last executing test programs:

7m27.768233628s ago: executing program 4 (id=10):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0xff21)
recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r4, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2)

7m24.731994823s ago: executing program 4 (id=15):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, 0x0)
bind$nfc_llcp(r0, &(0x7f0000000640)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be62200", 0x37}, 0x60)
r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x40000004}, 0x49c0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffff}})
io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0)

7m23.548857034s ago: executing program 4 (id=19):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
r2 = socket$inet6(0xa, 0x1, 0x7f11)
sendto$inet6(r2, 0x0, 0x0, 0x4000001, &(0x7f00000001c0)={0xa, 0x4e23, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xfffff0bb}, 0x1c)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000000)={0x1, 0x74a})
ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f00000004c0)={0xb, "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"})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000390400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000007000000280012800b000100697036746e6c000000000000000000000000000080"], 0x48}}, 0x0)

7m21.117095718s ago: executing program 4 (id=20):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x109207, 0x0)
ioperm(0x9, 0x40, 0x101)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x300, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100000004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
fcntl$setstatus(r1, 0x4, 0x42000)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x80400, 0x0)
setns(0xffffffffffffffff, 0x20000)
ioctl$mixer_OSS_GETVERSION(r4, 0x80044d76, &(0x7f0000000380))

7m16.768948185s ago: executing program 4 (id=26):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
r0 = inotify_init1(0x0)
inotify_rm_watch(r0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_getscheduler(0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, 0x0, 0x4010)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000182"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0)

7m7.726421797s ago: executing program 4 (id=35):
add_key$keyring(&(0x7f0000000000), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x492492492492846, 0x0)
fcntl$setstatus(r5, 0x4, 0x42000)
connect$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x1e84c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

6m51.652037715s ago: executing program 32 (id=35):
add_key$keyring(&(0x7f0000000000), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x492492492492846, 0x0)
fcntl$setstatus(r5, 0x4, 0x42000)
connect$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x1e84c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

3m41.007487626s ago: executing program 3 (id=303):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x170, 0x2b8, 0x25c, 0x0, 0x7, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x170, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
pread64(r0, 0x0, 0x0, 0xc2a)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

3m36.626260044s ago: executing program 3 (id=310):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount$nfs(0x0, 0x0, 0x0, 0x817888, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8)
bind$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8)

3m32.695246834s ago: executing program 3 (id=315):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4006, &(0x7f0000000b80)={[{@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@grpjquota}, {@quota}]}, 0x1, 0x438, &(0x7f0000001040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
write(r2, &(0x7f0000000040)="05000000010001", 0x7)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001})

3m28.280386293s ago: executing program 3 (id=319):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRESHEX=0x0, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r0)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x0, 0x0}, 0x0)
r7 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r7, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84)

3m25.542683322s ago: executing program 3 (id=325):
getrusage(0x0, &(0x7f0000000040))
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x2}}, 0x10, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300), &(0x7f00000002c0))
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f00000001c0)=[0x39e], 0x2)
io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, &(0x7f0000002240)=[{0x0, 0x1, 0x0, 0x0, 0x0}, {0x0, 0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000002300)=""/164, 0xa4}], &(0x7f0000001ec0)}, {0x0, 0x1, 0x0, 0x0, 0x0}, {0x1, 0x1, 0x0, &(0x7f0000002180)=[{&(0x7f0000002100)=""/94, 0x5e}], &(0x7f00000021c0)=[0x0, 0x76, 0x5, 0x5, 0xb97f6b7, 0x0, 0x37f, 0xfffffffffffffc00, 0x9]}], 0x5)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

3m23.215414024s ago: executing program 3 (id=327):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0xfffffffd}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close(0xffffffffffffffff)
r0 = socket(0x2b, 0x1, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
accept4$unix(r0, &(0x7f0000000300), 0x0, 0x800)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

3m7.77604997s ago: executing program 33 (id=327):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0xfffffffd}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close(0xffffffffffffffff)
r0 = socket(0x2b, 0x1, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
accept4$unix(r0, &(0x7f0000000300), 0x0, 0x800)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

27.606900195s ago: executing program 2 (id=534):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x54917000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200], [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5]}, 0x45c)
ioctl$UI_SET_PROPBIT(r4, 0x5501, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000007e9010000000000000000030000010900010073797a3100000000"], 0x20}}, 0x8000000)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r5, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
close(0xffffffffffffffff)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

19.862352404s ago: executing program 6 (id=345):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0))
bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f00000000c0), 0x9)
sendfile(r2, r1, 0x0, 0x10000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
sendfile(r6, r7, 0x0, 0xffffffff000)
socket(0xa, 0x3, 0x3a)

19.861330894s ago: executing program 0 (id=543):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x4, 0x1, 0x3, 0x6, 0x5}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_emit_ethernet(0x3a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7c44a8d5ef31080046000018000000000106907864010101ac14", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)
r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000400)="f479", 0x2, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r4, r4}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}})
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x4000)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x3, 0x22, {0xffffffffffffffff}, {0xee00}, 0x0, 0x7})
r5 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$negate(0xd, r4, 0x1, r5)
keyctl$chown(0x4, r3, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r6, 0x8b32, &(0x7f0000000040))

19.836828035s ago: executing program 2 (id=545):
r0 = socket$inet6(0xa, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x0, @mcast2, 0x5}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r1)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
epoll_create1(0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}}, 0x0)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r6, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5], 0xc8)
accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @bcast}, [@null, @remote, @netrom, @bcast, @null, @remote, @remote, @default]}, &(0x7f0000000300)=0x48, 0x0)
r7 = socket(0x2a, 0x2, 0x0)
sendto(r7, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0)

15.976166873s ago: executing program 6 (id=535):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x6, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000100)="1a", 0x1, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x0, 0x8})
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000003c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 'y)\x00'}, 0x8001, 0x1, {0x0}, 0xea})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2)
close_range(r3, 0xffffffffffffffff, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0xbcaf, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYRESHEX=r3, @ANYRESDEC=r0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000880)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

15.975126784s ago: executing program 0 (id=547):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000540)={0x0, 0x0, 0x0, @discrete={0x2, 0x4081}})
socket$unix(0x1, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040), 0xc)
socket$qrtr(0x2a, 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
io_setup(0x7b, &(0x7f0000000100)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}])

15.973944324s ago: executing program 2 (id=537):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f00000001c0)}, 0x10)
sendto$inet(r5, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1", 0x25, 0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)

14.004412099s ago: executing program 1 (id=538):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r1 = syz_open_procfs(0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

13.840944462s ago: executing program 2 (id=539):
getrusage(0x0, &(0x7f0000000040))
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x2}}, 0x10, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000001c0)=[0x39e], 0x2)
io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000002240)=[{0x0, 0x1, 0x0, 0x0, 0x0}, {0x0, 0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000002300)=""/164, 0xa4}], &(0x7f0000001ec0)}, {0x0, 0x1, 0x0, 0x0, 0x0}, {0x1, 0x1, 0x0, &(0x7f0000002180)=[{&(0x7f0000002100)=""/94, 0x5e}], &(0x7f00000021c0)=[0x0, 0x76, 0x5, 0x5, 0xb97f6b7, 0x0, 0x37f, 0xfffffffffffffc00, 0x9]}], 0x5)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

11.820634278s ago: executing program 6 (id=540):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
unshare(0x400)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r5 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc010643a, &(0x7f00000000c0)={0x4000000, 0x1, 0xa2})
ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r6, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48)
sendmsg$nl_xfrm(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=@getsa={0x13c, 0x12, 0x200, 0x70bd2c, 0x25dfdbff, {@in6=@rand_addr=' \x01\x00', 0x4d4, 0x2, 0x2b}, [@mark={0xc, 0x15, {0x35075b, 0x8}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd25, 0x70bd2a, 0x70bd2d, 0x70bd2a, 0x0, [0x4]}}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x16}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2a, 0x70bd25, 0x70bd25, 0x70bd2c, 0x5, [0xffffffff, 0x69ed]}}, @algo_comp={0x91, 0x3, {{'deflate\x00'}, 0x248, "ea2b32a478f486f3fb9b342ec5f35dcdcc263259b9864d324e6552354c3aed190fc6dd7812242bdbe245b24b27305be997acb765f4b369295c4691dac0ef0cade649ad46fea7a3e868"}}, @encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e23, @in6=@private1}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x20, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000ff010000000000009f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ff8e4cb703000008000000b7040000020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000180000000200000000000000000400000e65100001000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000950000"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r5)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0)

11.718983029s ago: executing program 2 (id=541):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x8042, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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")
r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x1)
fchdir(r4)
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000280)='/$]\x15\xc8v\x00', &(0x7f0000000d80)="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", 0x1052)
lseek(r5, 0xffffffffffffffff, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r6, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0xc73, 0x1000, 0x2000, 0x2, 0x3, 0x0, 0x2401})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
openat(r2, &(0x7f0000002300)='./file1\x00', 0x141842, 0x100)

11.493893744s ago: executing program 0 (id=542):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x18)
syz_open_dev$radio(0x0, 0x1, 0x2)
syz_open_dev$dri(&(0x7f00000002c0), 0x7, 0x900)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffff, 0x10000, @mcast1}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x200020, 0x0, 0x0, 0x1000, 0x400]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x2]}}, 0x5c)
setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0xf, 0x4)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="0500000000000000", @ANYRES32], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

11.493565874s ago: executing program 1 (id=546):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x1)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x40)
getdents(r4, 0xfffffffffffffffd, 0x58)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x40000000}, 0x8})
ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffffb, 0x1, 0x3ff}})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
rt_sigsuspend(0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

10.347135214s ago: executing program 1 (id=548):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000240), 0x7, 0x2000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118)
ioctl$USBDEVFS_SETINTERFACE(r7, 0x80045510, &(0x7f0000000000))
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x25dfdbff, {}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

9.953011551s ago: executing program 6 (id=549):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x4)
statfs(0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, 0x0)
setpgid(0x0, r3)
mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x141010, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80200, 0xc2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00')

9.855011163s ago: executing program 2 (id=550):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0)
landlock_restrict_self(r4, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000000)='./file0\x00', 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00')
r6 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='-'], 0x27)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)

8.753960232s ago: executing program 1 (id=551):
getrusage(0x0, &(0x7f0000000040))
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x2}}, 0x10, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300), &(0x7f00000002c0))
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f00000001c0)=[0x39e], 0x2)
io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, &(0x7f0000002240)=[{0x0, 0x1, 0x0, 0x0, 0x0}, {0x0, 0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000002300)=""/164, 0xa4}], &(0x7f0000001ec0)}, {0x0, 0x1, 0x0, 0x0, 0x0}, {0x1, 0x1, 0x0, &(0x7f0000002180)=[{&(0x7f0000002100)=""/94, 0x5e}], &(0x7f00000021c0)=[0x0, 0x76, 0x5, 0x5, 0xb97f6b7, 0x0, 0x37f, 0xfffffffffffffc00, 0x9]}], 0x5)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

8.734615103s ago: executing program 5 (id=52):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
r1 = gettid()
rt_sigqueueinfo(r1, 0x21, &(0x7f0000000ac0)={0x0, 0xc6, 0xfffffffe})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
memfd_secret(0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
syz_open_dev$sg(0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10000)

6.596031631s ago: executing program 1 (id=552):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

6.292782377s ago: executing program 6 (id=553):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00', <r1=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7})
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000140)={[{0x2, 0x8, 0xb7, 0x6, 0x8, 0x4, 0x0, 0x9, 0x9, 0x2, 0x1, 0x16, 0x2}, {0x400, 0xf712, 0x2, 0xfe, 0x10, 0x84, 0xc, 0x0, 0xff, 0x6, 0x3, 0x81, 0x3}, {0x9, 0xfffd, 0x83, 0x7, 0xff, 0x1, 0x40, 0x0, 0x6, 0x1, 0xff, 0x11, 0x800000000ed0}], 0x7})
read(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0xffffff96)
bind$can_j1939(r0, &(0x7f0000000f00)={0x1d, r1, 0x2, {0x0, 0x1, 0x2}, 0x1}, 0x18)
syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f00000079c0)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
fallocate(r6, 0x8, 0x4000, 0x4000)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
fspick(0xffffffffffffff9c, 0x0, 0xf)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x19, 0x1bf, &(0x7f0000000880)})
bind$can_j1939(r0, &(0x7f000001f900)={0x1d, r1, 0x0, {0x2, 0xf0, 0x2}, 0x2}, 0x18)

