.127298][ T6810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.127357][ T6810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.210378][ T8518] syz_tun: entered allmulticast mode
[  235.299040][ T8517] syz_tun: left allmulticast mode
[  238.847226][ T8552] loop3: detected capacity change from 0 to 1024
[  240.168071][ T8557] tipc: Started in network mode
[  240.168147][ T8557] tipc: Node identity 7f000001, cluster identity 4711
[  240.176510][ T8557] tipc: Enabled bearer <udp:syz1>, priority 10
[  240.187848][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.429'.
[  240.453180][ T8562] ==================================================================
[  240.453215][ T8562] BUG: KASAN: global-out-of-bounds in fib6_clean_node+0x2b4/0x49c
[  240.453243][ T8562] Read of size 8 at addr ffff8000974c08a8 by task syz.5.429/8562
[  240.453260][ T8562] 
[  240.453271][ T8562] CPU: 1 UID: 0 PID: 8562 Comm: syz.5.429 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[  240.453285][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  240.453292][ T8562] Call trace:
[  240.453295][ T8562]  show_stack+0x2c/0x3c (C)
[  240.453309][ T8562]  __dump_stack+0x30/0x40
[  240.453321][ T8562]  dump_stack_lvl+0xd8/0x12c
[  240.453331][ T8562]  print_address_description+0xa8/0x254
[  240.453346][ T8562]  print_report+0x68/0x84
[  240.453359][ T8562]  kasan_report+0xb0/0x110
[  240.453370][ T8562]  __asan_report_load8_noabort+0x20/0x2c
[  240.453382][ T8562]  fib6_clean_node+0x2b4/0x49c
[  240.453396][ T8562]  fib6_walk_continue+0x654/0x878
[  240.453410][ T8562]  fib6_walk+0x140/0x254
[  240.453423][ T8562]  __fib6_clean_all+0x1dc/0x310
[  240.453436][ T8562]  fib6_clean_all+0x3c/0x50
[  240.453449][ T8562]  rt6_disable_ip+0x104/0x6cc
[  240.453461][ T8562]  addrconf_ifdown+0x148/0x148c
[  240.453474][ T8562]  addrconf_notify+0x2f4/0xcdc
[  240.453488][ T8562]  notifier_call_chain+0x1b8/0x4e4
[  240.453500][ T8562]  raw_notifier_call_chain+0x3c/0x50
[  240.453510][ T8562]  unregister_netdevice_many_notify+0x125c/0x1fbc
[  240.453524][ T8562]  rtnl_dellink+0x394/0x640
[  240.453536][ T8562]  rtnetlink_rcv_msg+0x664/0x97c
[  240.453548][ T8562]  netlink_rcv_skb+0x230/0x414
[  240.453560][ T8562]  rtnetlink_rcv+0x28/0x38
[  240.453572][ T8562]  netlink_unicast+0x60c/0x824
[  240.453582][ T8562]  netlink_sendmsg+0x648/0x930
[  240.453594][ T8562]  ____sys_sendmsg+0x490/0x7b8
[  240.453609][ T8562]  ___sys_sendmsg+0x204/0x278
[  240.453623][ T8562]  __arm64_sys_sendmsg+0x184/0x238
[  240.453637][ T8562]  invoke_syscall+0x98/0x2b8
[  240.453648][ T8562]  el0_svc_common+0x130/0x23c
[  240.453659][ T8562]  do_el0_svc+0x48/0x58
[  240.453669][ T8562]  el0_svc+0x58/0x17c
[  240.453684][ T8562]  el0t_64_sync_handler+0x78/0x108
[  240.453699][ T8562]  el0t_64_sync+0x198/0x19c
[  240.453711][ T8562] 
[  240.453884][ T8562] The buggy address belongs to the variable:
[  240.453894][ T8562]  binder_devices+0x8/0x20
[  240.453915][ T8562] 
[  240.453927][ T8562] The buggy address belongs to the virtual mapping at
[  240.453927][ T8562]  [ffff80008f290000, ffff800097531000) created by:
[  240.453927][ T8562]  declare_kernel_vmas+0xa8/0xb8
[  240.453955][ T8562] 
[  240.453965][ T8562] The buggy address belongs to the physical page:
[  240.453987][ T8562] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2100c0
[  240.454005][ T8562] flags: 0x5ffc00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  240.454027][ T8562] raw: 05ffc00000002000 fffffdffc7403008 fffffdffc7403008 0000000000000000
[  240.454043][ T8562] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  240.454067][ T8562] page dumped because: kasan: bad access detected
[  240.454078][ T8562] 
[  240.454087][ T8562] Memory state around the buggy address:
[  240.454099][ T8562]  ffff8000974c0780: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9
[  240.454113][ T8562]  ffff8000974c0800: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9
[  240.454127][ T8562] >ffff8000974c0880: f9 f9 f9 f9 00 f9 f9 f9 00 00 f9 f9 00 00 00 00
[  240.454139][ T8562]                                   ^
[  240.454151][ T8562]  ffff8000974c0900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  240.454167][ T8562]  ffff8000974c0980: 00 00 00 00 00 00 00 00 00 00 04 f9 f9 f9 f9 f9
[  240.454180][ T8562] ==================================================================
[  240.454249][ T8562] Disabling lock debugging due to kernel taint
[  240.793655][ T6810] hfsplus: b-tree write err: -5, ino 4
[  241.315507][ T1767] tipc: Node number set to 2130706433
[  248.812554][ T2393] ieee802154 phy0 wpan0: encryption failed: -22
[  248.812622][ T2393] ieee802154 phy1 wpan1: encryption failed: -22