last executing test programs:

1m26.823384496s ago: executing program 4 (id=2907):
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040)
wait4(r1, 0x0, 0x0, 0x0)
ptrace$setregs(0xf, r1, 0xd, 0x0)
syz_open_procfs(r1, &(0x7f0000000040)='net/vlan/vlan0\x00')

1m26.460566604s ago: executing program 4 (id=2909):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x108)
gettid()
timer_settime(0x0, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="401000008909040014001280090001007866726d0000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001680)=ANY=[@ANYBLOB="2800000001070102000000000000000100000005140007800800ff63b665"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80)

1m25.280491162s ago: executing program 4 (id=2911):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg(r0, &(0x7f0000000100)={0x1, {&(0x7f0000000b80)=""/194, 0xc2, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000c80)=""/77, 0x97, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f00000003c0)=""/14, 0xe, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg(r0, &(0x7f0000000640)={0x1, {&(0x7f0000000400)=""/234, 0xfede, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000a80)=""/194, 0xc2, 0x0, 0x2, 0x3}}, 0x48)

1m25.113406311s ago: executing program 4 (id=2913):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m25.060778593s ago: executing program 4 (id=2915):
r0 = socket$alg(0x26, 0x5, 0x0)
pipe(&(0x7f0000000100))
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r1, 0x0, 0x0, 0x0)
sync()
syz_emit_vhci(0x0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x60042, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20)
ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9300c0008000500060304"], 0x11)

1m24.825794605s ago: executing program 4 (id=2917):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r3 = socket(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r3, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x21, 0x0, 0x0)
write(r3, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r3, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0)
mkdir(0x0, 0x0)
mount$binder(0x0, 0x0, 0x0, 0x8ad420, 0x0)
chdir(0x0)
rmdir(0x0)

1m23.91466795s ago: executing program 3 (id=2919):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDGKBDIACR(r3, 0x4b4a, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x34, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x8001}]}, 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18080000d90c0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32, @ANYBLOB="0800000056080000000000008500000007000000090000000000000095000000000000001d00000000000000000000001eb339e2db6fbc67adefed7a2d160b85e45a389ff0f93fc3d1290cd8506858aea431a95e0f69effc1c58a665723066bec6ed55e88b2190a4842bfebd3a0099a6c20f4ef600000000000010a13c540e6cbecc4ec879e864f2382f6b87b1713c58ef1428d0fef0d5fa95717fac575080438c76a70755b7550bc940ca727d3d310a2f40ef7752b0ef9dc2163c14cc5b36c27b449dcddc8f76184b685f95f49e3ff74b9d81f26a6da534aa696d7f6ec3f151d0d39ddf1a747c799330b354e40e722a162cabe2c5"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="1f84f82c9bfa2be57be459be2b6b366bfe3244d1fe99c63d397ed0eefe0d85dd61d1d677bcfc12a4ab64614002d511324f1501057256e03d1e7f8037b628d0310bc70a4baf8c0a86be2315168e0996d6f08392cc1b41488cb7b7f81ca902ed8da13e9c017b13c4e8d80c6c4fbe4d7fce786741a6b78bc435"], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

1m22.853881253s ago: executing program 3 (id=2920):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1m22.573346157s ago: executing program 3 (id=2922):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000002000000030000000800000000080000", @ANYRES32, @ANYBLOB="03c700"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0400000000000000047377ecffffff0000000000000100d547c1b24f"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f00000001c0)="2a067326c074616ad851026dd1c5c7cbb64015d5961f9784c887a1694d1f5457f8dc44001927e872e4b2667860a054c65b9cf3d7e7d0a33b69947f6cbae1fd510453947ef92ccfcbf494b5a718101b23b1efb7e9c8d89ce82ca70baea587b3777f758a07e8e0b4c6e02422b74dbdba835f8e586e9e590f65071ef592835d0a2c00c0f03c5dfddb7774bab53fdde2d6", 0x0, 0x4}, 0x20)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @multicast2}, 0x4}}, 0x2e)

1m21.618794804s ago: executing program 3 (id=2923):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0)
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
setsockopt$inet_group_source_req(r3, 0x0, 0x2b, 0x0, 0x0)
capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe})
ioprio_set$pid(0x3, 0x0, 0x4007)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@noblock_validity}, {@test_dummy_encryption}, {@usrjquota}, {@errors_continue}, {@delalloc}, {@barrier}, {@jqfmt_vfsv1}, {@nolazytime}, {@lazytime}, {@usrquota}, {@block_validity}, {@block_validity}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82500, 0x0)
creat(&(0x7f0000000180)='./file0\x00', 0x20)

1m18.918935788s ago: executing program 3 (id=2928):
timer_create(0xfffffffffffffff4, 0x0, &(0x7f0000001400))
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x38}, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r5 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x63, 0x62, 0x32, 0x30, 0x65, 0x32, 0x31, 0x35, 0x37, 0x37, 0x30, 0x61, 0x61, 0x38, 0x39, 0x36]}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff)
keyctl$unlink(0x9, r5, 0xffffffffffffffff)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901)
umount2(&(0x7f0000000040)='.\x00', 0x2)
sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000600)="8807237d1371b0fba4f9339b1485a9b8e9805bcb6e27a85aa42453da155d5568c8bd5e2504a218aac58ba669d6f65ad1b7de8e59d4752c361b496e78944d92249e369c6fba516796e0b7e4eb2eaa4c584e6babb507d92cc71c5b311578c7fa03d08c8a66a4d6089953a065242fc775a327d4541d3baf732f92b2ce37f93d7cc94894c5cdecd46eb65495827c580d7995ec4bd9942c557cce4fd5d4cf8eb26a781b12dae013fdba6513", 0xa9}, {&(0x7f00000006c0)="756e981973c851120e2169b5809389b5d6cfb74eaf0de5a16e3adbe23668bf3cbc9f93d7fa1e7d0ddded2f92324aa5e4c1039157c9063d30fcbc3281abda46371ba4150b80639bdf9e8cbcbbb3baa949556e4b096b27e365ce907d055f3ea27de78f745f0f0a666a5f1c5e", 0x6b}], 0x4, &(0x7f0000000780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x16}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x90}, 0x4000001)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000002c0)={r7, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r7, {0xe, 0x1}}}, 0x24}}, 0x4)

1m17.775282845s ago: executing program 3 (id=2932):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@xino_on}, {@uuid_off, 0x3a}], [], 0x2f})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r4, 0x70000008)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
listen(r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000540), 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}})
getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='.\x02\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@discard}, {@noblock_validity}, {@discard}]}, 0x4, 0xbc1, &(0x7f0000001080)="$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")

1m9.507130886s ago: executing program 32 (id=2917):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r3 = socket(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r3, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x21, 0x0, 0x0)
write(r3, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r3, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0)
mkdir(0x0, 0x0)
mount$binder(0x0, 0x0, 0x0, 0x8ad420, 0x0)
chdir(0x0)
rmdir(0x0)

1m2.5834272s ago: executing program 33 (id=2932):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@xino_on}, {@uuid_off, 0x3a}], [], 0x2f})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r4, 0x70000008)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
listen(r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000540), 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}})
getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='.\x02\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@discard}, {@noblock_validity}, {@discard}]}, 0x4, 0xbc1, &(0x7f0000001080)="$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")

32.981312652s ago: executing program 0 (id=3030):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000002000000030000000800000000080000", @ANYRES32, @ANYBLOB="03c700"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0400000000000000047377ecffffff0000000000000100d547c1b24f"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f00000001c0)="2a067326c074616ad851026dd1c5c7cbb64015d5961f9784c887a1694d1f5457f8dc44001927e872e4b2667860a054c65b9cf3d7e7d0a33b69947f6cbae1fd510453947ef92ccfcbf494b5a718101b23b1efb7e9c8d89ce82ca70baea587b3777f758a07e8e0b4c6e02422b74dbdba835f8e586e9e590f65071ef592835d0a2c00c0f03c5dfddb7774bab53fdde2d6", 0x0, 0x4}, 0x20)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r4)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @multicast2}, 0x4}}, 0x2e)

29.748606862s ago: executing program 0 (id=3038):
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x1, 0x1000, 0x57, &(0x7f0000000080)="f3d7ff6943d42994cb397bdf1c688fae7eeadcc02b97b9183b354280c9a8bbbb78ab0af986c4bfb13a17567abab8b762d7d07798458607be45a88e414a47450a0b6bb952725a1ee73466e22fa43cd001820d2ab8a34f37", 0x8, 0x0, &(0x7f0000000000)="12d7afe75a294aa1"})
socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setgroups(0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x34}, 0x94)
getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000001b00), &(0x7f0000000480)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x0)
ioctl$FE_GET_INFO(r5, 0x80a86f3d, &(0x7f00000002c0))
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6], 0x184}}, 0x0)
socket(0x9, 0x2, 0x710)

28.734942053s ago: executing program 0 (id=3039):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x6)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
read$FUSE(r1, 0x0, 0x0)

27.406784999s ago: executing program 0 (id=3041):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
listen(r1, 0x4)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0xa17, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0xc114)
sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa15}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x140}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4831)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)

26.390084249s ago: executing program 0 (id=3042):
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000000)='./file1\x00', 0x3)
mknod(&(0x7f0000000240)='./file0\x00', 0x1000, 0x10)
r0 = inotify_init()
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
inotify_add_watch(r0, &(0x7f0000002400)='./file0\x00', 0x80000216)
rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000140)='./file0\x00')

22.696916863s ago: executing program 0 (id=3054):
creat(0x0, 0x4b)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x8, 0x5, 0x2, 0x100}, {0x84f, 0x1e, 0xf, 0x7}, {0xffff, 0x3, 0x81, 0x5}]})
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="041817aaaaaaaaaa1000000000"], 0x1a)

12.566988476s ago: executing program 5 (id=3084):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='comm\x00')
write$cgroup_devices(r0, 0x0, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_ethernet(0x50, &(0x7f0000000280)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@x25={0x805, {0x3, 0x7, 0x23, "9f67cba707475723448843a8eaa6a8c8dc93a48cd50ba8811fcbfc9aeb55eeaafd0ff026cddf326daf273e61a253713cd8a17a78ceaa4b7eb0367cbcd33398"}}}}, 0x0)
syz_emit_ethernet(0xb2, &(0x7f00000000c0)={@link_local, @multicast, @void, {@mpls_uc={0x8847, {[{0x9, 0x0, 0x1}, {0x9, 0x0, 0x1}], @llc={@llc={0x7e, 0x6, 'X', "478869a10d7a94e81afcd81be7c368442c04bd08851fc4092282d40ff601bc393bab5e70a6a10e80deaec4277c038c84948df0bc6c40a24e897286e038ea99ba2ddb64eabeca9924b45b6ad0037d875335fad2ef52d2f538f67621095d035206d4c47ea94a77aeb408cec1b974d911a46e1ff985051603e9d1a29dd9b7401e67d768467a43635e6ab24c0d3c9d24281d373085b18a08deff15"}}}}}}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
faccessat2(0xffffffffffffff9c, 0x0, 0x7, 0x0)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1)
process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

11.195845894s ago: executing program 5 (id=3087):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0xffffffffffffffff, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x108)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40)
creat(0x0, 0x4)
socket$kcm(0xa, 0x1, 0x106)

7.675617509s ago: executing program 5 (id=3098):
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==")
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1)

7.089539358s ago: executing program 5 (id=3101):
r0 = socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000300)="dc4183bcc88f", 0x6}], 0x1, 0x5)

6.428175051s ago: executing program 5 (id=3103):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xfff2, 0xffff}, {0xc, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4000)

6.009441562s ago: executing program 6 (id=3105):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x2000, 0x0, 0x9, 0x100, 0x0, [{0xa2, 0x5, 0xc, '\x00', 0x3}, {0x8, 0x5, 0xc, '\x00', 0x7}, {0x9, 0x9, 0x7, '\x00', 0xb}, {0xd, 0x2, 0x40, '\x00', 0xae}, {0x81, 0x3, 0x60, '\x00', 0x8}, {0x40, 0x2, 0x4, '\x00', 0x7}, {0xc2, 0x1, 0x4b, '\x00', 0x54}, {0x6d, 0x5, 0x5, '\x00', 0x36}, {0xff, 0x1, 0x7, '\x00', 0x7f}, {0xf, 0x3, 0x8, '\x00', 0x78}, {0xc1, 0x6d, 0x80, '\x00', 0x5}, {0x4, 0x1b, 0x8, '\x00', 0x5}, {0x1, 0x9, 0x45, '\x00', 0xe}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x9, 0xd, 0x9, '\x00', 0x1}, {0x9, 0x8, 0x6, '\x00', 0x7}, {0xf, 0x8, 0x4, '\x00', 0xb}, {0x5, 0x4, 0x16, '\x00', 0xa0}, {0xa, 0x1, 0x81, '\x00', 0x33}, {0xa, 0x8, 0xdf, '\x00', 0xfb}, {0x8, 0xc5, 0x9, '\x00', 0x4}, {0x7, 0x0, 0x9, '\x00', 0x2}, {0xf, 0x8, 0x4, '\x00', 0xc}, {0x28, 0x80, 0x3, '\x00', 0xb1}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.916450706s ago: executing program 6 (id=3107):
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000000)='./file1\x00', 0x3)
mknod(&(0x7f0000000240)='./file0\x00', 0x1000, 0x10)
r0 = inotify_init()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
inotify_add_watch(r0, &(0x7f0000002400)='./file0\x00', 0x80000216)
rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000140)='./file0\x00')