6.212664778s ago: executing program 5 (id=554):
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
userfaultfd(0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
fchdir(r5)
getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x1000000, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r6 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000040)=0x7)

4.99225667s ago: executing program 0 (id=555):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, 0x0)
bind$nfc_llcp(r0, &(0x7f0000000640)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be62200", 0x37}, 0x60)
r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x40000004}, 0x49c0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffff}})
io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0)

2.686374401s ago: executing program 5 (id=556):
getrusage(0x0, &(0x7f0000000040))
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x2}}, 0x10, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300), &(0x7f00000002c0))
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f00000001c0)=[0x39e], 0x2)
io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, &(0x7f0000002240)=[{0x0, 0x1, 0x0, 0x0, 0x0}, {0x0, 0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000002300)=""/164, 0xa4}], &(0x7f0000001ec0)}, {0x0, 0x1, 0x0, 0x0, 0x0}, {0x1, 0x1, 0x0, &(0x7f0000002180)=[{&(0x7f0000002100)=""/94, 0x5e}], &(0x7f00000021c0)=[0x0, 0x76, 0x5, 0x5, 0xb97f6b7, 0x0, 0x37f, 0xfffffffffffffc00, 0x9]}], 0x5)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

1.607823521s ago: executing program 0 (id=557):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201)
pwritev2(r7, &(0x7f0000001b00)=[{&(0x7f00000000c0)='h', 0x1}], 0x2, 0x0, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, 0x0, 0x4)

1.481384133s ago: executing program 5 (id=558):
r0 = syz_open_dev$rtc(&(0x7f0000001400), 0x0, 0x20080)
r1 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
sendto$packet(r3, &(0x7f0000001440), 0x0, 0x4040808, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket(0x23, 0x5, 0x0)
write(r5, 0x0, 0x0)
r6 = inotify_init()
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[r1, r6]}, 0x2)
r7 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$eventfd(r7, &(0x7f0000000080), 0x51)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000)
sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x400048c0}, 0x0)

184.785486ms ago: executing program 0 (id=559):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, &(0x7f0000000100), 0x4001)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0xee00, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)

155.864906ms ago: executing program 1 (id=569):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7aa, &(0x7f0000000000)={{@any, 0xffffffff}, @any, 0x7, 0x4, 0x40000, 0x7ffffffffffffffe, 0x7ffffffffffffffc, 0x0, 0x9})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x10000, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100))
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r4, &(0x7f0000000000)='./file0\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00')

0s ago: executing program 6 (id=560):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = dup(0xffffffffffffffff)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, 0x0, 0x0)
recvmmsg(r7, 0x0, 0x0, 0x12140, 0x0)
write$UHID_INPUT(r6, 0x0, 0x0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r8, &(0x7f00000000c0)={{0x6, @bcast, 0x1}, [@bcast, @default, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10)

kernel console output (not intermixed with test programs):

n_adv: batadv0: Interface activated: batadv_slave_1
[   78.803599][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.812069][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.821062][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.857230][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.872292][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.882601][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.893842][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.903897][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.914628][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.924637][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.935401][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.946910][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.981107][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.989979][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   79.000751][ T4248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.010252][ T4248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.019206][ T4248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.028269][ T4248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.040080][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.045207][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.056237][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.069487][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.074743][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.087532][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.097606][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.108083][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.118299][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.129039][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.141397][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.171902][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.180690][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.190177][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.205930][ T4250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.215347][ T4250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.224072][ T4250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.233230][ T4250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.260518][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.272953][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.351580][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.417117][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.435045][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.471339][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.515816][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.544318][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.575618][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.631649][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.655747][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.673645][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.723817][ T4335] loop3: detected capacity change from 0 to 2048
[   79.747410][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.797011][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.827608][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.844243][ T4256] Bluetooth: hci0: command 0x0419 tx timeout
[   79.850798][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.858898][ T4256] Bluetooth: hci3: command 0x0419 tx timeout
[   79.924564][ T4256] Bluetooth: hci2: command 0x0419 tx timeout
[   79.930668][ T4256] Bluetooth: hci1: command 0x0419 tx timeout
[   79.939950][ T4253] Bluetooth: hci4: command 0x0419 tx timeout
[   79.948454][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.958205][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.972789][ T4335] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   80.091126][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.516215][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.673955][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.887789][ T4349] Bluetooth: MGMT ver 1.22
[   81.253827][ T4351] loop2: detected capacity change from 0 to 2048
[   81.298269][ T4254] EXT4-fs (loop3): unmounting filesystem.
[   81.355125][ T4351] EXT4-fs: quotafile must be on filesystem root
[   81.592046][ T4357] loop1: detected capacity change from 0 to 1024
[   82.693775][ T4256] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1
[   85.184146][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   85.192470][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   85.200752][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   85.209102][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   85.217371][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   85.225636][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   85.233879][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   85.242240][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   85.250587][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   85.258934][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   86.753482][   T14] cfg80211: failed to load regulatory.db
[   86.762360][ T4401] Zero length message leads to an empty skb
[   88.075152][ T4410] loop1: detected capacity change from 0 to 4096
[   89.314786][ T4405] block device autoloading is deprecated and will be removed.
[   89.352380][ T4390] syz.2.13 (4390): drop_caches: 2
[   89.399330][ T4409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19'.
[   89.574204][ T4410] ntfs: volume version 3.1.
[   89.709175][ T4410] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[   89.720314][ T4410] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28.
[   96.654125][    C0] sched: RT throttling activated
[   97.812433][ T4447] loop3: detected capacity change from 0 to 256
[   97.823314][ T4447] =======================================================
[   97.823314][ T4447] WARNING: The mand mount option has been deprecated and
[   97.823314][ T4447]          and is ignored by this kernel. Remove the mand
[   97.823314][ T4447]          option from the mount to silence this warning.
[   97.823314][ T4447] =======================================================
[   99.591361][ T4447] FAT-fs (loop3): Directory bread(block 64) failed
[   99.598399][ T4447] FAT-fs (loop3): Directory bread(block 65) failed
[   99.605940][ T4447] FAT-fs (loop3): Directory bread(block 66) failed
[   99.612495][ T4447] FAT-fs (loop3): Directory bread(block 67) failed
[   99.619212][ T4447] FAT-fs (loop3): Directory bread(block 68) failed
[   99.625816][ T4447] FAT-fs (loop3): Directory bread(block 69) failed
[   99.632423][ T4447] FAT-fs (loop3): Directory bread(block 70) failed
[   99.639021][ T4447] FAT-fs (loop3): Directory bread(block 71) failed
[   99.645684][ T4447] FAT-fs (loop3): Directory bread(block 72) failed
[   99.652236][ T4447] FAT-fs (loop3): Directory bread(block 73) failed
[   99.674196][   T27] audit: type=1800 audit(1745455831.464:2): pid=4451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.27" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  100.116515][ T4459] loop2: detected capacity change from 0 to 1024
[  103.017568][ T4456] loop0: detected capacity change from 0 to 32768
[  103.563719][ T4456] 
[  103.563719][ T4456]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  103.563719][ T4456] 
[  103.956086][ T4456] 
[  103.956086][ T4456]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  103.956086][ T4456] 
[  104.050963][ T4456] 
[  104.050963][ T4456]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  104.050963][ T4456] 
[  104.334535][ T4456] 
[  104.334535][ T4456]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  104.334535][ T4456] 
[  104.594936][ T4456] 
[  104.594936][ T4456]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  104.594936][ T4456] 
[  104.673192][ T4456] 
[  104.673192][ T4456]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  104.673192][ T4456] 
[  104.730478][  T108] 
[  104.730478][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  104.730478][  T108] 
[  104.946332][ T4376] 
[  104.946332][ T4376]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  104.946332][ T4376] 
[  105.002045][ T4376] 
[  105.002045][ T4376]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  105.002045][ T4376] 
[  105.195041][  T108] 
[  105.195041][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  105.195041][  T108] 
[  108.409038][ T4492] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad)
[  108.415975][ T4492] PKCS7: Only support pkcs7_signedData type
[  108.667425][ T4248] 
[  108.667425][ T4248]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.667425][ T4248] 
[  108.680313][ T4248] 
[  108.680313][ T4248]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.680313][ T4248] 
[  108.854631][ T4495] loop3: detected capacity change from 0 to 4096
[  108.917688][ T4499] loop2: detected capacity change from 0 to 512
[  109.199235][ T4499] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  109.214813][ T4499] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  109.987397][ T4499] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  109.987613][ T4507] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.050345][ T4499] EXT4-fs (loop2): 1 truncate cleaned up
[  110.057256][ T4499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  112.090265][ T4517] loop1: detected capacity change from 0 to 1024
[  112.098405][ T4517] EXT4-fs: Ignoring removed orlov option
[  112.245616][ T4517] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  114.547288][ T4255] EXT4-fs (loop2): unmounting filesystem.
[  115.257498][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  115.735251][ T4545] loop2: detected capacity change from 0 to 256
[  119.045860][ T4552] sctp: failed to load transform for md5: -2
[  120.111411][ T4578] capability: warning: `syz.3.55' uses deprecated v2 capabilities in a way that may be insecure
[  120.701104][ T4589] netlink: 68 bytes leftover after parsing attributes in process `syz.3.57'.
[  122.765303][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.249096][ T4602] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  123.279326][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.388060][ T4253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  123.398165][ T4253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  123.406422][ T4253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  123.415570][ T4253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  123.423986][ T4253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  123.432475][ T4253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  123.441461][ T4604] loop1: detected capacity change from 0 to 8
[  124.107730][ T4611] loop0: detected capacity change from 0 to 32768
[  124.196667][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.280866][ T4611] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  124.971114][ T4248] ocfs2: Unmounting device (7,0) on (node local)
[  124.980841][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.092417][ T4601] SQUASHFS error: Failed to read block 0x4de: -5
[  125.126055][ T4601] SQUASHFS error: Failed to read block 0x4de: -5
[  125.344544][   T27] audit: type=1800 audit(1745455857.824:3): pid=4601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.60" name="file1" dev="loop1" ino=5 res=0 errno=0
[  125.449069][ T4601] SQUASHFS error: Failed to read block 0x4de: -5
[  125.550325][ T4601] SQUASHFS error: Failed to read block 0x4de: -5
[  125.850750][ T4604] SQUASHFS error: Failed to read block 0x4de: -5
[  126.343024][ T4253] Bluetooth: hci3: command 0x0409 tx timeout
[  126.366131][ T4604] SQUASHFS error: Failed to read block 0x4de: -5
[  126.398078][ T4631] loop3: detected capacity change from 0 to 128
[  126.414736][ T4601] SQUASHFS error: Failed to read block 0x4de: -5
[  126.443805][ T4601] SQUASHFS error: Failed to read block 0x4de: -5
[  126.448355][ T4627] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  126.456954][ T4627] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  126.465607][ T4627] vhci_hcd vhci_hcd.0: Device attached
[  126.491477][ T4601] SQUASHFS error: Failed to read block 0x4de: -5
[  126.576336][ T4638] SQUASHFS error: Failed to read block 0x4de: -5
[  126.710369][ T4632] vhci_hcd: connection closed
[  126.725689][ T4393] vhci_hcd: stop threads
[  126.739380][ T4304] vhci_hcd: vhci_device speed not set
[  126.843376][ T4393] vhci_hcd: release socket
[  126.933363][ T4601] SQUASHFS error: Failed to read block 0x4de: -5
[  126.950403][ T4304] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  126.965059][ T4393] vhci_hcd: disconnect device
[  127.109512][ T4638] SQUASHFS error: Failed to read block 0x4de: -5
[  127.528624][ T4638] SQUASHFS error: Failed to read block 0x4de: -5
[  127.535364][ T4638] SQUASHFS error: Failed to read block 0x4de: -5
[  127.823887][ T4606] chnl_net:caif_netlink_parms(): no params data found
[  127.857413][ T4253] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260
[  127.936007][ T4646] loop0: detected capacity change from 0 to 128
[  127.979122][ T4621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.018081][ T4646] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  128.045423][ T4646] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  128.828374][ T4253] Bluetooth: hci3: command 0x041b tx timeout
[  130.103707][ T4674] loop2: detected capacity change from 0 to 512
[  130.196982][ T4606] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.220399][ T4674] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.71: inode #1: comm syz.2.71: iget: illegal inode #
[  130.245430][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.300467][ T4674] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.71: error while reading EA inode 1 err=-117
[  130.312970][ T4606] device bridge_slave_0 entered promiscuous mode
[  130.321574][ T4248] EXT4-fs (loop0): unmounting filesystem.
[  130.332695][ T4606] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.349255][ T4674] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.71: inode #1: comm syz.2.71: iget: illegal inode #
[  130.381074][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.396886][ T4674] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.71: error while reading EA inode 1 err=-117
[  130.416502][ T4606] device bridge_slave_1 entered promiscuous mode
[  130.429398][ T4660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.500542][ T4674] EXT4-fs (loop2): 1 orphan inode deleted
[  130.527836][ T4674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  130.954351][ T4253] Bluetooth: hci3: command 0x040f tx timeout
[  131.363146][ T4606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.666148][ T4606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.174421][ T4304] vhci_hcd: vhci_device speed not set
[  132.639220][ T4255] EXT4-fs (loop2): unmounting filesystem.
[  132.727476][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  132.733797][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  132.890365][ T4695] syz.3.74 uses obsolete (PF_INET,SOCK_PACKET)
[  132.963604][ T4697] random: crng reseeded on system resumption
[  133.044172][ T4253] Bluetooth: hci3: command 0x0419 tx timeout
[  133.284510][ T4606] team0: Port device team_slave_0 added
[  133.787892][ T4606] team0: Port device team_slave_1 added
[  134.141076][ T4606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.174873][ T4606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.276545][ T4606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.484990][ T4606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.492000][ T4606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.542512][ T4606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.900532][ T4719] gfs2: gfs2 mount does not exist
[  135.750929][ T4724] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0
[  135.940379][ T4606] device hsr_slave_0 entered promiscuous mode
[  136.005134][ T4606] device hsr_slave_1 entered promiscuous mode
[  136.031679][ T4606] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.208980][ T4733] loop8: detected capacity change from 0 to 7
[  136.260991][ T4606] Cannot create hsr debugfs directory
[  137.184520][ T4733] Dev loop8: unable to read RDB block 7
[  137.354600][ T4733]  loop8: unable to read partition table
[  137.360477][ T4733] loop8: partition table beyond EOD, truncated
[  137.704482][ T4733] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  137.704482][ T4733] 
) failed (rc=-5)
[  138.139865][ T4744] loop2: detected capacity change from 0 to 1024
[  139.085435][ T4748] loop1: detected capacity change from 0 to 256
[  139.191249][ T4748] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  139.381100][ T4748] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  139.591462][ T4748] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  139.610573][   T33] hfsplus: b-tree write err: -5, ino 4
[  139.617708][ T4748] UDF-fs: Scanning with blocksize 512 failed
[  139.637789][   T11] device hsr_slave_0 left promiscuous mode
[  139.687945][   T11] device hsr_slave_1 left promiscuous mode
[  139.702880][ T4748] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  139.738873][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.788291][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.810913][ T4748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.868487][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.876108][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.907304][   T11] device bridge_slave_1 left promiscuous mode
[  139.922994][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.106675][   T11] device bridge_slave_0 left promiscuous mode
[  140.112958][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.124756][   T11] device veth1_macvtap left promiscuous mode
[  141.132528][   T11] device veth0_macvtap left promiscuous mode
[  141.149020][   T11] device veth1_vlan left promiscuous mode
[  141.175822][ T4751] sctp: failed to load transform for md5: -2
[  141.214904][   T11] device veth0_vlan left promiscuous mode
[  142.252317][ T4778] loop0: detected capacity change from 0 to 256
[  142.285920][ T4776] loop3: detected capacity change from 0 to 1024
[  142.316379][ T4776] EXT4-fs: Ignoring removed orlov option
[  142.337817][ T4778] FAT-fs (loop0): Directory bread(block 64) failed
[  142.414575][ T4778] FAT-fs (loop0): Directory bread(block 65) failed
[  142.561113][ T4778] FAT-fs (loop0): Directory bread(block 66) failed
[  142.651535][ T4778] FAT-fs (loop0): Directory bread(block 67) failed
[  142.721323][ T4776] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  142.797996][ T4778] FAT-fs (loop0): Directory bread(block 68) failed
[  142.918254][ T4778] FAT-fs (loop0): Directory bread(block 69) failed
[  143.021654][ T4778] FAT-fs (loop0): Directory bread(block 70) failed
[  143.189366][ T4786] loop2: detected capacity change from 0 to 4096