3.908378256s ago: executing program 1 (id=3108):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0)

3.750121324s ago: executing program 6 (id=3109):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x24)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b102, 0x8c)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0xfffffffffffffeef, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x9, 0x0, 0x2)
read$FUSE(r1, &(0x7f0000003ec0)={0x2020}, 0x2020)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}})

2.793376092s ago: executing program 1 (id=3110):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38)

2.761280693s ago: executing program 1 (id=3111):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

2.649841659s ago: executing program 1 (id=3112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000008e0000000400000002"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000040), 0x0}, 0x20)

2.584537032s ago: executing program 1 (id=3113):
timer_create(0xfffffffffffffff4, 0x0, &(0x7f0000001400))
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x38}, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r6 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x63, 0x62, 0x32, 0x30, 0x65, 0x32, 0x31, 0x35, 0x37, 0x37, 0x30, 0x61, 0x61, 0x38, 0x39, 0x36]}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff)
keyctl$unlink(0x9, r6, 0xffffffffffffffff)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901)
umount2(&(0x7f0000000040)='.\x00', 0x2)
sendmsg$inet(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000600)="8807237d1371b0fba4f9339b1485a9b8e9805bcb6e27a85aa42453da155d5568c8bd5e2504a218aac58ba669d6f65ad1b7de8e59d4752c361b496e78944d92249e369c6fba516796e0b7e4eb2eaa4c584e6babb507d92cc71c5b311578c7fa03d08c8a66a4d6089953a065242fc775a327d4541d3baf732f92b2ce37f93d7cc94894c5cdecd46eb65495827c580d7995ec4bd9942c557cce4fd5d4cf8eb26a781b12dae013fdba6513", 0xa9}, {&(0x7f00000006c0)="756e981973c851120e2169b5809389b5d6cfb74eaf0de5a16e3adbe23668bf3cbc9f93d7fa1e7d0ddded2f92324aa5e4c1039157c9063d30fcbc3281abda46371ba4150b80639bdf9e8cbcbbb3baa949556e4b096b27e365ce907d055f3ea27de78f745f0f0a666a5f1c5e", 0x6b}], 0x4, &(0x7f0000000780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x16}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x90}, 0x4000001)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r8=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r8, {0xe, 0x1}}}, 0x24}}, 0x4)

2.183493442s ago: executing program 2 (id=3114):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000000000000000200000000", @ANYBLOB="0003000000000000140012800b0001006970766c616e0000", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084)

1.997630751s ago: executing program 6 (id=3115):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f00000019c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20008081)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x6, 0x2, 0x0)
read(r0, &(0x7f00000005c0)=""/4096, 0x1000)

1.949348314s ago: executing program 5 (id=3116):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc)
syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x66, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0)
r4 = syz_io_uring_setup(0x114, &(0x7f0000000600)={0x0, 0x10, 0x400, 0x5, 0x80}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000380), 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x108, &(0x7f0000000140)=0x10, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r7], 0x1})
io_setup(0x5, &(0x7f0000000000)=<r8=>0x0)
inotify_init()
io_submit(r8, 0x0, &(0x7f0000000200))
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x3, 0xff)
r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000003c0)={0x55, 0xd1c, 0xfffd, {0x2, 0x1}, {0x5b, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x6, 0x1, 0x46, 0x6, 0xfd}]})
write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250)
syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="0c057059b5c73397ba110310c214010203010902120043eb63eaff82adc400002b506a8c"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})

1.875033847s ago: executing program 2 (id=3117):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00')
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r7, 0x0, 0x4000000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)
r9 = fsmount(0xffffffffffffffff, 0x1, 0x80)
write$cgroup_pid(r9, &(0x7f0000000180), 0x12)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)

1.02298572s ago: executing program 6 (id=3118):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
listen(r1, 0x4)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0xa17, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0xc114)
sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa15}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x140}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4831)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)

953.474533ms ago: executing program 2 (id=3119):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0)

641.414038ms ago: executing program 2 (id=3120):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38)

520.830014ms ago: executing program 2 (id=3121):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

294.566256ms ago: executing program 2 (id=3122):
socket$packet(0x11, 0x3, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})

6.2479ms ago: executing program 6 (id=3123):
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r4=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r4})
r5 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4c, 0x0, 0x0)
ioctl(r5, 0x8916, &(0x7f0000000000))
ioctl(r5, 0x8936, &(0x7f0000000000))

0s ago: executing program 1 (id=3124):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x24)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b102, 0x8c)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0xfffffffffffffeef, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x9, 0x0, 0x2)
read$FUSE(r1, &(0x7f0000003ec0)={0x2020}, 0x2020)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}})

kernel console output (not intermixed with test programs):