[  143.195846][ T4778] FAT-fs (loop0): Directory bread(block 71) failed
[  143.196015][ T4778] FAT-fs (loop0): Directory bread(block 72) failed
[  143.224577][ T4778] FAT-fs (loop0): Directory bread(block 73) failed
[  143.444224][ T4787] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.552924][ T4790] loop1: detected capacity change from 0 to 40427
[  144.591176][ T4790] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  144.599436][ T4790] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  144.633376][ T4790] F2FS-fs (loop1): invalid crc value
[  144.790597][ T4790] F2FS-fs (loop1): Found nat_bits in checkpoint
[  144.868589][ T4790] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  144.876211][ T4790] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  145.160429][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  145.161950][   T27] audit: type=1804 audit(1745455877.644:4): pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.93" name="/newroot/23/bus/file0" dev="loop1" ino=10 res=1 errno=0
[  148.296005][ T4823] loop2: detected capacity change from 0 to 32768
[  148.497912][ T4823] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  148.803246][ T4255] ocfs2: Unmounting device (7,2) on (node local)
[  150.764299][ T4833] process 'syz.1.97' launched './file0' with NULL argv: empty string added
[  159.292706][ T4875] loop1: detected capacity change from 0 to 512
[  159.774587][ T4875] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  160.852854][ T4875] EXT4-fs (loop1): 1 truncate cleaned up
[  160.870736][ T4885] loop0: detected capacity change from 0 to 256
[  160.893903][ T4885] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  160.905908][ T4885] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  160.942583][ T4885] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  161.781996][ T4875] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  163.797472][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  163.912287][   T11] team0 (unregistering): Port device team_slave_1 removed
[  164.405282][ T4896] loop2: detected capacity change from 0 to 512
[  164.412509][ T4896] EXT4-fs: Ignoring removed nobh option
[  164.455489][ T4896] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  164.590362][ T4896] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002]
[  164.599823][ T4896] EXT4-fs (loop2): orphan cleanup on readonly fs
[  164.608989][ T4896] EXT4-fs warning (device loop2): ext4_enable_quotas:7037: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  164.624104][ T4896] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  164.631095][ T4896] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.115: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  164.653518][ T4896] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.115: couldn't read orphan inode 13 (err -117)
[  164.670828][ T4896] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  164.731444][   T11] team0 (unregistering): Port device team_slave_0 removed
[  165.367512][ T4255] EXT4-fs (loop2): unmounting filesystem.
[  165.376250][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  165.583475][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.694912][ T4915] loop1: detected capacity change from 0 to 32768
[  166.822106][ T4915] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  167.092093][ T4265] ocfs2: Unmounting device (7,1) on (node local)
[  169.748812][   T11] bond0 (unregistering): Released all slaves
[  171.021064][ T4946] loop0: detected capacity change from 0 to 32768
[  171.073275][ T4948] loop3: detected capacity change from 0 to 512
[  171.139716][ T4948] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  171.398857][ T4948] EXT4-fs (loop3): 1 truncate cleaned up
[  171.479815][ T4948] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  171.741301][ T4946] XFS (loop0): Mounting V5 Filesystem
[  171.913086][ T4946] XFS (loop0): Ending clean mount
[  171.929585][ T4946] XFS (loop0): Quotacheck needed: Please wait.
[  172.037107][ T4606] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  173.808442][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  173.873909][ T4946] XFS (loop0): Quotacheck: Done.
[  173.994772][ T4606] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  174.044576][ T4248] XFS (loop0): Unmounting Filesystem
[  174.088848][ T4606] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  174.150775][ T4606] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  174.859871][ T4606] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.891349][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  174.907316][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  174.937303][ T4606] 8021q: adding VLAN 0 to HW filter on device team0
[  174.975746][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  174.992270][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  175.001467][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.008732][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.103379][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  175.149524][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  175.190870][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  175.208732][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.215946][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.376703][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  175.395148][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  175.404935][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  175.414935][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  175.433208][ T4606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  175.497511][ T4606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  175.560793][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  175.570945][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  175.609417][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  175.788681][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  175.860730][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  175.966063][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  176.114986][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  176.161496][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  177.008619][ T5013] loop2: detected capacity change from 0 to 256
[  177.216558][ T5013] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  177.253580][ T5013] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  177.982220][ T5013] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  178.064130][ T5013] UDF-fs: Scanning with blocksize 512 failed
[  178.151571][ T5013] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  178.377502][ T5013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  181.432965][ T5048] loop2: detected capacity change from 0 to 512
[  181.460193][ T5048] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  181.574535][ T5048] EXT4-fs (loop2): 1 truncate cleaned up
[  181.619756][ T5048] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  182.808841][ T4255] EXT4-fs (loop2): unmounting filesystem.
[  184.137197][ T5064] loop1: detected capacity change from 0 to 1024
[  184.269146][ T4257] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  184.490674][ T4257] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  184.499346][ T4257] usb 3-1: config 0 has no interface number 0
[  184.506230][ T4257] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  184.517945][ T4257] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  184.544351][ T4257] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  184.558470][ T4257] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  184.568475][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.582822][ T4253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  184.593498][ T4253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  184.601743][ T4253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  184.610548][ T4253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  184.619555][ T4253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  184.627112][ T4253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  184.661080][ T4257] usb 3-1: config 0 descriptor??
[  184.725340][ T5062] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  184.759678][ T4257] ldusb 3-1:0.55: Interrupt in endpoint not found
[  184.939881][ T5064] EXT4-fs: Ignoring removed orlov option
[  184.952068][ T5064] EXT4-fs (loop1): Test dummy encryption mode enabled
[  184.977719][ T4299] usb 3-1: USB disconnect, device number 2
[  184.996123][ T5064] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  185.441887][ T5064] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  185.680995][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  185.805990][ T5078] chnl_net:caif_netlink_parms(): no params data found
[  186.805587][ T4253] Bluetooth: hci3: command 0x0409 tx timeout
[  187.121340][ T5111] loop3: detected capacity change from 0 to 1024
[  187.140631][ T5111] EXT4-fs: Ignoring removed orlov option
[  187.859312][ T5111] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  188.016726][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.031032][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.085898][ T5078] device bridge_slave_0 entered promiscuous mode
[  189.406222][ T4253] Bluetooth: hci3: command 0x041b tx timeout
[  190.585009][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.338610][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  191.384193][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.420248][ T5137] ipt_ECN: cannot use operation on non-tcp rule
[  191.432672][ T5078] device bridge_slave_1 entered promiscuous mode
[  191.534454][ T4253] Bluetooth: hci3: command 0x040f tx timeout
[  191.578522][ T5078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.769113][ T5078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.650392][ T5078] team0: Port device team_slave_0 added
[  192.751814][ T5078] team0: Port device team_slave_1 added
[  193.088893][ T5163] loop2: detected capacity change from 0 to 512
[  194.171515][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  194.183434][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  194.201695][ T5163] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  194.227709][ T4269] Bluetooth: hci3: command 0x0419 tx timeout
[  194.990178][ T5163] EXT4-fs (loop2): 1 truncate cleaned up
[  195.177570][ T5163] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  195.413021][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.420172][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.531258][ T5078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.796773][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.861164][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.994036][ T5078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.244516][ T4253] Bluetooth: hci2: command 0x0406 tx timeout
[  196.246248][ T4256] Bluetooth: hci1: command 0x0406 tx timeout
[  196.259150][ T4269] Bluetooth: hci4: command 0x0406 tx timeout
[  196.324147][ T4268] Bluetooth: hci0: command 0x0406 tx timeout
[  198.440614][ T5182] loop3: detected capacity change from 0 to 32768
[  198.709245][ T4255] EXT4-fs (loop2): unmounting filesystem.
[  198.953480][ T5182] XFS (loop3): Mounting V5 Filesystem
[  198.971994][ T5078] device hsr_slave_0 entered promiscuous mode
[  198.985846][ T5078] device hsr_slave_1 entered promiscuous mode
[  198.992897][ T5078] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.001589][ T5078] Cannot create hsr debugfs directory
[  199.591361][ T5182] XFS (loop3): Ending clean mount
[  199.632049][ T5182] XFS (loop3): Quotacheck needed: Please wait.
[  199.905928][ T5182] XFS (loop3): Quotacheck: Done.
[  200.262842][ T4254] XFS (loop3): Unmounting Filesystem
[  200.612012][ T5202] loop0: detected capacity change from 0 to 40427
[  200.700638][ T5202] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  200.708539][ T5202] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  200.723815][ T5202] F2FS-fs (loop0): invalid crc value
[  200.911315][ T5202] F2FS-fs (loop0): Found nat_bits in checkpoint
[  201.001578][ T5204] loop1: detected capacity change from 0 to 1024
[  201.014764][ T5202] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  201.021855][ T5202] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  201.101918][ T5204] EXT4-fs: Ignoring removed nobh option
[  201.144305][ T5204] EXT4-fs: Ignoring removed bh option
[  201.298247][ T5204] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  201.419802][ T4427] device hsr_slave_0 left promiscuous mode
[  202.731949][ T4427] device hsr_slave_1 left promiscuous mode
[  203.032509][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.047077][ T4248] syz-executor: attempt to access beyond end of device
[  203.047077][ T4248] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  203.063481][ T5217] dlm: non-version read from control device 0
[  203.076808][ T5204] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  203.104930][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.142417][ T4427] device bridge_slave_1 left promiscuous mode
[  203.183685][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.191868][    T9] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  203.214813][    T9] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  203.349742][ T5226] loop3: detected capacity change from 0 to 128
[  203.403577][ T5226] FAT-fs (loop3): bogus number of reserved sectors
[  203.413794][ T4427] device bridge_slave_0 left promiscuous mode
[  203.454590][ T5226] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  203.526275][   T27] audit: type=1800 audit(1745455935.984:5): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.163" name="file1" dev="loop1" ino=15 res=0 errno=0
[  204.174282][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.185171][ T5226] FAT-fs (loop3): Can't find a valid FAT filesystem
[  204.304944][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  208.878476][ T5254] loop3: detected capacity change from 0 to 512
[  208.973571][ T5254] EXT4-fs (loop3): 1 orphan inode deleted
[  208.986453][ T5254] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  208.998015][ T5254] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.083806][ T5260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.172'.
[  210.094359][ T5266] misc userio: Invalid payload size
[  210.274404][   T27] audit: type=1800 audit(1745455942.534:6): pid=5254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.171" name="file1" dev="loop3" ino=18 res=0 errno=0
[  211.018627][ T4427] team0 (unregistering): Port device team_slave_1 removed
[  211.143529][ T4427] team0 (unregistering): Port device team_slave_0 removed
[  211.281963][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.330865][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.354716][ T4427] bond0 (unregistering): Released all slaves
[  212.604971][ T5270] netlink: 'syz.0.173': attribute type 3 has an invalid length.
[  212.612698][ T5270] netlink: 'syz.0.173': attribute type 3 has an invalid length.
[  212.653106][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  212.671957][ T5270] netlink: 'syz.0.173': attribute type 3 has an invalid length.
[  212.720313][ T5270] netlink: 'syz.0.173': attribute type 3 has an invalid length.
[  213.869673][ T5270] netlink: 'syz.0.173': attribute type 3 has an invalid length.
[  213.939054][ T5270] netlink: 'syz.0.173': attribute type 3 has an invalid length.
[  215.565530][ T5270] netlink: 'syz.0.173': attribute type 3 has an invalid length.
[  215.725375][ T5270] netlink: 'syz.0.173': attribute type 3 has an invalid length.
[  215.733127][ T5270] netlink: 'syz.0.173': attribute type 3 has an invalid length.
[  215.743480][ T5270] netlink: 'syz.0.173': attribute type 3 has an invalid length.
[  218.147320][ T5371] input: syz0 as /devices/virtual/input/input6
[  218.351535][ T5078] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  218.441944][ T5078] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  218.491899][ T5078] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  218.502523][ T5378] loop1: detected capacity change from 0 to 64
[  218.555404][ T5078] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  219.564033][ T5388] netlink: 32 bytes leftover after parsing attributes in process `syz.0.185'.
[  221.258336][ T5078] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.404890][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  221.415328][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  221.506863][ T5078] 8021q: adding VLAN 0 to HW filter on device team0
[  221.736708][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  222.591389][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  222.606459][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.613611][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.622873][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  222.684312][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  222.754647][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  222.798145][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.805394][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.972113][ T5411] loop3: detected capacity change from 0 to 512
[  222.984243][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  225.666926][ T5411] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  226.108507][ T5411] EXT4-fs: failed to create workqueue
[  226.111308][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  226.114232][ T5411] EXT4-fs (loop3): mount failed
[  226.125461][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  226.288246][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  226.385310][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  226.412354][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  226.747651][ T5428] loop2: detected capacity change from 0 to 40427
[  226.764881][ T4253] Bluetooth: Wrong link type (-22)
[  226.780751][ T5428] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  226.789115][ T5428] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  226.861684][ T5428] F2FS-fs (loop2): invalid crc value
[  227.476345][ T5428] F2FS-fs (loop2): Found nat_bits in checkpoint
[  227.529708][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  227.549945][ T5428] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  227.557125][ T5428] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  227.615382][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  227.740745][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  229.720102][ T5078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.746988][ T4255] syz-executor: attempt to access beyond end of device
[  229.746988][ T4255] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  229.773851][ T5448] loop1: detected capacity change from 0 to 32768
[  229.792806][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  229.804805][ T5448] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt
[  229.804805][ T5448] 
[  229.838673][ T5448] ERROR: (device loop1): remounting filesystem as read-only
[  229.846276][ T5448] jfs_lookup: dtSearch returned -5
[  230.068706][ T5347] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  231.262113][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  231.740085][ T5347] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  233.215294][ T5474] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.223841][ T5474] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.857044][ T5474] syz.3.202 (5474) used greatest stack depth: 20184 bytes left
[  234.703267][ T5495] loop0: detected capacity change from 0 to 16
[  235.881653][ T5496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'.
[  236.776671][ T5495] erofs: (device loop0): mounted with root inode @ nid 36.
[  236.856538][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  236.864660][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  237.112114][ T5078] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.187771][ T5501] input: syz0 as /devices/virtual/input/input9
[  237.238454][ T4523] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  239.230760][ T5521] loop2: detected capacity change from 0 to 256
[  239.909944][ T5521] FAT-fs (loop2): Directory bread(block 64) failed
[  239.930408][ T5529] loop1: detected capacity change from 0 to 512
[  239.948653][ T5521] FAT-fs (loop2): Directory bread(block 65) failed
[  239.958112][ T5521] FAT-fs (loop2): Directory bread(block 66) failed
[  239.984164][ T5521] FAT-fs (loop2): Directory bread(block 67) failed
[  239.990825][ T5521] FAT-fs (loop2): Directory bread(block 68) failed
[  240.124000][ T5521] FAT-fs (loop2): Directory bread(block 69) failed
[  240.131800][ T5521] FAT-fs (loop2): Directory bread(block 70) failed
[  240.138866][ T5521] FAT-fs (loop2): Directory bread(block 71) failed
[  240.145603][ T5521] FAT-fs (loop2): Directory bread(block 72) failed
[  240.152228][ T5521] FAT-fs (loop2): Directory bread(block 73) failed
[  240.162784][ T5529] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  240.179706][ T5529] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  240.278296][   T27] audit: type=1800 audit(1745455972.764:7): pid=5529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.210" name="file2" dev="loop1" ino=16 res=0 errno=0
[  243.071685][ T5557] loop0: detected capacity change from 0 to 2048
[  243.184141][ T5557]  loop0: p2 < > p3 p4
[  243.208622][ T5557] loop0: p3 start 65535 is beyond EOD, truncated
[  243.215209][ T5557] loop0: p4 size 8192 extends beyond EOD, truncated
[  243.557813][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  243.600837][ T4630] udevd[4630]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  243.657888][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'.
[  244.201329][ T4630] udevd[4630]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  244.230731][ T4523] udevd[4523]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  244.545077][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  244.555691][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  244.564443][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  244.576195][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  244.743788][ T4256] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  244.751589][ T4256] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  245.161027][ T5585] loop3: detected capacity change from 0 to 16
[  245.317951][ T5585] erofs: (device loop3): erofs_init_device: empty device tag @ pos 0
[  245.368471][ T5571] chnl_net:caif_netlink_parms(): no params data found
[  246.884906][ T5596] device wg2 entered promiscuous mode
[  247.432275][ T4253] Bluetooth: hci3: command 0x0409 tx timeout
[  247.871190][ T5601] Bluetooth: MGMT ver 1.22
[  248.980422][ T5571] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.008395][ T5571] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.168216][ T5571] device bridge_slave_0 entered promiscuous mode
[  249.444345][ T4253] Bluetooth: hci3: command 0x041b tx timeout
[  250.955754][ T5571] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.994581][ T5571] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.002918][ T5571] device bridge_slave_1 entered promiscuous mode
[  251.365859][ T5623] loop1: detected capacity change from 0 to 2048
[  251.700800][ T4253] Bluetooth: hci3: command 0x040f tx timeout
[  251.742271][ T5623]  loop1: p2 < > p3 p4
[  251.747817][ T5623] loop1: p3 start 65535 is beyond EOD, truncated
[  251.754293][ T5623] loop1: p4 size 8192 extends beyond EOD, truncated
[  251.765749][ T5571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.181541][ T5571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.455078][ T5571] team0: Port device team_slave_0 added
[  252.507077][ T5632] binder: 5631:5632 ioctl c018620c 2000000002c0 returned -1
[  252.556215][ T5571] team0: Port device team_slave_1 added
[  254.038951][ T4253] Bluetooth: hci3: command 0x0419 tx timeout
[  255.607361][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  255.613706][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  255.843240][ T5664] loop1: detected capacity change from 0 to 64
[  255.892375][ T5664] hfs: unable to parse mount options
[  256.858573][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.914081][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.128533][ T5571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.130847][ T4523] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  257.202354][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.209978][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.243332][ T5675] loop3: detected capacity change from 0 to 512
[  257.320595][ T5675] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  257.370855][ T5571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.422181][ T5675] EXT4-fs (loop3): 1 truncate cleaned up
[  257.428101][ T5675] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  258.673145][ T5571] device hsr_slave_0 entered promiscuous mode
[  258.976851][ T5571] device hsr_slave_1 entered promiscuous mode
[  258.989618][ T5571] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  259.008189][ T5571] Cannot create hsr debugfs directory
[  260.292836][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  260.329005][ T5341] device hsr_slave_0 left promiscuous mode
[  260.365890][ T5341] device hsr_slave_1 left promiscuous mode
[  260.374893][ T5341] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.392646][ T5341] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.759707][ T5341] device bridge_slave_1 left promiscuous mode
[  260.927262][ T5341] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.181249][ T5341] device bridge_slave_0 left promiscuous mode
[  261.188009][ T5341] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.445559][ T5707] befs: (nullb0): No write support. Marking filesystem read-only
[  261.458607][ T5707] befs: (nullb0): invalid magic header
[  261.668382][ T5707] loop3: detected capacity change from 0 to 4096
[  261.820406][ T5707] NILFS (loop3): invalid segment: Checksum error in segment payload
[  261.829133][ T5707] NILFS (loop3): trying rollback from an earlier position
[  261.940925][ T5707] NILFS (loop3): recovery complete
[  262.084463][ T5709] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  263.957727][ T5729] loop2: detected capacity change from 0 to 1024
[  263.975376][ T5729] EXT4-fs: Ignoring removed nobh option
[  263.980968][ T5729] EXT4-fs: Ignoring removed bh option
[  264.096311][ T5729] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  264.473836][ T5729] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  265.020686][   T27] audit: type=1800 audit(1745455997.484:8): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.245" name="file1" dev="loop2" ino=15 res=0 errno=0
[  265.778469][ T4255] EXT4-fs (loop2): unmounting filesystem.
[  265.919305][ T5341] team0 (unregistering): Port device team_slave_1 removed
[  266.414947][ T4296] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  266.885981][ T4296] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  266.907395][ T5750] loop0: detected capacity change from 0 to 256
[  266.946472][ T4296] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  266.968448][ T4296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.978366][ T4296] usb 4-1: Product: syz
[  266.982574][ T4296] usb 4-1: Manufacturer: syz
[  266.987723][ T4296] usb 4-1: SerialNumber: syz
[  267.035169][ T4296] usb 4-1: config 0 descriptor??
[  267.166953][ T5341] team0 (unregistering): Port device team_slave_0 removed
[  268.964297][ T4296] usb 4-1: USB disconnect, device number 2
[  268.994951][ T5341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.920726][ T5341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.026609][ T5776] loop0: detected capacity change from 0 to 64
[  272.904566][ T4268] Bluetooth: hci1: command 0x0406 tx timeout
[  273.346315][ T5789] loop2: detected capacity change from 0 to 2048
[  273.494455][ T5796] xt_CT: You must specify a L4 protocol and not use inversions on it
[  274.498171][ T5789] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  274.649518][ T5799] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  274.664810][ T5789] syz.2.258: attempt to access beyond end of device
[  274.664810][ T5789] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  276.216251][ T5806] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 16777227
[  276.225009][ T5806] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16)
[  276.244632][ T5806] Remounting filesystem read-only
[  276.249683][ T5806] NILFS (loop2): error -5 truncating bmap (ino=16)
[  276.595563][ T4255] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  277.846628][ T5814] loop2: detected capacity change from 0 to 64
[  278.533056][ T4598] libceph: connect (1)[c::]:6789 error -101
[  278.550004][ T4598] libceph: mon0 (1)[c::]:6789 connect error
[  278.630404][ T4598] libceph: connect (1)[c::]:6789 error -101
[  278.684510][ T4598] libceph: mon0 (1)[c::]:6789 connect error
[  278.977797][ T4598] libceph: connect (1)[c::]:6789 error -101
[  278.984003][ T4598] libceph: mon0 (1)[c::]:6789 connect error
[  278.985840][ T5814] ceph: No mds server is up or the cluster is laggy
[  280.741529][ T5341] bond0 (unregistering): Released all slaves
[  286.744095][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'.
[  287.249869][ T5880] netlink: 32 bytes leftover after parsing attributes in process `syz.1.275'.
[  293.119090][ T5571] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  293.155832][ T5571] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  293.217242][ T5571] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  293.257093][ T5571] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  293.476816][ T5904] loop2: detected capacity change from 0 to 2048
[  293.805525][ T5904]  loop2: p2 < > p3 p4
[  293.811325][ T5904] loop2: p3 start 65535 is beyond EOD, truncated
[  293.818207][ T5904] loop2: p4 size 8192 extends beyond EOD, truncated
[  293.872190][ T3622]  loop2: p2 < > p3 p4
[  294.024680][ T3622] loop2: p3 start 65535 is beyond EOD, truncated
[  294.031084][ T3622] loop2: p4 size 8192 extends beyond EOD, truncated
[  294.794776][ T5919] overlayfs: failed to resolve './file1': -2
[  295.501423][ T4523] udevd[4523]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  295.576985][ T4630] udevd[4630]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  296.479232][ T5924] loop2: detected capacity change from 0 to 512
[  297.675338][ T5571] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.757099][ T4523] udevd[4523]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  297.770454][ T4630] udevd[4630]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  297.785347][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  297.793301][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  297.838628][ T5571] 8021q: adding VLAN 0 to HW filter on device team0
[  299.033986][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  299.063085][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  299.620269][ T5952] loop3: detected capacity change from 0 to 512
[  300.527454][ T5952] EXT4-fs (loop3): orphan cleanup on readonly fs
[  300.551191][ T5952] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  300.562507][ T5952] EXT4-fs warning (device loop3): ext4_enable_quotas:7037: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  300.577504][ T5952] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  300.596556][ T5952] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.288: bg 0: block 97: padding at end of block bitmap is not set
[  300.621441][ T5952] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  300.636369][ T5952] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2925: inode #15: comm syz.3.288: corrupted xattr block 19
[  300.804209][ T4253] Bluetooth: hci0: command 0x0409 tx timeout
[  301.028669][ T5952] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117)
[  301.038184][ T5952] EXT4-fs (loop3): 1 orphan inode deleted
[  301.044108][ T5952] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  301.158071][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.165295][ T4553] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.376552][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  301.389622][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  301.398870][ T4553] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.406073][ T4553] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.414554][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  301.423937][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  301.454159][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  301.463524][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  301.586188][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  301.644371][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  301.705088][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  301.748529][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  302.223805][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  302.752697][ T5971] loop0: detected capacity change from 0 to 164
[  303.049799][ T5971] iso9660: Corrupted directory entry in block 4 of inode 1792
[  305.438456][ T4253] Bluetooth: hci1: Malformed LE Event: 0x0b
[  308.661192][ T6010] sctp: failed to load transform for md5: -2
[  308.821755][ T6017] syz.2.299 (6017): /proc/6000/oom_adj is deprecated, please use /proc/6000/oom_score_adj instead.
[  309.685971][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  309.717800][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  309.726220][ T4256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  309.734503][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  309.744073][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  309.751386][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  311.228674][ T6029] xt_CT: You must specify a L4 protocol and not use inversions on it
[  311.657003][ T6039] dccp_invalid_packet: P.Data Offset(243) too large
[  311.927640][ T4268] Bluetooth: hci3: command 0x0409 tx timeout
[  314.323311][ T4268] Bluetooth: hci3: command 0x041b tx timeout
[  314.409252][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.416875][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.540507][ T6021] chnl_net:caif_netlink_parms(): no params data found
[  315.830934][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.639725][ T4268] Bluetooth: hci3: command 0x040f tx timeout
[  316.874177][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.914340][ T6021] device bridge_slave_0 entered promiscuous mode
[  317.049392][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  317.056018][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  317.693363][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.723681][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.882701][ T6021] device bridge_slave_1 entered promiscuous mode
[  318.000481][ T6090] loop3: detected capacity change from 0 to 512
[  318.040651][ T6090] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  318.082598][ T6090] EXT4-fs (loop3): 1 truncate cleaned up
[  318.101981][ T6090] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  319.188574][ T4268] Bluetooth: hci3: command 0x0419 tx timeout
[  321.183841][ T6021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.271998][ T6021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.548155][ T6111] loop2: detected capacity change from 0 to 64
[  322.480758][ T6021] team0: Port device team_slave_0 added
[  322.522214][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  323.312973][ T6021] team0: Port device team_slave_1 added
[  324.901171][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.918280][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.948997][ T6021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.226459][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.233476][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.263251][ T6021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.577571][ T4268] Bluetooth: hci4: Malformed LE Event: 0x0b
[  328.573789][ T6021] device hsr_slave_0 entered promiscuous mode
[  330.102211][ T6180] netlink: 72 bytes leftover after parsing attributes in process `syz.1.326'.
[  330.111326][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'.
[  330.569823][ T6021] device hsr_slave_1 entered promiscuous mode
[  330.721266][ T6021] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  330.785978][ T6021] Cannot create hsr debugfs directory
[  330.914129][ T6190] loop2: detected capacity change from 0 to 64
[  332.198023][ T5338] device hsr_slave_0 left promiscuous mode
[  332.432622][ T5338] device hsr_slave_1 left promiscuous mode
[  332.954574][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_0
[  332.992310][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.035087][ T5338] device bridge_slave_1 left promiscuous mode
[  333.043156][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.158319][ T5338] device bridge_slave_0 left promiscuous mode
[  333.334781][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.285763][ T6210] overlayfs: missing 'lowerdir'
[  335.270550][ T6214] loop2: detected capacity change from 0 to 2048
[  335.407237][ T5338] team0 (unregistering): Port device team_slave_1 removed
[  335.427278][ T6214] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  335.762723][ T5338] team0 (unregistering): Port device team_slave_0 removed
[  335.860858][   T27] audit: type=1326 audit(1745456068.344:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.2.336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e3798e969 code=0x0
[  335.906128][ T5338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  336.861095][ T4255] EXT4-fs (loop2): unmounting filesystem.
[  337.060286][ T5338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  340.529141][ T6243] loop2: detected capacity change from 0 to 64
[  343.431867][ T5338] bond0 (unregistering): Released all slaves
[  344.327178][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  346.022242][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  346.031187][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  346.039994][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  346.049032][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  346.057867][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  346.066654][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  346.075455][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  346.084241][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  346.093002][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  348.584127][ T4254] syz-executor (4254) used greatest stack depth: 20088 bytes left
[  348.812707][ T6265] sctp: failed to load transform for md5: -2
[  352.958331][ T4253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  352.972739][ T4253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  352.982353][ T4253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  352.993386][ T4253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  353.024205][ T4253] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  353.109262][ T6308] ieee802154 phy0 wpan0: encryption failed: -22
[  353.232681][ T4253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  353.294709][ T6309] validate_nla: 45 callbacks suppressed
[  353.294775][ T6309] netlink: 'syz.1.355': attribute type 1 has an invalid length.
[  353.531720][ T6311] netlink: 'syz.0.356': attribute type 4 has an invalid length.
[  354.155220][ T6311] syz.0.356 (6311) used greatest stack depth: 19896 bytes left
[  355.729098][ T4268] Bluetooth: hci1: command 0x0409 tx timeout
[  357.437354][ T6342] syz.0.359[6342] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  357.438093][ T6342] syz.0.359[6342] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  358.195490][ T4268] Bluetooth: hci1: command 0x041b tx timeout
[  359.513825][ T5338] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.893090][ T5338] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.162129][ T5338] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.254266][ T4268] Bluetooth: hci1: command 0x040f tx timeout
[  360.300575][ T6292] chnl_net:caif_netlink_parms(): no params data found
[  360.752024][ T5338] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.593466][   T27] audit: type=1326 audit(1745456094.074:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.2.367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e3798e969 code=0x0
[  361.615137][    C1] vkms_vblank_simulate: vblank timer overrun
[  362.721654][ T6373] autofs4:pid:6373:autofs_fill_super: called with bogus options
[  362.784388][ T4268] Bluetooth: hci1: command 0x0419 tx timeout
[  363.126765][ T6292] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.144804][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.153110][ T6292] device bridge_slave_0 entered promiscuous mode
[  363.205823][ T6292] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.212973][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.255313][ T6292] device bridge_slave_1 entered promiscuous mode
[  365.666189][ T6292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  365.839353][ T6292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.335451][ T6415] program syz.0.373 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  367.640538][ T4253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  367.659244][ T4253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  367.670995][ T4253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  368.454269][ T4256] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  368.466509][ T4256] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  368.475273][ T4256] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  368.721998][ T6292] team0: Port device team_slave_0 added
[  369.442465][ T6292] team0: Port device team_slave_1 added
[  369.669665][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.703188][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.730294][ T6450] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  369.867515][ T6292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.944628][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.944647][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.944674][ T6292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.039367][ T6459] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  370.804407][ T4268] Bluetooth: hci3: command 0x0409 tx timeout
[  371.044975][ T6292] device hsr_slave_0 entered promiscuous mode
[  371.045602][ T6292] device hsr_slave_1 entered promiscuous mode
[  371.045989][ T6292] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  371.046082][ T6292] Cannot create hsr debugfs directory
[  371.106428][    C1] vkms_vblank_simulate: vblank timer overrun
[  372.934333][ T4256] Bluetooth: hci3: command 0x041b tx timeout
[  373.524513][ T6425] chnl_net:caif_netlink_parms(): no params data found
[  374.178651][ T6489] program syz.2.384 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  374.964941][ T4268] Bluetooth: hci3: command 0x040f tx timeout
[  377.145904][ T4268] Bluetooth: hci3: command 0x0419 tx timeout
[  377.415383][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.434226][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.469415][ T6425] device bridge_slave_0 entered promiscuous mode
[  378.396568][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.496939][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  378.503314][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  379.364506][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.379061][ T6425] device bridge_slave_1 entered promiscuous mode
[  381.171817][ T5338] device hsr_slave_0 left promiscuous mode
[  381.190994][ T5338] device hsr_slave_1 left promiscuous mode
[  381.207600][ T5338] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  381.381148][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.394424][ T5338] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  381.401956][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.414204][ T5338] device bridge_slave_1 left promiscuous mode
[  381.444252][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.795344][ T5338] device bridge_slave_0 left promiscuous mode
[  382.801631][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.678026][ T5338] device veth1_macvtap left promiscuous mode
[  383.696062][ T5338] device veth0_macvtap left promiscuous mode
[  383.702262][ T5338] device veth1_vlan left promiscuous mode
[  383.723393][ T5338] device veth0_vlan left promiscuous mode
[  384.456369][ T6544] program syz.1.396 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  386.960440][ T6568] __nla_validate_parse: 42 callbacks suppressed
[  386.960459][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'.
[  387.735632][ T5338] team0 (unregistering): Port device team_slave_1 removed
[  387.784740][ T5338] team0 (unregistering): Port device team_slave_0 removed
[  387.828921][ T5338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  387.876522][ T5338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.329227][ T5338] bond0 (unregistering): Released all slaves
[  388.409859][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.442833][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  388.476119][ T6292] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  388.536206][ T6292] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  388.626107][ T6292] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  388.674651][ T6425] team0: Port device team_slave_0 added
[  388.685169][ T6292] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  388.739542][ T6425] team0: Port device team_slave_1 added
[  388.812579][ T6583] fuse: Bad value for 'fd'
[  390.573896][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.624043][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.650018][    C1] vkms_vblank_simulate: vblank timer overrun
[  391.870404][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  392.006984][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1
[  392.032532][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  392.094151][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.251440][ T6611] QAT: Invalid ioctl 44545
[  393.718488][ T6425] device hsr_slave_0 entered promiscuous mode
[  393.967417][ T6618] netlink: 452 bytes leftover after parsing attributes in process `syz.1.410'.
[  395.424594][ T6425] device hsr_slave_1 entered promiscuous mode
[  395.484692][ T6425] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  395.506374][ T6425] Cannot create hsr debugfs directory
[  395.564050][ T6292] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.728931][ T6631] netlink: 'syz.0.412': attribute type 1 has an invalid length.
[  396.805201][ T6292] 8021q: adding VLAN 0 to HW filter on device team0
[  396.833700][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  396.856266][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  397.892029][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  397.935206][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  398.164396][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.171637][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state
[  398.262193][ T6662] netlink: 168 bytes leftover after parsing attributes in process `syz.0.418'.
[  399.263631][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  399.275430][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  399.463757][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  399.542842][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.550068][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state
[  399.558369][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  400.271699][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  400.363776][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  400.380356][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  400.406005][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  400.438024][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  400.466397][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  400.574964][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  400.615362][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  401.271522][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  401.591668][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  404.095147][ T6700] netlink: 'syz.2.427': attribute type 1 has an invalid length.
[  404.164435][ T4268] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  404.172286][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout
[  406.401370][ T6720] tty tty21: ldisc open failed (-12), clearing slot 20
[  407.812355][ T6743] fuse: Bad value for 'fd'
[  410.919224][ T6728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  410.993539][ T4256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  411.003213][ T4256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  411.011733][ T4256] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  411.019770][ T4256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  411.028707][ T4256] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  411.036273][ T4256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  413.656849][ T4268] Bluetooth: hci1: command 0x0409 tx timeout
[  415.745808][ T4268] Bluetooth: hci1: command 0x041b tx timeout
[  417.426495][ T6425] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  417.542308][ T5338] device hsr_slave_0 left promiscuous mode
[  417.565492][ T5338] device hsr_slave_1 left promiscuous mode
[  417.778241][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_0
[  417.794927][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_1
[  417.807980][ T5338] device bridge_slave_1 left promiscuous mode
[  417.824486][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.832962][ T5338] device bridge_slave_0 left promiscuous mode
[  417.839746][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.864241][ T4256] Bluetooth: hci1: command 0x040f tx timeout
[  420.213117][ T4256] Bluetooth: hci1: command 0x0419 tx timeout
[  420.405880][ T5338] team0 (unregistering): Port device team_slave_1 removed
[  420.511361][ T5338] team0 (unregistering): Port device team_slave_0 removed
[  420.819085][ T5338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  421.331525][ T5338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  421.600514][ T5338] bond0 (unregistering): Released all slaves
[  421.659367][ T6425] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  421.685788][ T6425] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  421.713836][ T6425] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  421.756945][ T6750] chnl_net:caif_netlink_parms(): no params data found
[  422.010245][ T6750] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.017801][ T6750] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.026534][ T6750] device bridge_slave_0 entered promiscuous mode
[  422.058026][ T6750] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.068884][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.085864][ T6750] device bridge_slave_1 entered promiscuous mode
[  422.175920][ T6750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.269467][ T6750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.581645][ T6750] team0: Port device team_slave_0 added
[  424.592253][ T6750] team0: Port device team_slave_1 added
[  424.671350][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.691857][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.726795][ T6750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.778610][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.786102][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.901432][ T6750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.059319][ T6750] device hsr_slave_0 entered promiscuous mode
[  425.144455][ T6750] device hsr_slave_1 entered promiscuous mode
[  425.163783][ T6750] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  425.182693][ T6750] Cannot create hsr debugfs directory
[  430.112499][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  430.123445][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  430.133386][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  430.141655][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  430.150951][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  430.158373][ T4253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  432.244724][ T4253] Bluetooth: hci3: command 0x0409 tx timeout
[  434.324173][ T4253] Bluetooth: hci3: command 0x041b tx timeout
[  436.155759][ T6958] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  436.162342][ T6958] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  436.172558][ T6958] vhci_hcd vhci_hcd.0: Device attached
[  436.425810][ T4253] Bluetooth: hci3: command 0x040f tx timeout
[  436.555428][   T22] usb 36-1: SetAddress Request (2) to port 0
[  436.562079][   T22] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd
[  436.570285][ T6959] vhci_hcd: connection closed
[  436.579673][ T5330] vhci_hcd: stop threads
[  436.582090][ T6923] chnl_net:caif_netlink_parms(): no params data found
[  436.584953][ T5330] vhci_hcd: release socket
[  436.601211][ T5330] vhci_hcd: disconnect device
[  436.790298][ T6750] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  438.421059][ T6750] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  438.494459][ T4256] Bluetooth: hci3: command 0x0419 tx timeout
[  438.831489][ T6971] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  439.089804][ T6750] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  439.476209][ T6750] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  439.538092][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.592581][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.747703][ T6923] device bridge_slave_0 entered promiscuous mode
[  439.930395][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  439.936950][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  439.978884][ T6923] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.059120][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.234935][ T6923] device bridge_slave_1 entered promiscuous mode
[  440.772629][ T6977] random: crng reseeded on system resumption
[  440.817626][ T5338] device hsr_slave_0 left promiscuous mode
[  441.684107][   T22] usb 36-1: device descriptor read/8, error -110
[  441.815789][ T5338] device hsr_slave_1 left promiscuous mode
[  441.886787][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_0
[  441.904739][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_1
[  441.955295][ T5338] device bridge_slave_1 left promiscuous mode
[  441.975398][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.019351][ T5338] device bridge_slave_0 left promiscuous mode
[  442.043120][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.106482][   T22] usb usb36-port1: attempt power cycle
[  442.775133][   T22] usb usb36-port1: unable to enumerate USB device
[  444.055793][ T5338] team0 (unregistering): Port device team_slave_1 removed
[  444.206075][ T5338] team0 (unregistering): Port device team_slave_0 removed
[  444.422105][ T5338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  445.460245][ T5338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  445.664051][ T4239] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  446.899640][ T4239] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  446.934090][ T4239] usb 3-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00
[  446.943487][ T4239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.996565][ T4239] usb 3-1: config 0 descriptor??
[  448.683355][ T4239] usbhid 3-1:0.0: can't add hid device: -71
[  448.694278][ T4239] usbhid: probe of 3-1:0.0 failed with error -71
[  448.766322][ T4239] usb 3-1: USB disconnect, device number 3
[  449.088744][ T7026] xt_TPROXY: Can be used only with -p tcp or -p udp
[  449.355745][   T27] audit: type=1326 audit(1745456181.834:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c93f8e969 code=0x7ffc0000
[  449.449399][ T7029] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  449.713635][   T27] audit: type=1326 audit(1745456181.834:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c93f8e969 code=0x7ffc0000
[  449.735780][    C1] vkms_vblank_simulate: vblank timer overrun
[  449.741853][   T27] audit: type=1326 audit(1745456181.834:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c93f8e969 code=0x7ffc0000
[  449.774101][   T27] audit: type=1326 audit(1745456181.834:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c93f8e969 code=0x7ffc0000
[  449.858191][   T27] audit: type=1326 audit(1745456181.834:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c93f8e969 code=0x7ffc0000