65: padding at end of block bitmap is not set
[  439.611317][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  439.942308][ T7702] loop2: detected capacity change from 0 to 128
[  440.098630][ T7700] loop1: detected capacity change from 0 to 32768
[  440.106382][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  440.112698][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  440.156462][ T7702] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  440.188795][ T7700] XFS (loop1): Mounting V5 Filesystem
[  440.248367][ T7702] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.356471][ T7700] XFS (loop1): Ending clean mount
[  440.434523][ T4349] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  440.754427][ T3598] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  440.792391][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  440.934429][ T3598] usb 1-1: device descriptor read/64, error -71
[  440.964419][ T4349] usb 5-1: Using ep0 maxpacket: 16
[  440.982171][ T4349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.002545][ T4349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.022873][ T4349] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  441.048668][ T4349] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  441.109728][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.143567][ T4266] XFS (loop1): Unmounting Filesystem
[  441.154543][ T4349] usb 5-1: config 0 descriptor??
[  441.214499][ T3598] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  441.384646][ T3598] usb 1-1: device descriptor read/64, error -71
[  441.524705][ T3598] usb usb1-port1: attempt power cycle
[  441.579988][ T4349] usbhid 5-1:0.0: can't add hid device: -71
[  441.594583][ T4349] usbhid: probe of 5-1:0.0 failed with error -71
[  441.620458][ T4349] usb 5-1: USB disconnect, device number 32
[  441.954651][ T3598] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  441.998690][ T3598] usb 1-1: device descriptor read/8, error -71
[  442.240186][ T7737] loop4: detected capacity change from 0 to 256
[  442.294441][ T3598] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  442.335016][ T3598] usb 1-1: device descriptor read/8, error -71
[  442.341307][ T7737] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010281, chksum : 0x636f305d, utbl_chksum : 0xe619d30d)
[  442.459679][ T3598] usb usb1-port1: unable to enumerate USB device
[  443.677244][ T7753] netlink: 256 bytes leftover after parsing attributes in process `syz.4.961'.
[  443.686264][ T7753] netlink: 72 bytes leftover after parsing attributes in process `syz.4.961'.
[  443.853772][ T7757] 9pnet_virtio: no channels available for device syz
[  444.813298][ T7769] loop3: detected capacity change from 0 to 32768
[  444.927747][ T7769] XFS (loop3): Mounting V5 Filesystem
[  445.010379][ T7769] XFS (loop3): Ending clean mount
[  446.137675][ T4269] XFS (loop3): Unmounting Filesystem
[  446.488280][ T7784] kvm [7783]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  446.524689][ T7784] kvm [7783]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  446.667178][ T7789] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[  446.844415][ T4342] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  446.895195][ T7791] loop2: detected capacity change from 0 to 4096
[  446.942898][ T7791] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  446.953226][ T7791] ntfs3: loop2: Failed to load $Extend.
[  447.044395][ T4342] usb 5-1: Using ep0 maxpacket: 16
[  447.051474][ T4342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.082979][ T4342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.113902][ T4342] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  447.151526][ T4342] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  447.182855][ T4342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.210614][ T4342] usb 5-1: config 0 descriptor??
[  447.294515][ T4349] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  447.472187][ T4349] usb 1-1: device descriptor read/64, error -71
[  447.640141][ T4342] usbhid 5-1:0.0: can't add hid device: -71
[  447.647735][ T4342] usbhid: probe of 5-1:0.0 failed with error -71
[  447.686069][ T4342] usb 5-1: USB disconnect, device number 33
[  447.764490][ T4349] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  447.944381][ T4349] usb 1-1: device descriptor read/64, error -71
[  448.085114][ T4349] usb usb1-port1: attempt power cycle
[  448.585965][ T4349] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  448.641965][ T4349] usb 1-1: device descriptor read/8, error -71
[  448.657894][ T7807] 9pnet_virtio: no channels available for device syz
[  448.949726][ T4349] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[  448.995054][ T4349] usb 1-1: device descriptor read/8, error -71
[  449.124535][ T4349] usb usb1-port1: unable to enumerate USB device
[  449.507059][ T7830] loop1: detected capacity change from 0 to 4096
[  449.584794][ T7830] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  449.604410][ T4315] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  449.615225][ T7830] ntfs3: loop1: Failed to load $Extend.
[  449.794631][ T4315] usb 5-1: Using ep0 maxpacket: 16
[  449.840029][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  449.893835][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  449.950294][ T4315] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  450.023976][ T4315] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  450.071749][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.114618][ T4315] usb 5-1: config 0 descriptor??
[  450.994818][ T4315] usbhid 5-1:0.0: can't add hid device: -71
[  451.001204][ T4315] usbhid: probe of 5-1:0.0 failed with error -71
[  451.061084][ T4315] usb 5-1: USB disconnect, device number 34
[  451.094755][ T7843] fuse: Bad value for 'fd'
[  451.219901][ T7848] loop0: detected capacity change from 0 to 1024
[  451.270045][ T7848] EXT4-fs: Ignoring removed bh option
[  451.325559][ T7848] ext4: Unknown parameter 'dont_measure'
[  452.022976][ T7857] No such timeout policy "syz1"
[  452.028796][ T7857] autofs4:pid:7857:autofs_fill_super: called with bogus options
[  452.037684][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'.
[  452.215818][ T7861] 9pnet_virtio: no channels available for device syz
[  452.984622][ T4314] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[  453.154432][ T4314] usb 4-1: device descriptor read/64, error -71
[  453.442897][ T4314] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  453.624492][ T4314] usb 4-1: device descriptor read/64, error -71
[  453.673004][ T7879] loop1: detected capacity change from 0 to 256
[  453.719013][ T7879] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  453.747130][ T4314] usb usb4-port1: attempt power cycle
[  453.773490][   T26] audit: type=1800 audit(1774334701.862:6): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1003" name="file1" dev="loop1" ino=1048843 res=0 errno=0
[  453.801604][ T7884] fuse: Unknown parameter '0x0000000000000003'
[  454.274383][  T128] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  454.313157][ T4314] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  454.355942][ T4314] usb 4-1: device descriptor read/8, error -71
[  454.464660][  T128] usb 2-1: Using ep0 maxpacket: 16
[  454.477389][  T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  454.500353][  T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  454.522043][  T128] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  454.546714][  T128] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  454.563898][  T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.608552][  T128] usb 2-1: config 0 descriptor??
[  455.086103][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.093135][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.110745][ T7902] 9pnet_virtio: no channels available for device syz
[  455.138025][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.157203][ T4314] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  455.174495][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.181523][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.204577][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.215926][ T4314] usb 4-1: device descriptor read/8, error -71
[  455.234722][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.252729][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.262932][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.281318][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.289081][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.297094][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.304106][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.312107][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.319610][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.326911][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.333927][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.341381][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.348557][ T4314] usb usb4-port1: unable to enumerate USB device
[  455.348655][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.362204][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.369708][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.377006][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.383998][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.391414][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.398674][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.405964][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.413252][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.420619][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.428336][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.436235][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.443240][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.451648][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.458974][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.466413][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.473408][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.480753][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.593811][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.600976][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.608088][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.615626][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.622646][  T128] elecom 0003:056E:010C.0009: unknown main item tag 0x0
[  455.633650][  T128] elecom 0003:056E:010C.0009: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.1-1/input0
[  456.627222][  T128] usb 2-1: USB disconnect, device number 31
[  457.971054][ T7927] fuse: Unknown parameter '0x0000000000000003'
[  458.690573][ T7937] 9pnet_virtio: no channels available for device syz
[  458.826139][ T7943] loop0: detected capacity change from 0 to 1024
[  458.863989][ T7943] EXT4-fs: Ignoring removed oldalloc option
[  458.877720][ T7943] EXT4-fs: Ignoring removed bh option
[  458.913782][ T7943] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  459.015474][ T7943] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  459.025217][  T128] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  459.897532][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  460.034416][  T128] usb 4-1: Using ep0 maxpacket: 16
[  460.041334][  T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  460.126184][  T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  460.136297][  T128] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  460.157596][  T128] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  460.167424][  T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.177189][  T128] usb 4-1: config 0 descriptor??
[  461.323286][ T7970] loop2: detected capacity change from 0 to 512
[  461.365318][ T7970] ext4: Unknown parameter 'dioread_nolock.grpjquota'
[  461.388199][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.414616][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.421706][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.454438][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.461469][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.491374][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.522335][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.539569][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.587405][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.636561][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.643612][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.685031][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.701097][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.708545][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.722018][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.729801][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.742871][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.750358][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.767794][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.776600][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.783687][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.824608][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.831645][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.852661][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.860824][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.868688][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.875993][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.968690][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.975779][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.983261][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.990369][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  461.997978][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  462.005080][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  462.012164][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  462.019276][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  462.027614][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  462.034731][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  462.041790][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  462.048891][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  462.056394][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  462.237041][ T7979] 9pnet_virtio: no channels available for device syz
[  462.254545][  T128] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  462.272116][  T128] elecom 0003:056E:010C.000A: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.3-1/input0
[  462.314615][  T128] usb 4-1: USB disconnect, device number 35
[  462.625360][   T26] audit: type=1326 audit(1774334710.722:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090319c799 code=0x7ffc0000
[  462.659788][ T7987] capability: warning: `syz.2.1040' uses 32-bit capabilities (legacy support in use)
[  462.706130][ T7981] fido_id[7981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  462.723911][   T26] audit: type=1326 audit(1774334710.742:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f090319c799 code=0x7ffc0000
[  462.808239][ T7987] kvm [7986]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076)
[  462.829757][   T26] audit: type=1326 audit(1774334710.742:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090319c799 code=0x7ffc0000
[  462.860092][   T26] audit: type=1326 audit(1774334710.742:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090319c799 code=0x7ffc0000
[  462.980048][   T26] audit: type=1326 audit(1774334710.752:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f090319c799 code=0x7ffc0000
[  462.980088][   T26] audit: type=1326 audit(1774334710.752:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090319c799 code=0x7ffc0000
[  462.980118][   T26] audit: type=1326 audit(1774334710.752:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090319c799 code=0x7ffc0000
[  462.980147][   T26] audit: type=1326 audit(1774334710.752:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f090319c799 code=0x7ffc0000
[  462.980177][   T26] audit: type=1326 audit(1774334710.822:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090319c799 code=0x7ffc0000
[  462.980204][   T26] audit: type=1326 audit(1774334710.822:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090319c799 code=0x7ffc0000
[  465.018741][ T7985] loop3: detected capacity change from 0 to 40427
[  465.150980][ T7985] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  465.182172][ T7985] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  465.240517][ T7985] F2FS-fs (loop3): invalid crc value
[  465.368450][ T7985] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[  465.417740][ T8020] 9pnet_virtio: no channels available for device syz
[  465.605624][ T7985] F2FS-fs (loop3): recover fsync data on readonly fs
[  465.651221][ T7985] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30
[  465.659217][ T7985] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  466.254733][ T8034] loop1: detected capacity change from 0 to 512
[  466.421119][ T8034] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  466.585882][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1051'.
[  467.250631][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  467.906607][ T8048] loop2: detected capacity change from 0 to 32768
[  468.058016][ T8048] XFS (loop2): Mounting V5 Filesystem
[  468.248401][ T8048] XFS (loop2): Ending clean mount
[  468.414434][ T4349] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  469.156054][ T4349] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  469.180468][ T4349] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  469.213033][ T4349] usb 4-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40
[  469.232764][ T4277] XFS (loop2): Unmounting Filesystem
[  469.244414][ T4349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.252745][ T4349] usb 4-1: Product: syz
[  469.256998][ T4349] usb 4-1: Manufacturer: syz
[  469.262716][ T4349] usb 4-1: SerialNumber: syz
[  469.668258][ T4349] usb 4-1: USB disconnect, device number 36
[  469.747983][ T8085] No such timeout policy "syz1"
[  469.757480][ T8085] autofs4:pid:8085:autofs_fill_super: called with bogus options
[  469.768716][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'.
[  470.642922][ T8092] loop0: detected capacity change from 0 to 512
[  470.824122][ T8092] FAT-fs (loop0): Unrecognized mount option "uäéšã»P2/cÝ" or missing value
[  470.861413][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  471.269759][ T8097] loop2: detected capacity change from 0 to 1024
[  471.368251][ T6313] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  471.959323][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1075'.
[  472.015288][ T8110] 9pnet_virtio: no channels available for device syz
[  473.013933][ T8119] loop4: detected capacity change from 0 to 1024