[  449.880971][   T27] audit: type=1326 audit(1745456181.834:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c93f8e969 code=0x7ffc0000
[  449.914346][   T27] audit: type=1326 audit(1745456181.834:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c93f8e969 code=0x7ffc0000
[  449.942681][   T27] audit: type=1326 audit(1745456181.834:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c93f8e969 code=0x7ffc0000
[  449.965411][   T27] audit: type=1326 audit(1745456181.854:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c93f8e969 code=0x7ffc0000
[  449.988180][   T27] audit: type=1326 audit(1745456181.854:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c93f8e969 code=0x7ffc0000
[  450.040498][ T5338] bond0 (unregistering): Released all slaves
[  450.371630][ T6923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.318847][ T6923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.054142][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  453.604074][ T4256] Bluetooth: hci3: command 0x0405 tx timeout
[  453.787405][ T6923] team0: Port device team_slave_0 added
[  453.861549][ T6923] team0: Port device team_slave_1 added
[  454.399493][ T6923] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.416372][ T6923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.477278][ T6923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.548656][ T6923] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.571769][ T6923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  455.605168][ T6923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.736493][ T6750] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.809318][ T6750] 8021q: adding VLAN 0 to HW filter on device team0
[  455.876375][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  455.908296][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  455.933815][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  456.049742][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  456.062505][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.069791][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state
[  456.079271][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  456.089015][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  456.102328][ T7068] xt_time: invalid argument - start or stop time greater than 23:59:59
[  456.113227][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.120646][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state
[  456.149430][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  456.165199][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  456.185156][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  456.205780][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  456.229213][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  456.271467][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  456.291797][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  456.336260][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  456.581829][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  456.602198][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  456.638187][ T6750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  456.702545][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  456.733596][ T6923] device hsr_slave_0 entered promiscuous mode
[  456.758659][ T6923] device hsr_slave_1 entered promiscuous mode
[  456.780699][ T6923] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  456.802435][ T6923] Cannot create hsr debugfs directory
[  456.833650][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  456.851743][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  457.510419][ T7080] xt_TPROXY: Can be used only with -p tcp or -p udp
[  457.671854][   T27] kauditd_printk_skb: 7 callbacks suppressed
[  457.671897][   T27] audit: type=1326 audit(1745456190.154:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfb18e969 code=0x7ffc0000
[  457.797092][   T27] audit: type=1326 audit(1745456190.154:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbbfb18e969 code=0x7ffc0000
[  457.924203][   T27] audit: type=1326 audit(1745456190.154:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfb18e969 code=0x7ffc0000
[  458.037382][   T27] audit: type=1326 audit(1745456190.154:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbbfb18e969 code=0x7ffc0000
[  458.149750][   T27] audit: type=1326 audit(1745456190.154:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfb18e969 code=0x7ffc0000
[  458.225386][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  458.234447][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  458.239059][   T27] audit: type=1326 audit(1745456190.154:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbfb18e969 code=0x7ffc0000
[  458.258134][ T6750] 8021q: adding VLAN 0 to HW filter on device batadv0
[  458.270772][   T27] audit: type=1326 audit(1745456190.194:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfb18e969 code=0x7ffc0000
[  458.298514][   T27] audit: type=1326 audit(1745456190.194:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfb18e969 code=0x7ffc0000
[  458.461614][   T27] audit: type=1326 audit(1745456190.194:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbbfb18e969 code=0x7ffc0000
[  458.837417][   T27] audit: type=1326 audit(1745456190.194:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfb18e969 code=0x7ffc0000
[  462.939681][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  462.955464][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  462.968295][ T7131] xt_time: invalid argument - start or stop time greater than 23:59:59
[  463.181708][ T6750] device veth0_vlan entered promiscuous mode
[  463.257283][ T6923] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  463.365236][ T6750] device veth1_vlan entered promiscuous mode
[  463.386807][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  463.992852][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  464.252560][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  464.298567][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  464.358747][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  464.545559][ T6923] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  464.584514][ T6923] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  464.718771][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  464.718805][   T27] audit: type=1400 audit(1745456197.204:42): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7150 comm="syz.0.497"
[  465.851665][ T5338] device hsr_slave_0 left promiscuous mode
[  466.314227][ T5338] device hsr_slave_1 left promiscuous mode
[  466.498358][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_0
[  468.624296][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_1
[  468.652609][ T5338] device bridge_slave_1 left promiscuous mode
[  468.676436][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'.
[  468.704847][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.743160][ T5338] device bridge_slave_0 left promiscuous mode
[  468.773345][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.399039][ T4253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  470.423519][ T4253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  470.437178][ T4253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  470.452573][ T4253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  470.469410][ T4253] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  470.479735][ T4253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  470.866945][ T5338] team0 (unregistering): Port device team_slave_1 removed
[  470.954839][ T7190] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  471.196917][ T5338] team0 (unregistering): Port device team_slave_0 removed
[  471.465770][ T5338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  471.937154][ T5338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  474.797608][ T4253] Bluetooth: hci1: command 0x0409 tx timeout
[  475.320380][ T5338] bond0 (unregistering): Released all slaves
[  475.786608][ T6923] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  476.884133][ T4253] Bluetooth: hci1: command 0x041b tx timeout
[  477.560114][ T7174] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  477.584499][ T7174] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  479.838239][ T6923] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.894155][ T4253] Bluetooth: hci1: command 0x040f tx timeout
[  480.596002][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  480.624811][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  480.831368][ T6923] 8021q: adding VLAN 0 to HW filter on device team0
[  481.647959][ T7229] batman_adv: batadv0: Adding interface: dummy0
[  481.654362][ T7229] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.680076][ T7229] batman_adv: batadv0: Interface activated: dummy0
[  481.795109][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  481.804974][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  481.813596][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.820844][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  482.053448][ T4253] Bluetooth: hci1: command 0x0419 tx timeout
[  483.642686][ T7235] lo speed is unknown, defaulting to 1000
[  483.643727][ T7236] lo speed is unknown, defaulting to 1000
[  483.654158][ T7235] lo speed is unknown, defaulting to 1000
[  483.655896][ T7236] lo speed is unknown, defaulting to 1000
[  483.664108][ T7235] lo speed is unknown, defaulting to 1000
[  483.668793][ T7236] lo speed is unknown, defaulting to 1000
[  483.686106][ T7236] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  483.700953][ T7236] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  483.734556][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  483.775956][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  483.822047][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  483.907221][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.914423][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.140983][ T7236] lo speed is unknown, defaulting to 1000
[  484.161120][ T7236] lo speed is unknown, defaulting to 1000
[  484.173704][ T7236] lo speed is unknown, defaulting to 1000
[  484.187976][ T7236] lo speed is unknown, defaulting to 1000
[  484.200798][ T7236] lo speed is unknown, defaulting to 1000
[  484.212074][ T7236] lo speed is unknown, defaulting to 1000
[  484.225863][ T7235] infiniband s
z1: set active
[  484.231083][ T7235] infiniband s
z1: added lo
[  484.238667][ T7235] rdma_rxe: unable to create cq
[  484.244094][ T7235] infiniband s
z1: Couldn't create ib_mad CQ
[  484.250843][ T7235] infiniband s
z1: Couldn't open port 1
[  484.266246][ T4332] lo speed is unknown, defaulting to 1000
[  484.284387][ T7235] RDS/IB: s
z1: added
[  484.289403][ T7235] smc: adding ib device s
z1 with port count 1
[  484.295950][ T7235] smc:    ib device s
z1 port 1 has pnetid 
[  484.367165][ T7235] lo speed is unknown, defaulting to 1000
[  484.368143][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  484.511275][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  484.556511][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  484.670031][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  484.810491][ T7235] lo speed is unknown, defaulting to 1000
[  484.867164][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  484.899176][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  484.971535][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  485.082003][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  485.196121][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  485.333226][ T7235] lo speed is unknown, defaulting to 1000
[  485.339154][ T7183] chnl_net:caif_netlink_parms(): no params data found
[  485.402564][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  485.435546][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  485.622246][ T7235] lo speed is unknown, defaulting to 1000
[  485.628484][ T6923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  486.106520][ T7235] lo speed is unknown, defaulting to 1000
[  486.392172][ T7235] lo speed is unknown, defaulting to 1000
[  487.449880][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.637901][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.898463][ T7183] device bridge_slave_0 entered promiscuous mode
[  488.020262][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.022479][ T4332] lo speed is unknown, defaulting to 1000
[  488.094189][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.131029][ T7183] device bridge_slave_1 entered promiscuous mode
[  489.553188][ T4253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  489.629103][ T4253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  489.639581][ T4253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  489.650289][ T4253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  489.665175][ T4253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  489.675284][ T4253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  489.778666][   T27] audit: type=1400 audit(1745456222.264:43): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7281 comm="syz.2.517"
[  491.648156][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  491.775931][ T4256] Bluetooth: hci3: command 0x0409 tx timeout
[  491.826855][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  491.891534][ T7283] lo speed is unknown, defaulting to 1000
[  492.192827][ T7306] xt_nat: multiple ranges no longer supported
[  492.965330][ T7306] vhci_hcd vhci_hcd.0: failed to lookup sock
[  493.916960][ T4256] Bluetooth: hci3: command 0x041b tx timeout
[  494.965901][ T7183] team0: Port device team_slave_0 added
[  495.228331][ T7183] team0: Port device team_slave_1 added
[  496.004228][ T4256] Bluetooth: hci3: command 0x040f tx timeout
[  496.630704][ T7283] lo speed is unknown, defaulting to 1000
[  497.321112][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.383306][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.524866][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.537739][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.545038][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.614972][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  498.494085][ T4256] Bluetooth: hci3: command 0x0419 tx timeout
[  498.540879][ T7183] device hsr_slave_0 entered promiscuous mode
[  498.585203][ T7183] device hsr_slave_1 entered promiscuous mode
[  498.609957][ T7183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  498.629762][ T7183] Cannot create hsr debugfs directory
[  501.368100][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  501.375010][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  502.397187][ T7283] chnl_net:caif_netlink_parms(): no params data found
[  503.444696][ T7374] input: syz0 as /devices/virtual/input/input24
[  503.757955][ T7375] mmap: syz.2.534 (7375) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  504.587693][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.595348][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.603671][ T7283] device bridge_slave_0 entered promiscuous mode
[  504.613447][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.621374][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.630030][ T7283] device bridge_slave_1 entered promiscuous mode
[  504.693153][ T7283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.730747][ T7283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.766427][ T7283] team0: Port device team_slave_0 added
[  504.804908][ T7283] team0: Port device team_slave_1 added
[  504.904570][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_0
[  504.911565][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.951020][ T7283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  504.981759][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_1
[  504.992027][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.018140][ T7283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.042835][ T5338] device hsr_slave_0 left promiscuous mode
[  505.050053][ T5338] device hsr_slave_1 left promiscuous mode
[  505.056559][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_0
[  505.064202][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_1
[  505.072689][ T5338] device bridge_slave_1 left promiscuous mode
[  505.079182][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.088323][ T5338] device bridge_slave_0 left promiscuous mode
[  505.094942][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.117197][ T5338] device veth1_vlan left promiscuous mode
[  505.123034][ T5338] device veth0_vlan left promiscuous mode
[  505.464663][ T5338] team0 (unregistering): Port device team_slave_1 removed
[  505.514515][ T5338] team0 (unregistering): Port device team_slave_0 removed
[  505.561902][ T5338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  505.612076][ T5338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  506.089077][ T5338] bond0 (unregistering): Released all slaves
[  506.237286][ T7283] device hsr_slave_0 entered promiscuous mode
[  506.254742][ T7283] device hsr_slave_1 entered promiscuous mode
[  506.261512][ T7283] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  506.271080][ T7283] Cannot create hsr debugfs directory
[  506.381012][ T7183] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  506.459001][ T7183] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  506.476113][ T7183] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  506.513908][ T7183] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  506.691518][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.769507][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  506.778606][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  506.790787][ T7183] 8021q: adding VLAN 0 to HW filter on device team0
[  506.804418][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  506.817634][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  506.827117][ T5321] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.834295][ T5321] bridge0: port 1(bridge_slave_0) entered forwarding state
[  506.888459][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  506.897486][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  506.907236][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  506.916879][ T5321] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.924060][ T5321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  506.933009][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  506.985159][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  506.995138][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  507.007056][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  507.016532][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  507.030986][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  507.040291][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  507.049328][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  507.062752][ T7183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  507.081072][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  507.109008][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  507.124907][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  507.148922][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  507.337795][ T7283] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  507.373834][ T7283] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  507.386941][ T7283] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  507.398815][ T7283] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  507.503274][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  507.518384][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  507.580628][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  507.694181][ T7283] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.733816][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  507.745270][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  507.768680][ T7283] 8021q: adding VLAN 0 to HW filter on device team0
[  507.832050][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  507.845016][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  507.857545][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.864693][ T5347] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.882993][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  507.895506][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  507.906117][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.913244][ T5347] bridge0: port 2(bridge_slave_1) entered forwarding state
[  507.964302][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  507.984302][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  507.997575][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  508.051665][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  508.078206][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  508.103434][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  508.149779][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  508.163741][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  508.195272][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  508.212339][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  508.228796][ T7283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  508.268963][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  508.284594][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  508.325589][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  508.345917][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  508.408342][ T5338] device hsr_slave_0 left promiscuous mode
[  508.424727][ T5338] device hsr_slave_1 left promiscuous mode
[  508.432809][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_0
[  508.455271][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_1
[  508.467156][ T5338] device bridge_slave_1 left promiscuous mode
[  508.473530][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.489930][ T5338] device bridge_slave_0 left promiscuous mode
[  508.497393][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.929374][ T5338] team0 (unregistering): Port device team_slave_1 removed
[  508.982117][ T5338] team0 (unregistering): Port device team_slave_0 removed
[  509.026428][ T5338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  509.078357][ T5338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  509.520404][ T5338] bond0 (unregistering): Released all slaves
[  509.627892][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  509.637991][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  509.666246][ T7183] device veth0_vlan entered promiscuous mode
[  509.675269][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  509.699326][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  509.718194][ T7183] device veth1_vlan entered promiscuous mode
[  509.798637][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  509.823261][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  509.844663][ T7183] device veth0_macvtap entered promiscuous mode
[  509.878253][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  509.889197][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  509.897251][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  509.907423][ T7183] device veth1_macvtap entered promiscuous mode
[  509.922992][ T7283] 8021q: adding VLAN 0 to HW filter on device batadv0
[  509.953143][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  509.970951][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  509.981850][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.002709][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.015682][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.034070][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.073082][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.082353][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  510.093081][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  510.102267][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  510.115004][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.145341][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.164479][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.177721][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.189606][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.206665][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.220861][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.232625][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  510.249314][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  510.281250][ T7183] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.298095][ T7183] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.309752][ T7183] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.318834][ T7183] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.500238][ T4440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.538337][ T4440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.579452][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  510.598006][ T5338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.616408][ T5338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.669372][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  510.768134][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  510.830375][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  512.262363][ T7481] qrtr: Invalid version 48
[  512.956783][ T7283] device veth0_vlan entered promiscuous mode
[  513.058160][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  513.225757][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  513.775940][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  513.795391][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  513.824112][ T7487] netlink: 'syz.0.543': attribute type 21 has an invalid length.
[  513.851308][ T7487] netlink: 132 bytes leftover after parsing attributes in process `syz.0.543'.
[  513.896873][ T7283] device veth1_vlan entered promiscuous mode
[  514.030279][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  514.049871][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  514.067891][ T7283] device veth0_macvtap entered promiscuous mode
[  514.091711][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  514.114761][ T7283] device veth1_macvtap entered promiscuous mode
[  514.192913][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  514.224312][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.244098][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  514.278478][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.305235][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  514.339064][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.364080][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  514.404443][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.436432][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_0
[  514.445377][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  514.465944][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  514.488853][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  514.512097][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.533710][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  514.553580][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.574631][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  514.604015][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.613890][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  514.654114][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.684694][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_1
[  514.703362][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  514.739152][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  516.647689][ T7283] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.785888][ T7283] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.943392][ T7283] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  517.096325][ T7283] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.151958][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.249867][ T7545] kernel profiling enabled (shift: 7)
[  520.261731][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.473213][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  520.619801][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.657367][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.709130][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  521.041462][ T7561] batman_adv: batadv0: Adding interface: dummy0
[  521.048009][ T7561] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.073520][ T7561] batman_adv: batadv0: Interface activated: dummy0
[  530.874625][ T7622] siw: device registration error -23
[  531.622701][ T7622] smc: removing ib device s
z1
[  531.996139][ T7622] ------------[ cut here ]------------
[  532.001660][ T7622] WARNING: CPU: 1 PID: 7622 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x3e/0x50
[  532.012432][ T7622] Modules linked in:
[  532.016388][ T7622] CPU: 1 PID: 7622 Comm: syz.0.559 Not tainted 6.1.134-syzkaller #0
[  532.024524][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  532.034644][ T7622] RIP: 0010:rxe_pool_cleanup+0x3e/0x50
[  532.040135][ T7622] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 74 47 db f9 48 83 3b 00 75 07 e8 f9 e7 83 f9 5b c3 e8 f2 e7 83 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 41 57 41
[  532.059790][ T7622] RSP: 0018:ffffc90004267278 EFLAGS: 00010246
[  532.065935][ T7622] RAX: ffffffff880664ae RBX: ffff88807aebd298 RCX: 0000000000080000
[  532.073996][ T7622] RDX: ffffc90010bc3000 RSI: 000000000007ffff RDI: 0000000000080000
[  532.081991][ T7622] RBP: 000000000000000c R08: ffffffff87e03d2f R09: ffffed100f5d78e9
[  532.090028][ T7622] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  532.098049][ T7622] R13: dffffc0000000000 R14: ffff88807aebc628 R15: dffffc0000000000
[  532.106173][ T7622] FS:  00007fbbfc0a26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  532.115245][ T7622] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  532.121838][ T7622] CR2: 000020000001b000 CR3: 000000006267a000 CR4: 00000000003506e0
[  532.129869][ T7622] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  532.137897][ T7622] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  532.146012][ T7622] Call Trace:
[  532.149329][ T7622]  <TASK>
[  532.152280][ T7622]  rxe_dealloc+0x2f/0x100
[  532.156687][ T7622]  ? trace_raw_output_rtrs_clt_conn_class+0x230/0x230
[  532.163509][ T7622]  ib_dealloc_device+0x48/0x1f0
[  532.168433][ T7622]  __ib_unregister_device+0x111/0x170
[  532.173843][ T7622]  ib_unregister_device_and_put+0xb2/0xe0
[  532.179633][ T7622]  nldev_dellink+0x2bb/0x300
[  532.184285][ T7622]  ? nldev_newlink+0x660/0x660
[  532.189118][ T7622]  ? apparmor_capable+0x12e/0x190
[  532.194202][ T7622]  ? bpf_lsm_capable+0x5/0x10
[  532.198911][ T7622]  ? security_capable+0x86/0xb0
[  532.203773][ T7622]  ? nldev_newlink+0x660/0x660
[  532.208645][ T7622]  rdma_nl_rcv+0x6c9/0x9c0
[  532.213097][ T7622]  ? rdma_nl_net_init+0x170/0x170
[  532.218186][ T7622]  ? netlink_deliver_tap+0x2e/0x1b0
[  532.223440][ T7622]  ? netlink_deliver_tap+0x2e/0x1b0
[  532.228713][ T7622]  netlink_unicast+0x7e2/0x970
[  532.233532][ T7622]  ? netlink_detachskb+0x90/0x90
[  532.238539][ T7622]  ? __virt_addr_valid+0x45b/0x530
[  532.243660][ T7622]  ? __phys_addr_symbol+0x2b/0x70
[  532.248725][ T7622]  ? __check_object_size+0x4dd/0xa30
[  532.254054][ T7622]  ? bpf_lsm_netlink_send+0x5/0x10
[  532.259187][ T7622]  netlink_sendmsg+0xa26/0xd60
[  532.264024][ T7622]  ? netlink_getsockopt+0x580/0x580
[  532.269492][ T7622]  ? aa_sock_msg_perm+0x91/0x150
[  532.274461][ T7622]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  532.279749][ T7622]  ? security_socket_sendmsg+0x7d/0xa0
[  532.285228][ T7622]  ? netlink_getsockopt+0x580/0x580
[  532.290431][ T7622]  ____sys_sendmsg+0x5d3/0x9a0
[  532.295240][ T7622]  ? __sys_sendmsg_sock+0x30/0x30
[  532.300280][ T7622]  __sys_sendmsg+0x2a9/0x390
[  532.304900][ T7622]  ? ____sys_sendmsg+0x9a0/0x9a0
[  532.309868][ T7622]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  532.315891][ T7622]  ? syscall_enter_from_user_mode+0x2e/0x230
[  532.321898][ T7622]  ? lockdep_hardirqs_on+0x94/0x130
[  532.327126][ T7622]  ? syscall_enter_from_user_mode+0x2e/0x230
[  532.333114][ T7622]  do_syscall_64+0x3b/0x80
[  532.337575][ T7622]  ? clear_bhb_loop+0x45/0xa0
[  532.342260][ T7622]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  532.348170][ T7622] RIP: 0033:0x7fbbfb18e969
[  532.352591][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  532.372218][ T7622] RSP: 002b:00007fbbfc0a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  532.380655][ T7622] RAX: ffffffffffffffda RBX: 00007fbbfb3b6160 RCX: 00007fbbfb18e969
[  532.388736][ T7622] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009
[  532.396724][ T7622] RBP: 00007fbbfb210ab1 R08: 0000000000000000 R09: 0000000000000000
[  532.404723][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  532.412719][ T7622] R13: 0000000000000000 R14: 00007fbbfb3b6160 R15: 00007ffe9d375aa8
[  532.420737][ T7622]  </TASK>
[  532.423783][ T7622] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  532.431143][ T7622] CPU: 1 PID: 7622 Comm: syz.0.559 Not tainted 6.1.134-syzkaller #0
[  532.439130][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  532.449177][ T7622] Call Trace:
[  532.452450][ T7622]  <TASK>
[  532.455375][ T7622]  dump_stack_lvl+0x1e3/0x2cb
[  532.460073][ T7622]  ? nf_tcp_handle_invalid+0x647/0x647
[  532.465558][ T7622]  ? panic+0x764/0x764
[  532.469632][ T7622]  ? vscnprintf+0x59/0x80
[  532.473973][ T7622]  panic+0x318/0x764
[  532.477889][ T7622]  ? __warn+0x169/0x520
[  532.482043][ T7622]  ? memcpy_page_flushcache+0xfc/0xfc
[  532.487430][ T7622]  __warn+0x348/0x520
[  532.491409][ T7622]  ? rxe_pool_cleanup+0x3e/0x50
[  532.496269][ T7622]  report_bug+0x2af/0x500
[  532.500599][ T7622]  ? rxe_pool_cleanup+0x3e/0x50
[  532.505458][ T7622]  handle_bug+0x3d/0x70
[  532.509613][ T7622]  exc_invalid_op+0x16/0x40
[  532.514121][ T7622]  asm_exc_invalid_op+0x16/0x20
[  532.518974][ T7622] RIP: 0010:rxe_pool_cleanup+0x3e/0x50
[  532.524437][ T7622] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 74 47 db f9 48 83 3b 00 75 07 e8 f9 e7 83 f9 5b c3 e8 f2 e7 83 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 41 57 41
[  532.544609][ T7622] RSP: 0018:ffffc90004267278 EFLAGS: 00010246
[  532.551406][ T7622] RAX: ffffffff880664ae RBX: ffff88807aebd298 RCX: 0000000000080000
[  532.559482][ T7622] RDX: ffffc90010bc3000 RSI: 000000000007ffff RDI: 0000000000080000
[  532.568208][ T7622] RBP: 000000000000000c R08: ffffffff87e03d2f R09: ffffed100f5d78e9
[  532.576369][ T7622] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  532.584360][ T7622] R13: dffffc0000000000 R14: ffff88807aebc628 R15: dffffc0000000000
[  532.592377][ T7622]  ? __ib_unregister_device+0xff/0x170
[  532.597892][ T7622]  ? rxe_pool_cleanup+0x3e/0x50
[  532.602784][ T7622]  ? rxe_pool_cleanup+0x3e/0x50
[  532.607668][ T7622]  rxe_dealloc+0x2f/0x100
[  532.612013][ T7622]  ? trace_raw_output_rtrs_clt_conn_class+0x230/0x230
[  532.618806][ T7622]  ib_dealloc_device+0x48/0x1f0
[  532.623701][ T7622]  __ib_unregister_device+0x111/0x170
[  532.629095][ T7622]  ib_unregister_device_and_put+0xb2/0xe0
[  532.634846][ T7622]  nldev_dellink+0x2bb/0x300
[  532.639471][ T7622]  ? nldev_newlink+0x660/0x660
[  532.644327][ T7622]  ? apparmor_capable+0x12e/0x190
[  532.649364][ T7622]  ? bpf_lsm_capable+0x5/0x10
[  532.654052][ T7622]  ? security_capable+0x86/0xb0
[  532.658942][ T7622]  ? nldev_newlink+0x660/0x660
[  532.663727][ T7622]  rdma_nl_rcv+0x6c9/0x9c0
[  532.668153][ T7622]  ? rdma_nl_net_init+0x170/0x170
[  532.673174][ T7622]  ? netlink_deliver_tap+0x2e/0x1b0
[  532.678400][ T7622]  ? netlink_deliver_tap+0x2e/0x1b0
[  532.683686][ T7622]  netlink_unicast+0x7e2/0x970
[  532.688487][ T7622]  ? netlink_detachskb+0x90/0x90
[  532.693430][ T7622]  ? __virt_addr_valid+0x45b/0x530
[  532.698561][ T7622]  ? __phys_addr_symbol+0x2b/0x70
[  532.703586][ T7622]  ? __check_object_size+0x4dd/0xa30
[  532.708874][ T7622]  ? bpf_lsm_netlink_send+0x5/0x10
[  532.714084][ T7622]  netlink_sendmsg+0xa26/0xd60
[  532.718881][ T7622]  ? netlink_getsockopt+0x580/0x580
[  532.724104][ T7622]  ? aa_sock_msg_perm+0x91/0x150
[  532.729326][ T7622]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  532.734623][ T7622]  ? security_socket_sendmsg+0x7d/0xa0
[  532.740082][ T7622]  ? netlink_getsockopt+0x580/0x580
[  532.745286][ T7622]  ____sys_sendmsg+0x5d3/0x9a0
[  532.750237][ T7622]  ? __sys_sendmsg_sock+0x30/0x30
[  532.755277][ T7622]  __sys_sendmsg+0x2a9/0x390
[  532.759904][ T7622]  ? ____sys_sendmsg+0x9a0/0x9a0
[  532.764867][ T7622]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  532.770890][ T7622]  ? syscall_enter_from_user_mode+0x2e/0x230
[  532.776897][ T7622]  ? lockdep_hardirqs_on+0x94/0x130
[  532.782113][ T7622]  ? syscall_enter_from_user_mode+0x2e/0x230
[  532.788101][ T7622]  do_syscall_64+0x3b/0x80
[  532.792519][ T7622]  ? clear_bhb_loop+0x45/0xa0
[  532.797203][ T7622]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  532.803112][ T7622] RIP: 0033:0x7fbbfb18e969
[  532.807539][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  532.827150][ T7622] RSP: 002b:00007fbbfc0a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  532.835586][ T7622] RAX: ffffffffffffffda RBX: 00007fbbfb3b6160 RCX: 00007fbbfb18e969
[  532.843643][ T7622] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009
[  532.851619][ T7622] RBP: 00007fbbfb210ab1 R08: 0000000000000000 R09: 0000000000000000
[  532.859582][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  532.867552][ T7622] R13: 0000000000000000 R14: 00007fbbfb3b6160 R15: 00007ffe9d375aa8
[  532.875526][ T7622]  </TASK>
[  532.878886][ T7622] Kernel Offset: disabled
[  532.883299][ T7622] Rebooting in 86400 seconds..