[  473.033518][ T8121] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1078'.
[  473.887446][ T8127] overlayfs: failed to resolve './file0': -2
[  476.022104][ T8138] loop3: detected capacity change from 0 to 1024
[  476.120367][ T4258] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  476.379041][ T8140] loop0: detected capacity change from 0 to 32768
[  476.518856][ T8140] XFS (loop0): Mounting V5 Filesystem
[  476.607577][ T8140] XFS (loop0): Ending clean mount
[  477.334747][ T5138] hfsplus: b-tree write err: -5, ino 25
[  477.341317][ T5138] hfsplus: b-tree write err: -5, ino 4
[  477.396337][ T5138] hfsplus: b-tree write err: -5, ino 2
[  477.450900][ T5138] hfsplus: b-tree write err: -5, ino 17
[  477.463760][ T5138] hfsplus: b-tree write err: -5, ino 26
[  477.654423][ T4342] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  477.857910][ T8162] No such timeout policy "syz1"
[  477.867270][ T8162] autofs4:pid:8162:autofs_fill_super: called with bogus options
[  477.878495][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'.
[  478.914312][    C1] sched: RT throttling activated
[  478.947306][ T4271] XFS (loop0): Unmounting Filesystem
[  479.064788][ T4342] usb 4-1: Using ep0 maxpacket: 8
[  479.074092][ T8156] 9pnet_virtio: no channels available for device syz
[  479.120081][ T4342] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  479.182208][ T4342] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  479.236940][ T4342] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  479.259452][ T4342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.304623][ T4342] usbtmc 4-1:16.0: bulk endpoints not found
[  479.903060][ T8171] overlayfs: failed to resolve './file0': -2
[  480.531899][ T4342] usb 4-1: USB disconnect, device number 37
[  480.813940][ T8178] loop1: detected capacity change from 0 to 1024
[  480.934422][ T4258] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  481.206541][ T8185] loop1: detected capacity change from 0 to 512
[  481.233162][ T8185] EXT4-fs: Ignoring removed bh option
[  481.255183][ T8185] EXT4-fs: inline encryption not supported
[  481.295715][ T8185] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  481.332136][ T8187] loop0: detected capacity change from 0 to 1024
[  481.408569][ T8185] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  481.551750][ T8185] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1096: bg 0: block 248: padding at end of block bitmap is not set
[  481.632540][ T8185] __quota_error: 14 callbacks suppressed
[  481.632559][ T8185] Quota error (device loop1): write_blk: dquota write failed
[  481.673033][ T8185] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  481.712298][ T8185] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.1096: Failed to acquire dquot type 1
[  481.803665][ T8185] EXT4-fs (loop1): 1 truncate cleaned up
[  481.832310][ T8185] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  482.231400][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  482.245111][ T5233] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[  482.370645][ T5233] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:17: Failed to release dquot type 1
[  483.443079][ T8211] 9pnet_virtio: no channels available for device syz
[  484.170870][ T8217] overlayfs: failed to resolve './file0': -2
[  485.264636][ T3598] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  485.307472][ T5233] hfsplus: b-tree write err: -5, ino 25
[  485.314158][ T5233] hfsplus: b-tree write err: -5, ino 4
[  485.338601][ T5233] hfsplus: b-tree write err: -5, ino 2
[  485.360465][ T5233] hfsplus: b-tree write err: -5, ino 17
[  485.378548][ T5233] hfsplus: b-tree write err: -5, ino 26
[  485.454511][ T3598] usb 2-1: Using ep0 maxpacket: 8
[  485.462203][ T3598] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  485.503224][ T3598] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  485.544538][ T3598] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  485.574034][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.611689][ T3598] usbtmc 2-1:16.0: bulk endpoints not found
[  486.036650][ T8231] loop2: detected capacity change from 0 to 1024
[  486.210260][ T4258] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  486.884714][ T8246] loop3: detected capacity change from 0 to 256
[  486.974094][ T8246] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  487.379089][ T8251] 9pnet_virtio: no channels available for device syz
[  487.666887][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.678553][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.802853][ T8257] netlink: 'syz.4.1112': attribute type 16 has an invalid length.
[  487.819794][ T8257] netlink: 'syz.4.1112': attribute type 17 has an invalid length.
[  487.896360][ T8257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  488.004408][ T3598] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  488.044870][ T4315] usb 2-1: USB disconnect, device number 32
[  488.174412][ T3598] usb 1-1: device descriptor read/64, error -71
[  488.247703][ T8249] loop2: detected capacity change from 0 to 40427
[  488.284785][ T8249] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  488.312905][ T5120] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  488.322161][ T8249] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  488.352202][ T8249] F2FS-fs (loop2): invalid crc value
[  488.442878][ T8249] F2FS-fs (loop2): Found nat_bits in checkpoint
[  488.519074][ T5120] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  488.534500][ T3598] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  488.539212][ T5120] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  488.573910][ T5120] usb 4-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40
[  488.592950][ T5120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.620265][ T5120] usb 4-1: Product: syz
[  488.634743][ T5120] usb 4-1: Manufacturer: syz
[  488.639436][ T5120] usb 4-1: SerialNumber: syz
[  488.696629][ T8249] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  488.703737][ T8249] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  488.711526][ T3598] usb 1-1: device descriptor read/64, error -71
[  488.854602][ T3598] usb usb1-port1: attempt power cycle
[  488.887569][ T5120] usb 4-1: USB disconnect, device number 38
[  489.294571][ T3598] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  489.373802][ T3598] usb 1-1: device descriptor read/8, error -71
[  489.543696][ T8282] loop3: detected capacity change from 0 to 256
[  489.591149][ T8282] exfat: Deprecated parameter 'utf8'
[  489.604840][ T8282] exfat: Deprecated parameter 'utf8'
[  489.642044][ T8282] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  489.665041][ T3598] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  489.730461][ T3598] usb 1-1: device descriptor read/8, error -71
[  489.864614][ T3598] usb usb1-port1: unable to enumerate USB device
[  489.949457][ T8284] 9pnet_virtio: no channels available for device syz
[  490.724741][ T5120] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  490.954472][ T5120] usb 5-1: Using ep0 maxpacket: 8
[  490.961586][ T5120] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  490.992723][ T5120] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  491.034608][ T5120] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  491.064465][ T5120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.207552][ T5120] usbtmc 5-1:16.0: bulk endpoints not found
[  491.298707][ T8310] No such timeout policy "syz1"
[  491.308228][ T8310] autofs4:pid:8310:autofs_fill_super: called with bogus options
[  491.319593][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'.
[  492.109722][   T26] audit: type=1326 audit(1774334740.202:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.1.1130" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7e319c799 code=0x0
[  492.284514][ T5120] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  492.475875][ T5120] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  492.500605][ T5120] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  492.526299][ T5120] usb 1-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40
[  492.549043][ T5120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.592459][ T5120] usb 1-1: Product: syz
[  492.609162][ T5120] usb 1-1: Manufacturer: syz
[  492.628808][ T5120] usb 1-1: SerialNumber: syz
[  492.892848][ T5120] usb 1-1: USB disconnect, device number 38
[  493.501231][  T128] usb 5-1: USB disconnect, device number 35
[  493.787464][ T4315] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  493.855427][ T8343] loop3: detected capacity change from 0 to 512
[  493.922675][ T8343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  493.954768][ T4315] usb 2-1: device descriptor read/64, error -71
[  494.224828][ T4315] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  494.367026][ T8343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  494.444411][ T4315] usb 2-1: device descriptor read/64, error -71
[  494.480897][ T8343] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  494.576202][ T4315] usb usb2-port1: attempt power cycle
[  494.984458][ T3598] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  495.124368][   T26] audit: type=1326 audit(1774334743.212:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.0.1147" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa1759c799 code=0x0
[  495.127812][ T4315] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  495.175159][ T4315] usb 2-1: device descriptor read/8, error -71
[  495.208526][ T3598] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  495.239209][ T3598] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  495.256004][ T3598] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  495.275564][ T3598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  495.293829][ T3598] usb 4-1: SerialNumber: syz
[  495.444453][ T4315] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  495.485179][ T4315] usb 2-1: device descriptor read/8, error -71
[  495.536503][ T3598] usb 4-1: 0:2 : does not exist
[  495.580638][ T3598] usb 4-1: USB disconnect, device number 39
[  495.606964][ T4315] usb usb2-port1: unable to enumerate USB device
[  495.995022][ T8367] loop0: detected capacity change from 0 to 512
[  496.143314][ T8367] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  496.212810][ T4269] EXT4-fs (loop3): unmounting filesystem.
[  496.815840][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  496.914479][ T4349] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  497.106303][ T4349] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  497.130571][ T4349] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  497.169702][ T4349] usb 2-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40
[  497.190575][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.210264][ T4349] usb 2-1: Product: syz
[  497.224558][ T4349] usb 2-1: Manufacturer: syz
[  497.237527][ T4349] usb 2-1: SerialNumber: syz
[  497.475393][ T4349] usb 2-1: unit 0 not found!
[  497.503327][ T4349] usb 2-1: USB disconnect, device number 37
[  497.715201][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  498.019508][ T4349] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  498.274353][ T4349] usb 5-1: Using ep0 maxpacket: 16
[  498.281440][ T4349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  498.304384][ T4349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  498.315690][ T4349] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  498.350603][ T4349] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  498.450298][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.563710][ T4349] usb 5-1: config 0 descriptor??
[  499.041855][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x5
[  499.059276][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.089657][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.111180][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.137645][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.155603][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.175762][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.203390][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.216678][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.233953][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.290005][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.308917][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.328112][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.344497][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.351738][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.352229][ T8409] loop1: detected capacity change from 0 to 1024
[  499.370434][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.379338][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.388967][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.394164][ T8409] EXT4-fs: inline encryption not supported
[  499.396448][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.411762][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.419112][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.427044][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.434043][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.443120][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.450461][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.457911][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.466188][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.466205][ T8409] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  499.484636][ T4349] elecom 0003:056E:010C.000B: unknown main item tag 0x0
[  499.491838][ T4349] elecom 0003:056E:010C.000B: unbalanced collection at end of report description
[  499.502130][ T4349] elecom: probe of 0003:056E:010C.000B failed with error -22
[  499.515270][ T4349] usb 5-1: USB disconnect, device number 36
[  500.017682][ T8416] bridge0: port 3(gretap0) entered blocking state
[  500.024709][ T8416] bridge0: port 3(gretap0) entered disabled state
[  500.039926][ T8416] device gretap0 entered promiscuous mode
[  500.048958][ T8416] bridge0: port 3(gretap0) entered blocking state
[  500.055512][ T8416] bridge0: port 3(gretap0) entered forwarding state
[  500.241587][ T8416] loop3: detected capacity change from 0 to 4096
[  500.255032][ T8416] EXT4-fs: Ignoring removed mblk_io_submit option
[  501.534917][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  501.541355][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  502.654964][ T8416] fscrypt: Error allocating hmac(sha512): -2
[  502.891857][ T8437] loop1: detected capacity change from 0 to 1024
[  503.344363][ T3598] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  503.758109][ T3598] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  503.778715][ T3598] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  503.801726][ T3598] usb 5-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40
[  503.821351][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.852524][ T3598] usb 5-1: Product: syz
[  503.869357][ T3598] usb 5-1: Manufacturer: syz
[  503.897692][ T3598] usb 5-1: SerialNumber: syz
[  503.926485][ T5872] hfsplus: b-tree write err: -5, ino 25
[  503.932399][ T5872] hfsplus: b-tree write err: -5, ino 4
[  503.943859][ T5872] hfsplus: b-tree write err: -5, ino 2
[  503.953030][ T5872] hfsplus: b-tree write err: -5, ino 26
[  504.134685][ T3598] usb 5-1: unit 0 not found!
[  504.164746][ T3598] usb 5-1: USB disconnect, device number 37
[  504.312999][ T8458] 9pnet_virtio: no channels available for device syz
[  504.834481][  T128] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  505.054445][  T128] usb 3-1: Using ep0 maxpacket: 16
[  505.069016][  T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  505.090628][  T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  505.117419][  T128] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  505.130777][  T128] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  505.140035][  T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.150888][  T128] usb 3-1: config 0 descriptor??
[  506.178896][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x5
[  506.213336][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.255322][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.275931][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.282970][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.327039][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.344225][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.369539][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.388287][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.407602][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.429385][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.448671][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.463322][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.482135][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.500312][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.518959][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.537015][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.554199][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.571480][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.588156][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.603573][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.623283][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.663273][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.682040][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.702709][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.720972][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.728735][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.742916][  T128] elecom 0003:056E:010C.000C: unknown main item tag 0x0
[  506.759711][  T128] elecom 0003:056E:010C.000C: unbalanced collection at end of report description
[  506.780999][  T128] elecom: probe of 0003:056E:010C.000C failed with error -22
[  506.824607][  T128] usb 3-1: USB disconnect, device number 20
[  507.316839][ T8487] loop2: detected capacity change from 0 to 1024
[  507.524418][ T8486] No such timeout policy "syz1"
[  507.530197][ T8486] autofs4:pid:8486:autofs_fill_super: called with bogus options
[  507.539109][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'.
[  509.020866][ T5138] hfsplus: b-tree write err: -5, ino 25
[  509.900571][ T5138] hfsplus: b-tree write err: -5, ino 4
[  509.925175][ T5138] hfsplus: b-tree write err: -5, ino 2
[  509.942647][ T5138] hfsplus: b-tree write err: -5, ino 26
[  511.210969][ T8513] loop2: detected capacity change from 0 to 256
[  511.274799][ T8513] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  511.913286][ T8522] netlink: 'syz.4.1194': attribute type 11 has an invalid length.
[  512.103842][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1194'.
[  512.232651][ T8528] No such timeout policy "syz1"
[  512.241278][ T8528] autofs4:pid:8528:autofs_fill_super: called with bogus options
[  512.252379][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'.
[  515.746207][ T8546] fuse: Bad value for 'group_id'
[  515.879456][ T8548] 9pnet_virtio: no channels available for device syz
[  516.130402][ T8551] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1209'.
[  516.139883][ T8551] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1209'.
[  518.652832][ T8568] loop0: detected capacity change from 0 to 256
[  518.745363][ T8568] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010281, chksum : 0x636f305d, utbl_chksum : 0xe619d30d)
[  519.548605][ T8576] loop1: detected capacity change from 0 to 4096
[  521.195761][ T8576] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  521.204776][ T8576] EXT4-fs (loop1): Test dummy encryption mode enabled
[  521.230410][ T8576] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0003]
[  521.238695][ T8576] System zones: 0-5
[  521.970942][ T8576] EXT4-fs: error -4 creating inode table initialization thread
[  521.979401][ T8576] EXT4-fs (loop1): mount failed
[  524.136473][ T8615] overlayfs: failed to resolve './file0': -2
[  524.726083][ T8621] loop2: detected capacity change from 0 to 512
[  524.838283][ T8621] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1227: iget: bad i_size value: -3674898675588399094
[  524.876417][ T8621] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1227: couldn't read orphan inode 15 (err -117)
[  525.800038][ T8621] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  526.022051][ T8634] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1218'.
[  526.031308][ T8634] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1218'.
[  526.315253][ T8637] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1220'.
[  526.324360][ T8637] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1220'.
[  527.696024][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  528.784602][ T8656] overlayfs: failed to resolve './file0': -2
[  531.665302][ T8676] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1240'.
[  531.674506][ T8676] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1240'.
[  532.443160][ T8682] loop0: detected capacity change from 0 to 1024
[  532.459999][ T8680] loop3: detected capacity change from 0 to 512
[  532.505201][ T8682] EXT4-fs: Ignoring removed oldalloc option
[  532.511169][ T8682] EXT4-fs: Ignoring removed bh option
[  532.564049][ T8682] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  532.752472][ T8682] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  534.332209][ T8700] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1241'.
[  534.341489][ T8700] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1241'.
[  534.939043][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  536.034737][ T8711] binder: 8701:8711 ioctl c0306201 0 returned -14
[  536.868355][ T8705] overlayfs: failed to resolve './file0': -2
[  536.932935][ T8707] loop4: detected capacity change from 0 to 256
[  536.985216][ T8707] exfat: Deprecated parameter 'utf8'
[  536.990690][ T8707] exfat: Deprecated parameter 'namecase'
[  537.014809][ T8707] exfat: Deprecated parameter 'namecase'
[  538.155361][ T8707] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  539.348430][ T8730] 9pnet_virtio: no channels available for device syz
[  542.305715][ T8753] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1259'.
[  542.314964][ T8753] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1259'.
[  543.413599][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'.
[  543.475738][ T8769] batman_adv: batadv0: Removing interface: batadv_slave_0
[  545.155471][ T8764] tap0: tun_chr_ioctl cmd 1074025675
[  545.255797][ T8764] tap0: persist enabled
[  545.999548][ T8788] No such timeout policy "syz1"
[  546.020308][ T8788] autofs4:pid:8788:autofs_fill_super: called with bogus options
[  546.041138][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'.
[  546.925046][ T8792] fuse: Bad value for 'fd'
[  547.577015][ T8804] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1273'.
[  547.587943][ T8804] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1273'.
[  547.886549][ T8807] 9pnet_virtio: no channels available for device syz
[  550.630674][ T8833] No such timeout policy "syz1"
[  550.640124][ T8833] autofs4:pid:8833:autofs_fill_super: called with bogus options
[  550.652137][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1281'.
[  551.324452][ T3598] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  551.554382][ T3598] usb 3-1: Using ep0 maxpacket: 16
[  551.662987][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.716145][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  551.760112][ T3598] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  551.784074][ T3598] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  551.802920][ T8847] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1288'.
[  551.812220][ T8847] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1288'.
[  551.886582][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.395452][ T3598] usb 3-1: config 0 descriptor??
[  552.520908][ T8852] bridge0: port 3(gretap0) entered blocking state
[  552.572111][ T8852] bridge0: port 3(gretap0) entered disabled state
[  552.613863][ T8852] device gretap0 entered promiscuous mode
[  552.637065][ T8852] bridge0: port 3(gretap0) entered blocking state
[  552.643644][ T8852] bridge0: port 3(gretap0) entered forwarding state
[  553.383742][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x5
[  553.432001][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x7
[  553.460057][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  553.504377][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  553.522986][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.635009][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.642126][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.660651][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.679344][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.696723][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.703755][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.741572][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.761846][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.782919][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.810920][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.828451][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.869446][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.877591][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.890504][ T3598] elecom 0003:056E:010C.000D: unknown main item tag 0x0
[  554.899945][ T3598] elecom 0003:056E:010C.000D: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.2-1/input0
[  554.921434][ T3598] usb 3-1: USB disconnect, device number 21
[  555.541416][ T8877] fido_id[8877]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  557.359579][ T8891] loop2: detected capacity change from 0 to 256
[  557.462126][ T8891] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010281, chksum : 0x636f305d, utbl_chksum : 0xe619d30d)
[  559.949196][ T8908] loop3: detected capacity change from 0 to 256
[  559.975776][ T8908] exfat: Deprecated parameter 'utf8'
[  559.990450][ T8908] exfat: Deprecated parameter 'namecase'
[  560.007323][ T8908] exfat: Deprecated parameter 'namecase'
[  560.019967][ T8908] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  561.231228][ T8918] fuse: Bad value for 'fd'
[  563.869518][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  563.875934][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  566.349728][ T8949] loop2: detected capacity change from 0 to 256
[  566.408685][ T8949] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010281, chksum : 0x636f305d, utbl_chksum : 0xe619d30d)
[  567.787694][ T8965] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1316'.
[  567.796909][ T8965] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1316'.
[  568.819504][ T8971] No such timeout policy "syz1"
[  568.825315][ T8971] autofs4:pid:8971:autofs_fill_super: called with bogus options
[  568.833768][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'.
[  572.044503][ T4316] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  572.239262][ T4316] usb 5-1: Using ep0 maxpacket: 16
[  572.390455][ T4316] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  572.421207][ T4316] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  572.624909][ T9008] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1338'.
[  572.634095][ T9008] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1338'.
[  572.811302][ T9010] No such timeout policy "syz1"
[  572.819927][ T9010] autofs4:pid:9010:autofs_fill_super: called with bogus options
[  572.830325][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1339'.
[  573.316069][ T4316] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  573.345507][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.384364][ T4316] usb 5-1: Product: syz
[  573.388668][ T4316] usb 5-1: Manufacturer: syz
[  573.397737][ T4316] usb 5-1: SerialNumber: syz
[  573.526243][ T9012] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1340'.
[  573.660288][ T4316] usb 5-1: 0:2 : does not exist
[  573.730234][ T4316] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  573.985114][ T4316] usb 5-1: USB disconnect, device number 38
[  575.169135][ T9031] loop3: detected capacity change from 0 to 512
[  575.176577][ T9031] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  575.292197][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  575.696533][ T9031] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  575.740597][ T9031] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  575.779487][ T9031] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  575.922925][ T9031] syz.3.1343: attempt to access beyond end of device
[  575.922925][ T9031] loop3: rw=524288, sector=17179852706, nr_sectors = 16 limit=512
[  576.052385][ T9035] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548)
[  576.125016][ T9031] syz.3.1343: attempt to access beyond end of device
[  576.125016][ T9031] loop3: rw=0, sector=17179852706, nr_sectors = 8 limit=512
[  576.230522][   T26] audit: type=1800 audit(1774334824.322:33): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1343" name="file2" dev="loop3" ino=1048862 res=0 errno=0
[  576.675175][ T9052] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1351'.
[  576.684375][ T9052] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1351'.
[  576.905547][ T9054] fuse: Bad value for 'fd'
[  578.499139][ T9061] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1353'.
[  579.656327][ T9065] loop3: detected capacity change from 0 to 40427
[  579.690366][ T9065] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  579.725416][ T9065] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  579.792967][ T9065] F2FS-fs (loop3): Found nat_bits in checkpoint
[  580.747444][ T9065] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  580.774706][ T9065] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  581.615023][ T9087] fuse: Unknown parameter 'group_i00000000000000000000'
[  582.955196][ T4349] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  583.045394][ T4269] syz-executor: attempt to access beyond end of device
[  583.045394][ T4269] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  583.174335][ T4349] usb 3-1: Using ep0 maxpacket: 8
[  583.190593][ T4349] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  583.209181][ T4349] usb 3-1: config 179 has no interface number 0
[  583.230971][ T4349] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  583.273008][ T4349] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  583.294353][ T4349] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  583.344292][ T4349] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  583.397388][ T4349] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  583.451902][ T4349] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  583.484870][ T4349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.514128][ T9085] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  583.743334][ T9099] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1367'.
[  583.750425][ T4349] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11
[  583.953013][ T4316] usb 3-1: USB disconnect, device number 22
[  583.959142][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  583.967489][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  583.985526][ T4316] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  587.437008][ T9128] fuse: Bad value for 'fd'
[  588.167235][ T9131] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1379'.
[  590.041115][ T4349] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  590.844341][ T4349] usb 3-1: Using ep0 maxpacket: 16
[  590.851456][ T4349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  590.874283][ T4349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  590.902868][ T4349] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  591.086166][ T4349] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  591.096328][ T4349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.112832][ T4349] usb 3-1: config 0 descriptor??
[  593.306808][ T4349] usbhid 3-1:0.0: can't add hid device: -71
[  593.312890][ T4349] usbhid: probe of 3-1:0.0 failed with error -71
[  593.337513][ T9179] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1392'.
[  593.354734][ T4349] usb 3-1: USB disconnect, device number 23
[  595.894951][   T26] audit: type=1326 audit(1774334843.992:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.4.1403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34bf19c799 code=0x0
[  595.960757][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'.
[  597.808834][ T9235] loop4: detected capacity change from 0 to 1024
[  600.211050][    T9] hfsplus: b-tree write err: -5, ino 25
[  600.230006][    T9] hfsplus: b-tree write err: -5, ino 4
[  600.245580][    T9] hfsplus: b-tree write err: -5, ino 2
[  600.261547][    T9] hfsplus: b-tree write err: -5, ino 26
[  600.580042][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'.
[  601.914445][ T4316] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  603.423707][ T9274] loop2: detected capacity change from 0 to 256
[  603.478156][ T9274] exfat: Deprecated parameter 'utf8'
[  603.484075][ T9274] exfat: Deprecated parameter 'namecase'
[  603.489896][ T9274] exfat: Deprecated parameter 'namecase'
[  603.524804][ T9274] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  603.901337][   T26] audit: type=1326 audit(1774334851.992:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.1424" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34bf19c799 code=0x0
[  604.730295][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'.
[  606.214288][ T4314] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  607.144430][ T4314] usb 5-1: Using ep0 maxpacket: 16
[  607.151580][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  607.193189][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  607.218264][ T4314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  607.798755][ T4314] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  607.807956][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.853278][ T4314] usb 5-1: config 0 descriptor??
[  608.088427][ T4314] usbhid 5-1:0.0: can't add hid device: -71
[  608.095777][ T4314] usbhid: probe of 5-1:0.0 failed with error -71
[  608.142240][ T4314] usb 5-1: USB disconnect, device number 39
[  608.437927][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1446'.
[  608.564509][   T26] audit: type=1326 audit(1774334856.612:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9336 comm="syz.1.1443" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7e319c799 code=0x0
[  608.641138][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1445'.
[  608.650917][ T9345] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  608.824088][ T9345] batman_adv: batadv0: Removing interface: batadv_slave_0
[  609.144044][ T9355] device syz_tun entered promiscuous mode
[  612.720251][ T9395] fuse: Bad value for 'fd'
[  615.206346][ T9429] fuse: Bad value for 'fd'
[  620.310633][ T9476] fuse: Bad value for 'fd'
[  622.214956][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1491'.
[  622.549758][ T9503] fuse: Bad value for 'fd'
[  624.386669][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  624.393014][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  624.751544][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'.
[  625.019624][ T9533] fuse: Bad value for 'fd'
[  625.990758][ T9548] fuse: Bad value for 'fd'
[  628.250595][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'.
[  632.076917][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'.
[  633.477808][ T9623] overlayfs: './file0' not a directory
[  635.180335][ T9648] fuse: Bad value for 'fd'
[  640.690915][ T9703] fuse: Bad value for 'fd'
[  644.550165][ T9731] 9pnet_virtio: no channels available for device syz
[  646.736746][ T9745] fuse: Bad value for 'fd'
[  650.786348][ T9781] fuse: Bad value for 'fd'
[  650.796654][ T9782] fuse: Bad value for 'fd'
[  652.223241][ T9796] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  655.273882][ T9815] xt_CT: No such helper "pptp"
[  656.283423][ T9833] 9pnet_virtio: no channels available for device syz
[  656.654250][ T9835] fuse: Bad value for 'fd'
[  657.092126][ T9840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1602'.
[  660.299873][ T9876] fuse: Bad value for 'fd'
[  663.063417][ T9894] No such timeout policy "syz1"
[  663.069744][ T9894] autofs4:pid:9894:autofs_fill_super: called with bogus options
[  663.078850][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'.
[  664.908639][ T9917] fuse: Bad value for 'fd'
[  666.754004][ T9935] 9pnet_virtio: no channels available for device syz
[  670.403242][ T9959] fuse: Bad value for 'fd'
[  675.699708][T10004] device gretap0 left promiscuous mode
[  675.777418][T10004] bridge0: port 3(gretap0) entered disabled state
[  676.504679][T10017] fuse: Bad value for 'fd'
[  677.183000][T10027] fuse: Bad value for 'fd'
[  677.953229][T10035] 9pnet_virtio: no channels available for device syz
[  678.040896][T10039] netlink: 'syz.4.1657': attribute type 16 has an invalid length.
[  678.064096][T10039] netlink: 'syz.4.1657': attribute type 17 has an invalid length.
[  679.353945][T10048] 9pnet_virtio: no channels available for device syz
[  682.782902][T10039] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  683.489663][T10039] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  683.499228][T10039] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  683.509811][T10039] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  683.519250][T10039] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  684.268694][T10094] 9pnet_virtio: no channels available for device syz
[  685.854674][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  685.861006][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  686.286227][T10101] fuse: Bad value for 'fd'
[  686.303948][T10110] netlink: 524 bytes leftover after parsing attributes in process `syz.3.1678'.
[  686.410110][T10113] 9pnet_virtio: no channels available for device syz
[  686.621033][T10118] capability: warning: `syz.2.1679' uses deprecated v2 capabilities in a way that may be insecure
[  690.961757][ T4296] kworker/dying (4296) used greatest stack depth: 20240 bytes left
[  691.206254][T10166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  691.213854][T10166] IPv6: NLM_F_CREATE should be set when creating new route
[  691.263532][T10169] 9pnet_virtio: no channels available for device syz
[  692.084916][T10179] fuse: Bad value for 'fd'
[  692.138127][T10180] 9pnet_virtio: no channels available for device syz
[  700.620944][T10241] 9pnet_virtio: no channels available for device syz
[  701.187234][ T4317] kworker/dying (4317) used greatest stack depth: 20176 bytes left
[  704.600168][T10260] fuse: Bad value for 'fd'
[  714.069803][T10318] fuse: Bad value for 'fd'
[  714.259811][T10320] 9pnet_virtio: no channels available for device syz
[  716.627044][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1737'.
[  717.888252][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  721.162065][T10381] 9pnet_virtio: no channels available for device syz
[  724.297861][T10410] 9pnet_virtio: no channels available for device syz
[  724.617889][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'.
[  724.627453][T10416] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  725.595527][T10416] batman_adv: batadv0: Removing interface: batadv_slave_0
[  726.576906][T10422] No such timeout policy "syz1"
[  726.583191][T10422] autofs4:pid:10422:autofs_fill_super: called with bogus options
[  726.591992][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1768'.
[  729.864618][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'.
[  730.051328][T10455] batman_adv: batadv0: Removing interface: batadv_slave_0
[  730.738150][T10464] 9pnet_virtio: no channels available for device syz
[  733.725927][T10493] 9pnet_virtio: no channels available for device syz
[  733.978113][T10497] fuse: Bad value for 'fd'
[  734.464887][   T26] audit: type=1326 audit(1774335241.565:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.3.1796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc14339c799 code=0x0
[  737.863084][T10536] fuse: Bad value for 'fd'
[  739.416234][T10552] 9pnet_virtio: no channels available for device syz
[  741.721737][T10584] overlayfs: missing 'lowerdir'
[  741.826929][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1824'.
[  741.915909][T10592] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1825'.
[  744.099155][T10619] overlayfs: missing 'lowerdir'
[  744.255435][T10623] 9pnet_virtio: no channels available for device syz
[  747.274906][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  747.282500][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  750.267174][T10663] overlayfs: missing 'lowerdir'
[  754.894328][T10714] bridge0: port 3(gretap0) entered blocking state
[  754.900806][T10714] bridge0: port 3(gretap0) entered disabled state
[  754.907910][T10714] device gretap0 entered promiscuous mode
[  755.185166][T10710] 9pnet_virtio: no channels available for device syz
[  759.321186][T10742] fuse: Bad value for 'fd'
[  762.004781][T10759] overlayfs: failed to clone upperpath
[  762.728748][T10776] fuse: Unknown parameter 'grou00000000000000000000'
[  762.799978][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1881'.
[  767.080469][T10808] fuse: Bad value for 'fd'
[  768.226699][T10816] 9pnet_virtio: no channels available for device syz
[  768.245246][T10822] fuse: Bad value for 'fd'
[  769.878809][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'.
[  775.542029][T10868] 9pnet_virtio: no channels available for device syz
[  778.222439][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'.
[  778.830280][T10902] fuse: Bad value for 'fd'
[  781.576113][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1926'.
[  782.982612][T10935] 9pnet_virtio: no channels available for device syz
[  783.440884][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1930'.
[  785.290054][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'.
[  786.535131][T10976] 8021q: adding VLAN 0 to HW filter on device bond0
[  786.613471][T10976] 8021q: adding VLAN 0 to HW filter on device team0
[  786.668978][T10976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  786.893880][T10986] fuse: Bad value for 'fd'
[  787.059068][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1949'.
[  788.510602][T10995] overlayfs: missing 'lowerdir'
[  789.881266][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'.
[  793.176462][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'.
[  793.363080][T11057] fuse: Bad value for 'fd'
[  797.663473][T11106] 9pnet_virtio: no channels available for device syz
[  799.126161][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1990'.
[  801.010294][T11142] autofs4:pid:11142:autofs_fill_super: called with bogus options
[  801.019297][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1997'.
[  805.716615][T11180] fuse: Bad value for 'fd'
[  806.861084][T11187] 9pnet_virtio: no channels available for device syz
[  808.405058][T11204] autofs4:pid:11204:autofs_fill_super: called with bogus options
[  808.415671][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'.
[  808.934752][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  808.941150][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  811.479153][T11220] fuse: Bad value for 'fd'
[  815.252785][T11249] autofs4:pid:11249:autofs_fill_super: called with bogus options
[  815.263471][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2024'.
[  820.325571][T11296] fuse: Bad value for 'fd'
[  821.236492][T11302] autofs4:pid:11302:autofs_fill_super: called with bogus options
[  821.247452][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2038'.
[  827.755384][T11348] No such timeout policy "syz1"
[  827.763672][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2051'.
[  829.382649][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2061'.
[  829.391987][T11365] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  833.319695][T11365] batman_adv: batadv0: Removing interface: batadv_slave_0
[  833.427693][T11371] fuse: Bad value for 'fd'
[  833.689044][T11382] cgroup2: Unknown parameter 'perf_event'
[  835.407365][T11392] overlayfs: failed to clone upperpath
[  836.153840][T11404] No such timeout policy "syz1"
[  836.161486][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2071'.
[  838.450340][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2077'.
[  840.685554][T11439] bridge0: port 3(gretap0) entered blocking state
[  840.692408][T11439] bridge0: port 3(gretap0) entered disabled state
[  840.704414][T11439] device gretap0 entered promiscuous mode
[  840.710598][T11439] bridge0: port 3(gretap0) entered blocking state
[  840.717124][T11439] bridge0: port 3(gretap0) entered forwarding state
[  840.918284][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  843.195412][T11455] syz.1.2083 (11455) used greatest stack depth: 16368 bytes left
[  843.434974][T11460] 9pnet_fd: Insufficient options for proto=fd
[  853.767698][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2120'.
[  861.036168][T11641] fuse: Bad value for 'fd'
[  866.092789][T11674] No such timeout policy "syz1"
[  866.149649][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2153'.
[  869.167937][T11706] xt_hashlimit: size too large, truncated to 1048576
[  869.886036][T11710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2163'.
[  870.146764][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  870.153166][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  871.957004][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2171'.
[  872.088034][T11742] No such timeout policy "syz1"
[  872.156286][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'.
[  873.901385][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'.
[  874.301935][T11766] syz.4.2180 uses obsolete (PF_INET,SOCK_PACKET)
[  875.146072][T11773] fuse: Bad value for 'fd'
[  877.051691][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2189'.
[  877.972518][T11789] 9pnet_virtio: no channels available for device syz
[  879.486000][T11811] fuse: Unknown parameter 'use00000000000000000000'
[  881.881916][T11839] fuse: Bad value for 'fd'
[  882.414379][   T26] audit: type=1326 audit(1774335389.505:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.0.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1759c799 code=0x7ffc0000
[  882.474203][   T26] audit: type=1326 audit(1774335389.505:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.0.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1759c799 code=0x7ffc0000
[  882.589472][   T26] audit: type=1326 audit(1774335389.535:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.0.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7ffa1759c799 code=0x7ffc0000
[  882.796129][   T26] audit: type=1326 audit(1774335389.545:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.0.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1759c799 code=0x7ffc0000
[  882.954335][   T26] audit: type=1326 audit(1774335389.545:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.0.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1759c799 code=0x7ffc0000
[  886.149653][T11882] fuse: Bad value for 'fd'
[  888.360844][T11910] No such timeout policy "syz1"
[  888.371533][T11910] autofs4:pid:11910:autofs_fill_super: called with bogus options
[  888.382603][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2228'.
[  889.059558][T11914] xt_hashlimit: size too large, truncated to 1048576
[  895.487649][T11950] 9pnet_virtio: no channels available for device syz
[  896.395918][T11969] No such timeout policy "syz1"
[  896.402271][T11969] autofs4:pid:11969:autofs_fill_super: called with bogus options
[  896.411243][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2241'.
[  899.686429][T11988] overlayfs: failed to clone lowerpath
[  902.238518][T12008] 9pnet_virtio: no channels available for device syz
[  903.288684][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2256'.
[  903.357515][T12023] fuse: Bad value for 'fd'
[  908.924394][T12071] fuse: Bad value for 'fd'
[  913.234475][T12094] bridge0: port 3(gretap0) entered blocking state
[  913.241019][T12094] bridge0: port 3(gretap0) entered disabled state
[  913.248176][T12094] device gretap0 entered promiscuous mode
[  916.718160][T12116] fuse: Bad value for 'fd'
[  917.473859][T12122] 9pnet_virtio: no channels available for device syz
[  920.532893][T12154] ipt_CLUSTERIP: Please specify destination IP
[  921.248059][T12162] fuse: Bad value for 'fd'
[  924.805686][T12207] fuse: Bad value for 'fd'
[  925.306951][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2312'.
[  928.244706][T12254] fuse: Bad value for 'fd'
[  929.376607][T12265] overlayfs: failed to clone lowerpath
[  930.985467][T12272] overlayfs: failed to clone lowerpath
[  931.136497][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'.
[  932.363831][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  932.429902][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  935.500335][T12321] overlayfs: failed to clone lowerpath
[  936.331268][T12327] fuse: Unknown parameter '0xffffffffffffffff'
[  938.019012][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2355'.
[  940.543596][T12365] fuse: Unknown parameter '0x0000000000000003'
[  944.770993][T12400] overlayfs: failed to clone upperpath
[  944.813126][T12404] fuse: Bad value for 'fd'
[  944.835112][T12405] fuse: Unknown parameter '0x0000000000000003'
[  945.347080][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2381'.
[  947.762726][T12450] fuse: Unknown parameter '0xffffffffffffffff'
[  948.181402][T12454] overlayfs: failed to clone upperpath
[  951.758662][T12493] fuse: Bad value for 'fd'
[  952.778264][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2404'.
[  956.390058][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2409'.
[  967.453441][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2438'.
[  976.886430][T12673] No such timeout policy "syz1"
[  976.896091][T12673] autofs4:pid:12673:autofs_fill_super: called with bogus options
[  978.889392][T12714] tmpfs: Unknown parameter 'usrquota'
[  978.957040][T12718] tmpfs: Unknown parameter 'usrquota'
[  980.463017][T12744] overlayfs: failed to clone upperpath
[  980.624148][ T4283] Bluetooth: hci4: command 0x0406 tx timeout
[  981.033524][ T4283] Bluetooth: hci3: hardware error 0x02
[  981.896902][T12770] fuse: Bad value for 'fd'
[  983.109995][ T4283] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  983.617236][ T4283] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260
[  985.828020][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2527'.
[  987.964360][T12872] overlayfs: failed to clone lowerpath
[  988.502724][T12878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  989.070130][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'.
[  989.207038][T12895] fuse: Bad value for 'fd'
[  989.400630][T12897] netlink: 'syz.2.2544': attribute type 10 has an invalid length.
[  989.472065][T12897] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  989.601405][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2544'.
[  993.194581][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  993.200867][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  994.371236][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2565'.
[  999.152381][T12926] Set syz1 is full, maxelem 65536 reached
[ 1000.970439][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2583'.
[ 1006.662022][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2603'.
[ 1008.207747][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2616'.
[ 1008.750212][T13151] overlayfs: failed to clone upperpath
[ 1010.603153][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'.
[ 1011.252090][T13208] fuse: Bad value for 'fd'
[ 1013.006133][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2645'.
[ 1015.751891][T13287] syz.0.2667 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1029.483907][T13552] fuse: Bad value for 'fd'
[ 1032.154554][T13609] fuse: Bad value for 'fd'
[ 1033.885867][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'.
[ 1033.961287][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'.
[ 1034.039444][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'.
[ 1034.094461][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'.
[ 1034.153134][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'.
[ 1036.250312][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2819'.
[ 1039.710658][T13711] fuse: Unknown parameter 'u00000000000000000000'
[ 1041.374185][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2833'.
[ 1041.692035][T13743] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[ 1043.726745][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2845'.
[ 1043.867759][T13756] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1044.632443][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2851'.
[ 1045.844600][T13787] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2854'.
[ 1046.045627][T13783] 9pnet_virtio: no channels available for device syz
[ 1046.910464][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2856'.
[ 1048.658488][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2864'.
[ 1051.666013][T13852] 9pnet_virtio: no channels available for device syz
[ 1051.932602][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1051.948357][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1052.002705][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1052.036167][T12759] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1052.051448][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1052.135826][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1052.809894][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'.
[ 1054.224143][T12759] Bluetooth: hci4: command 0x0409 tx timeout
[ 1054.435028][T13864] chnl_net:caif_netlink_parms(): no params data found
[ 1054.467951][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.474399][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.729818][T13864] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1054.743286][T13864] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1054.753139][T13864] device bridge_slave_0 entered promiscuous mode
[ 1054.944346][T13864] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1054.951543][T13864] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1054.975269][T13864] device bridge_slave_1 entered promiscuous mode
[ 1055.114686][T13864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1055.139357][T13864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1055.293788][T13864] team0: Port device team_slave_0 added
[ 1056.285897][T13914] bridge0: port 3(gretap0) entered disabled state
[ 1056.304529][T12759] Bluetooth: hci4: command 0x041b tx timeout
[ 1056.949811][T13864] team0: Port device team_slave_1 added
[ 1057.405809][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2889'.
[ 1057.643844][T13864] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1057.653968][T13864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1057.730907][T13864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1057.754244][T13943] trusted_key: encrypted_key: keylen parameter is missing
[ 1057.807713][ T5977] device gretap0 left promiscuous mode
[ 1057.815829][ T5977] bridge0: port 3(gretap0) entered disabled state
[ 1057.877021][T13864] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1057.887175][T13864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1057.944453][T13949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2895'.
[ 1057.981000][T13864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1058.213081][T13864] device hsr_slave_0 entered promiscuous mode
[ 1058.233440][T13864] device hsr_slave_1 entered promiscuous mode
[ 1058.257337][T13864] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1058.282261][T13864] Cannot create hsr debugfs directory
[ 1058.384338][T12759] Bluetooth: hci4: command 0x040f tx timeout
[ 1058.566876][ T5977] bond0: (slave wlan1): Releasing backup interface
[ 1059.174738][ T5977] device hsr_slave_0 left promiscuous mode
[ 1059.200808][ T5977] device hsr_slave_1 left promiscuous mode
[ 1059.243668][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1061.265059][T12759] Bluetooth: hci4: command 0x0419 tx timeout
[ 1061.279131][ T5977] device bridge_slave_1 left promiscuous mode
[ 1061.305901][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1061.567051][T14001] fuse: Bad value for 'fd'
[ 1062.144539][ T5977] device bridge_slave_0 left promiscuous mode
[ 1062.200821][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1062.812657][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2909'.
[ 1063.515088][ T5977] team0 (unregistering): Port device team_slave_1 removed
[ 1063.622764][ T5977] team0 (unregistering): Port device team_slave_0 removed
[ 1063.754879][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1063.846840][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1063.925107][T12759] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260
[ 1064.717924][ T5977] bond0 (unregistering): Released all slaves
[ 1070.277868][T13864] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1070.332534][T13864] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1070.397241][T13864] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1070.903365][T13864] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1072.396389][T13864] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1072.485988][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1072.508206][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1072.546538][T13864] 8021q: adding VLAN 0 to HW filter on device team0
[ 1072.642481][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1072.680687][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1072.734426][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1072.741629][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1072.799745][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1072.829126][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1072.856333][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1072.863569][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1072.893207][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1072.908358][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1072.928618][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1072.963481][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1072.988661][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1073.013361][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1073.069333][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1073.814895][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1073.863771][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1073.924459][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1074.139121][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1074.181864][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1075.416404][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1075.426672][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1076.235716][T13864] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1076.372275][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1076.392187][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1076.752797][T13864] device veth0_vlan entered promiscuous mode
[ 1077.286136][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1077.303162][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1077.323148][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1077.346468][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1077.377118][T13864] device veth1_vlan entered promiscuous mode
[ 1077.476776][T13992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1077.515285][T13992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1077.551934][T13864] device veth0_macvtap entered promiscuous mode
[ 1077.570471][T14177] 9pnet_virtio: no channels available for device syz
[ 1077.719039][T13864] device veth1_macvtap entered promiscuous mode
[ 1078.601667][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1078.654936][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1078.700292][T13864] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1078.740100][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1078.762658][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1078.820904][T13864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1078.866854][T13864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1078.904337][T13864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1078.950668][T13864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1078.973151][T13864] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1078.998160][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1079.013942][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1079.046086][T13864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1079.164086][T13864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1079.172858][T13864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1079.249364][T13864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1079.790818][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1079.849680][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1079.916163][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1080.061138][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1080.129035][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1080.187118][T13992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1080.779543][T14216] binder: 14206:14216 ioctl 4018620d 0 returned -22
[ 1081.694983][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1081.733780][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1081.742408][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1081.754898][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1081.766900][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1081.776805][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1081.977843][T14226] loop2: detected capacity change from 0 to 256
[ 1082.082083][T14226] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010281, chksum : 0x636f305d, utbl_chksum : 0xe619d30d)
[ 1082.966333][T14235] syz.2.2952: attempt to access beyond end of device
[ 1082.966333][T14235] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256
[ 1082.996579][   T26] audit: type=1800 audit(1774335590.095:43): pid=14235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2952" name="file1" dev="loop2" ino=1048906 res=0 errno=0
[ 1083.076187][T14211] chnl_net:caif_netlink_parms(): no params data found
[ 1083.405267][ T4283] Bluetooth: hci0: link tx timeout
[ 1083.411115][ T4283] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1083.826752][ T4283] Bluetooth: hci5: command 0x0409 tx timeout
[ 1084.147485][T14211] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1084.204534][T14211] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1084.213160][T14211] device bridge_slave_0 entered promiscuous mode
[ 1084.266523][T14211] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1084.274670][T14211] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1084.291069][T14211] device bridge_slave_1 entered promiscuous mode
[ 1084.427019][T14211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1084.481886][T14211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1084.652728][T14211] team0: Port device team_slave_0 added
[ 1084.727015][T14211] team0: Port device team_slave_1 added
[ 1084.907941][T14211] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1084.961172][T14211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1085.149082][T14211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1085.924053][ T4283] Bluetooth: hci5: command 0x041b tx timeout
[ 1086.051522][T14211] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1086.074073][T14211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1086.164400][T14211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1086.254293][T14278] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2961'.
[ 1086.368263][T14211] device hsr_slave_0 entered promiscuous mode
[ 1086.430861][T14211] device hsr_slave_1 entered promiscuous mode
[ 1086.454780][T14211] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1086.504120][T14211] Cannot create hsr debugfs directory
[ 1087.984077][T12759] Bluetooth: hci5: command 0x040f tx timeout
[ 1088.256024][T14211] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1088.313218][T14211] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1088.372978][T14211] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1088.415724][ T4282] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1088.436244][ T4282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1088.454095][ T4282] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1088.464866][ T4282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1088.472583][ T4282] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1088.488797][ T4282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1088.583730][T14211] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1088.888129][ T4867] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1089.046041][ T4867] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1089.519244][ T4867] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1090.064071][T12759] Bluetooth: hci5: command 0x0419 tx timeout
[ 1090.230929][ T4867] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1090.337036][T14211] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1090.358460][ T4282] Bluetooth: hci0: link tx timeout
[ 1090.363638][ T4282] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1090.519664][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1090.544226][T12759] Bluetooth: hci6: command 0x0409 tx timeout
[ 1090.562321][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1090.581487][T14347] loop2: detected capacity change from 0 to 4096
[ 1090.685026][T14347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1090.693501][T14347] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1090.717005][T14211] 8021q: adding VLAN 0 to HW filter on device team0
[ 1090.756401][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1090.771755][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1090.840953][T14347] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0003]
[ 1090.871446][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1090.878645][ T5829] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1090.968468][T14347] System zones: 0-5
[ 1091.056500][T14324] chnl_net:caif_netlink_parms(): no params data found
[ 1091.077055][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1091.086077][T14347] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1091.114888][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1091.160155][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1091.171913][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1091.179105][ T5829] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1091.201084][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1091.211894][   T26] audit: type=1804 audit(1091.216:44): pid=14347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2979" name="/newroot/5/file0/file0/file0" dev="loop2" ino=13 res=1 errno=0
[ 1091.215767][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1091.911170][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1091.958464][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1091.981134][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1092.026245][T14386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'.
[ 1092.057145][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1092.095002][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1092.134490][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1092.164357][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1092.290087][T14211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1092.343856][T14391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2985'.
[ 1092.377358][T14391] device ip_vti0 entered promiscuous mode
[ 1092.408793][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'.
[ 1092.427533][T14387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1092.436685][T14387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1092.474127][ T4282] Bluetooth: hci4: command 0x0406 tx timeout
[ 1092.624179][ T4282] Bluetooth: hci6: command 0x041b tx timeout
[ 1093.015084][T14324] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1093.022265][T14324] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1093.031407][T14324] device bridge_slave_0 entered promiscuous mode
[ 1093.735008][T14324] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1093.777649][T14324] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1093.805147][T14324] device bridge_slave_1 entered promiscuous mode
[ 1093.851579][T14324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1093.932246][T14324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1094.732755][ T4282] Bluetooth: hci6: command 0x040f tx timeout
[ 1096.048980][T14324] team0: Port device team_slave_0 added
[ 1096.115248][T14211] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1096.786553][ T4282] Bluetooth: hci6: command 0x0419 tx timeout
[ 1097.088766][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1097.114728][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1097.174612][T14324] team0: Port device team_slave_1 added
[ 1097.221745][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'.
[ 1097.239578][T14324] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1097.264912][T14324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1097.357428][T14324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1097.478039][T14324] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1097.504007][T14324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1097.594440][T14324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1097.619929][ T4867] bridge0: port 3(gretap0) entered disabled state
[ 1097.964272][ T4867] device gretap0 left promiscuous mode
[ 1098.061972][ T4867] bridge0: port 3(gretap0) entered disabled state
[ 1098.521205][T14324] device hsr_slave_0 entered promiscuous mode
[ 1098.597546][T14324] device hsr_slave_1 entered promiscuous mode
[ 1098.614857][T14324] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1098.622466][T14324] Cannot create hsr debugfs directory
[ 1099.715009][ T4867] device hsr_slave_0 left promiscuous mode
[ 1099.847810][ T4867] device hsr_slave_1 left promiscuous mode
[ 1100.043364][ T4867] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1100.183200][ T4867] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1100.235624][ T4867] device bridge_slave_1 left promiscuous mode
[ 1100.241917][ T4867] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1100.276525][ T4867] device bridge_slave_0 left promiscuous mode
[ 1100.284389][ T4867] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1100.572135][ T4867] device veth1_macvtap left promiscuous mode
[ 1100.589936][ T4867] device veth0_macvtap left promiscuous mode
[ 1100.800241][ T4867] device veth1_vlan left promiscuous mode
[ 1101.222648][ T4867] device veth0_vlan left promiscuous mode
[ 1102.874870][T13864] EXT4-fs (loop2): unmounting filesystem.
[ 1104.732757][ T4867] team0 (unregistering): Port device team_slave_1 removed
[ 1104.783809][ T4867] team0 (unregistering): Port device team_slave_0 removed
[ 1104.838961][ T4867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1104.890906][ T4867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1105.279851][ T4867] bond0 (unregistering): Released all slaves
[ 1105.388183][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1105.397762][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1105.413739][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3005'.
[ 1105.423019][T14511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3006'.
[ 1105.432145][T14511] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1105.632341][T14511] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1105.864938][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1105.891304][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1105.937716][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1105.977144][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1106.055589][T14525] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3011'.
[ 1106.081078][T14211] device veth0_vlan entered promiscuous mode
[ 1106.161671][T14211] device veth1_vlan entered promiscuous mode
[ 1106.226479][T14324] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1106.242360][T14324] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1106.293644][T14324] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1106.320507][T14324] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1106.445055][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1106.475121][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1106.499966][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1106.519126][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1106.560802][T14211] device veth0_macvtap entered promiscuous mode
[ 1106.729985][T14211] device veth1_macvtap entered promiscuous mode
[ 1106.927051][T14211] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1106.965842][T14387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1108.388693][T14387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1108.408859][T14387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1108.476972][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1108.507901][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.674083][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1108.785937][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.853530][T14211] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1108.902565][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1108.921823][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1108.961735][T14211] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.991304][T14211] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.010819][T14211] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.050013][T14211] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.131482][T14324] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1109.254201][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1109.300514][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1109.341465][T14324] 8021q: adding VLAN 0 to HW filter on device team0
[ 1109.419574][T14387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1109.490009][T14387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1109.523378][T14387] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1109.530613][T14387] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1109.612417][T14387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1110.864869][T14387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1110.873592][T14387] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1110.880797][T14387] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1110.914640][T14387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1110.937269][T14387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1110.979813][T14387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1111.758151][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1111.768689][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1111.780660][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1111.837604][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3019'.
[ 1112.036345][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1112.057339][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1112.100823][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1112.130909][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1112.241977][T14324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1112.257886][T14324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1112.273893][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1112.310575][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1112.338255][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1112.363554][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1112.390265][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1112.411274][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1112.427012][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1112.438425][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1112.457615][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1113.888232][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3024'.
[ 1114.682141][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1114.697056][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1114.781025][T14324] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1114.921780][ T4867] device gretap0 left promiscuous mode
[ 1114.933460][ T4867] bridge0: port 3(gretap0) entered disabled state
[ 1115.910155][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.916696][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.938836][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3029'.
[ 1117.762980][ T4867] device hsr_slave_0 left promiscuous mode
[ 1117.772518][ T4867] device hsr_slave_1 left promiscuous mode
[ 1117.829193][ T4867] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1117.944755][ T4867] device bridge_slave_1 left promiscuous mode
[ 1118.003666][ T4867] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1118.029367][ T4867] device bridge_slave_0 left promiscuous mode
[ 1118.064368][ T4867] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1120.737008][ T4867] team0 (unregistering): Port device team_slave_1 removed
[ 1120.860641][ T4867] team0 (unregistering): Port device team_slave_0 removed
[ 1120.934659][ T4867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1121.751461][ T4867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1122.339905][ T4867] bond0 (unregistering): Released all slaves
[ 1122.409476][T14672] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3035'.
[ 1122.419266][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3034'.
[ 1122.573789][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3040'.
[ 1122.582908][T14706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1122.836614][T14706] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1122.879850][T14302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1123.021302][T14302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1123.642313][T14324] device veth0_vlan entered promiscuous mode
[ 1123.684268][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1123.721365][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1123.789225][T14324] device veth1_vlan entered promiscuous mode
[ 1123.816080][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1123.865095][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1123.899432][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1123.938118][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1124.014812][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1124.074515][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1124.201214][T14324] device veth0_macvtap entered promiscuous mode
[ 1124.250191][T14324] device veth1_macvtap entered promiscuous mode
[ 1124.994575][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1125.005300][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1125.050826][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3045'.
[ 1125.117534][T14324] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1125.152229][T14324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1125.190896][T14324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1125.232680][T14324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1125.274213][T14324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1125.335243][T14324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1125.401905][T14324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1125.471212][T14324] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1125.507375][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1125.528872][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1125.628132][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1125.658991][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1125.701195][T14324] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1125.727209][T14324] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1125.757313][T14324] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1125.786260][T14324] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1126.091259][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1126.129641][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1126.156879][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1126.157344][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1126.194038][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1126.224730][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1128.753852][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3060'.
[ 1130.750488][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1130.766289][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1130.775644][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1130.785278][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1130.794010][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1130.801702][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1130.951931][ T5977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1131.085672][ T5977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1131.215411][ T5977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1131.655555][ T5977] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1133.161309][T12759] Bluetooth: hci1: command 0x0409 tx timeout
[ 1133.370307][T14807] chnl_net:caif_netlink_parms(): no params data found
[ 1135.184148][ T4283] Bluetooth: hci1: command 0x041b tx timeout
[ 1135.624845][T14807] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1135.668900][T14807] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1135.731854][T14807] device bridge_slave_0 entered promiscuous mode
[ 1135.788681][T14807] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1135.834536][T14807] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1135.886549][T14807] device bridge_slave_1 entered promiscuous mode
[ 1136.082318][T14807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1136.169124][T14807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1136.476956][T14807] team0: Port device team_slave_0 added
[ 1136.585348][T14807] team0: Port device team_slave_1 added
[ 1136.707182][T14807] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1136.738159][T14807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1136.818534][T14902] loop6: detected capacity change from 0 to 1764
[ 1136.926564][T14807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1137.024345][ T4283] Bluetooth: hci5: command 0x0406 tx timeout
[ 1137.033384][T14886] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1137.288714][ T4283] Bluetooth: hci1: command 0x040f tx timeout
[ 1137.703128][T14807] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1137.730253][T14807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1137.808359][T14807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1138.228793][T14927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3091'.
[ 1138.255661][T14807] device hsr_slave_0 entered promiscuous mode
[ 1138.292186][T14807] device hsr_slave_1 entered promiscuous mode
[ 1138.333375][T14807] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1138.359792][T14807] Cannot create hsr debugfs directory
[ 1138.836239][   T26] audit: type=1326 audit(1138.846:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec439c799 code=0x7ffc0000
[ 1140.286638][ T4283] Bluetooth: hci1: command 0x0419 tx timeout
[ 1140.410038][   T26] audit: type=1326 audit(1138.916:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec439c799 code=0x7ffc0000
[ 1140.432946][   T26] audit: type=1326 audit(1138.946:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec439c799 code=0x7ffc0000
[ 1140.441962][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3090'.
[ 1140.474435][T14936] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1140.482133][   T26] audit: type=1326 audit(1138.946:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec439c799 code=0x7ffc0000
[ 1140.629537][   T26] audit: type=1326 audit(1138.946:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f3ec439c799 code=0x7ffc0000
[ 1140.930457][   T26] audit: type=1326 audit(1138.946:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec439c799 code=0x7ffc0000
[ 1141.071469][T14936] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1141.183698][   T26] audit: type=1326 audit(1138.946:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec439c799 code=0x7ffc0000
[ 1141.353112][   T26] audit: type=1326 audit(1138.946:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3ec439c799 code=0x7ffc0000
[ 1141.459030][ T5977] device hsr_slave_0 left promiscuous mode
[ 1141.465079][   T26] audit: type=1326 audit(1138.946:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3ec439c799 code=0x7ffc0000
[ 1141.497827][ T5977] device hsr_slave_1 left promiscuous mode
[ 1141.534594][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1141.559322][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1141.590559][ T5977] device bridge_slave_1 left promiscuous mode
[ 1141.629008][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1141.644852][ T5977] device bridge_slave_0 left promiscuous mode
[ 1141.661499][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1141.836319][ T5977] device veth1_macvtap left promiscuous mode
[ 1141.842412][ T5977] device veth0_macvtap left promiscuous mode
[ 1141.899372][ T5977] device veth1_vlan left promiscuous mode
[ 1141.936925][ T5977] device veth0_vlan left promiscuous mode
[ 1145.085038][ T5977] team0 (unregistering): Port device team_slave_1 removed
[ 1145.188429][ T5977] team0 (unregistering): Port device team_slave_0 removed
[ 1145.262228][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1145.356520][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1146.540446][ T5977] bond0 (unregistering): Released all slaves
[ 1146.807901][T14983] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3103'.
[ 1146.888356][T15022] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3114'.
[ 1147.036040][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3113'.
[ 1148.241753][T14807] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1148.259219][T14807] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1148.285207][T14807] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1148.297896][T14807] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1148.552042][T14807] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1148.586757][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1148.603083][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1148.640576][T14807] 8021q: adding VLAN 0 to HW filter on device team0
[ 1148.673853][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1148.692755][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1148.714187][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1148.721363][ T5829] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1148.749579][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1148.840273][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1148.936068][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1148.983234][ T4642] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1148.990488][ T4642] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1149.041576][T15060] ------------[ cut here ]------------
[ 1149.047240][T15060] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:854 (size 16)
[ 1149.084748][T15060] WARNING: CPU: 0 PID: 15060 at net/sched/cls_u32.c:854 u32_change+0x1dfc/0x27e0
[ 1149.094312][T15060] Modules linked in:
[ 1149.098234][T15060] CPU: 0 PID: 15060 Comm: syz.2.3122 Not tainted syzkaller #0
[ 1149.105803][T15060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1149.116491][T15060] RIP: 0010:u32_change+0x1dfc/0x27e0
[ 1149.121823][T15060] Code: f9 eb 59 e8 76 fc 1e f9 c6 05 5b fb a7 05 01 b9 10 00 00 00 48 c7 c7 a0 90 8e 8b 4c 89 fe 48 c7 c2 20 91 8e 8b e8 64 6d ea f8 <0f> 0b e9 ff ee ff ff e8 48 fc 1e f9 eb 24 e8 41 fc 1e f9 c6 05 d6
[ 1149.141634][T15060] RSP: 0018:ffffc90003b1ee40 EFLAGS: 00010246
[ 1149.147796][T15060] RAX: fd2744a692fa4800 RBX: ffff8880249b84e0 RCX: 0000000000080000
[ 1149.155848][T15060] RDX: ffffc9001cc00000 RSI: 0000000000005c75 RDI: 0000000000005c76
[ 1149.163849][T15060] RBP: ffffc90003b1eff8 R08: ffffc90003b1eac7 R09: 1ffff92000763d58
[ 1149.171927][T15060] R10: dffffc0000000000 R11: fffff52000763d59 R12: 0000000000000000
[ 1149.180003][T15060] R13: dffffc0000000000 R14: ffff88807d158e00 R15: 0000000000000020
[ 1149.188056][T15060] FS:  00007f3ec52b76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1149.197081][T15060] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1149.203694][T15060] CR2: 00007f98faf7ee9c CR3: 0000000030bee000 CR4: 00000000003506f0
[ 1149.211758][T15060] Call Trace:
[ 1149.215107][T15060]  <TASK>
[ 1149.218077][T15060]  ? u32_get+0x370/0x370
[ 1149.222367][T15060]  tc_new_tfilter+0xf29/0x1770
[ 1149.227287][T15060]  ? kmem_cache_free+0xf7/0x290
[ 1149.232224][T15060]  ? nlmon_xmit+0xac/0xf0
[ 1149.236693][T15060]  ? dev_hard_start_xmit+0x262/0x870
[ 1149.242076][T15060]  ? tcf_proto_signal_destroying+0x240/0x240
[ 1149.248150][T15060]  ? rcu_read_unlock+0x8c/0xa0
[ 1149.252989][T15060]  ? tcf_proto_signal_destroying+0x240/0x240
[ 1149.259049][T15060]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1149.264238][T15060]  ? tcf_proto_signal_destroying+0x240/0x240
[ 1149.270257][T15060]  rtnetlink_rcv_msg+0x8cc/0xfc0
[ 1149.275280][T15060]  ? rtnetlink_bind+0x80/0x80
[ 1149.279982][T15060]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1149.285505][T15060]  ? lockdep_hardirqs_on+0x94/0x140
[ 1149.290794][T15060]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1149.296239][T15060]  ? _local_bh_enable+0xa0/0xa0
[ 1149.301117][T15060]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1149.306308][T15060]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1149.311445][T15060]  ? __dev_queue_xmit+0x1cd2/0x37c0
[ 1149.316772][T15060]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1149.321960][T15060]  ? ref_tracker_free+0x68c/0x840
[ 1149.327180][T15060]  ? __copy_skb_header+0x3ba/0x4f0
[ 1149.332421][T15060]  ? refcount_inc+0x70/0x70
[ 1149.337015][T15060]  ? memcpy+0x3c/0x60
[ 1149.341112][T15060]  ? __copy_skb_header+0x3ba/0x4f0
[ 1149.346348][T15060]  ? __skb_clone+0x480/0x790
[ 1149.350990][T15060]  netlink_rcv_skb+0x1fb/0x450
[ 1149.355839][T15060]  ? rtnetlink_bind+0x80/0x80
[ 1149.360555][T15060]  ? netlink_ack+0x1170/0x1170
[ 1149.365414][T15060]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1149.370662][T15060]  netlink_unicast+0x74d/0x8d0
[ 1149.375522][T15060]  netlink_sendmsg+0x8ad/0xbd0
[ 1149.380341][T15060]  ? netlink_getsockopt+0x550/0x550
[ 1149.385787][T15060]  ? aa_sock_msg_perm+0x94/0x150
[ 1149.390893][T15060]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1149.396364][T15060]  ? security_socket_sendmsg+0x7c/0xa0
[ 1149.401966][T15060]  ? netlink_getsockopt+0x550/0x550
[ 1149.407316][T15060]  ____sys_sendmsg+0x5be/0x970
[ 1149.412212][T15060]  ? __sys_sendmsg_sock+0x30/0x30
[ 1149.417397][T15060]  ? __import_iovec+0x315/0x500
[ 1149.422360][T15060]  ? import_iovec+0x6f/0xa0
[ 1149.427014][T15060]  ___sys_sendmsg+0x2a2/0x360
[ 1149.431751][T15060]  ? __sched_text_start+0x8/0x8
[ 1149.436869][T15060]  ? __sys_sendmsg+0x290/0x290
[ 1149.441821][T15060]  __sys_sendmmsg+0x2c3/0x510
[ 1149.446699][T15060]  ? __ia32_sys_sendmsg+0x80/0x80
[ 1149.451821][T15060]  ? __ia32_sys_get_robust_list+0x100/0x100
[ 1149.457965][T15060]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1149.464129][T15060]  ? lock_chain_count+0x20/0x20
[ 1149.469073][T15060]  __x64_sys_sendmmsg+0x9c/0xb0
[ 1149.474049][T15060]  do_syscall_64+0x4c/0xa0
[ 1149.478590][T15060]  ? clear_bhb_loop+0x60/0xb0
[ 1149.483330][T15060]  ? clear_bhb_loop+0x60/0xb0
[ 1149.488155][T15060]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1149.494165][T15060] RIP: 0033:0x7f3ec439c799
[ 1149.498669][T15060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1149.518477][T15060] RSP: 002b:00007f3ec52b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1149.527066][T15060] RAX: ffffffffffffffda RBX: 00007f3ec4615fa0 RCX: 00007f3ec439c799
[ 1149.535237][T15060] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005
[ 1149.543281][T15060] RBP: 00007f3ec4432c99 R08: 0000000000000000 R09: 0000000000000000
[ 1149.551388][T15060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1149.559481][T15060] R13: 00007f3ec4616038 R14: 00007f3ec4615fa0 R15: 00007ffc89d08a88
[ 1149.567623][T15060]  </TASK>
[ 1149.570696][T15060] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1149.577984][T15060] CPU: 0 PID: 15060 Comm: syz.2.3122 Not tainted syzkaller #0
[ 1149.585444][T15060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1149.595502][T15060] Call Trace:
[ 1149.598785][T15060]  <TASK>
[ 1149.601716][T15060]  dump_stack_lvl+0x188/0x24e
[ 1149.606410][T15060]  ? memcpy+0x3c/0x60
[ 1149.610403][T15060]  ? show_regs_print_info+0x12/0x12
[ 1149.615615][T15060]  ? load_image+0x400/0x400
[ 1149.620173][T15060]  panic+0x2e5/0x730
[ 1149.624081][T15060]  ? bpf_jit_dump+0xd0/0xd0
[ 1149.628603][T15060]  __warn+0x2f8/0x4f0
[ 1149.632590][T15060]  ? u32_change+0x1dfc/0x27e0
[ 1149.637294][T15060]  ? u32_change+0x1dfc/0x27e0
[ 1149.641998][T15060]  report_bug+0x2ba/0x4f0
[ 1149.646442][T15060]  ? u32_change+0x1dfc/0x27e0
[ 1149.651139][T15060]  handle_bug+0x3a/0x70
[ 1149.655327][T15060]  exc_invalid_op+0x16/0x40
[ 1149.659845][T15060]  asm_exc_invalid_op+0x16/0x20
[ 1149.664711][T15060] RIP: 0010:u32_change+0x1dfc/0x27e0
[ 1149.670012][T15060] Code: f9 eb 59 e8 76 fc 1e f9 c6 05 5b fb a7 05 01 b9 10 00 00 00 48 c7 c7 a0 90 8e 8b 4c 89 fe 48 c7 c2 20 91 8e 8b e8 64 6d ea f8 <0f> 0b e9 ff ee ff ff e8 48 fc 1e f9 eb 24 e8 41 fc 1e f9 c6 05 d6
[ 1149.689635][T15060] RSP: 0018:ffffc90003b1ee40 EFLAGS: 00010246
[ 1149.695716][T15060] RAX: fd2744a692fa4800 RBX: ffff8880249b84e0 RCX: 0000000000080000
[ 1149.703702][T15060] RDX: ffffc9001cc00000 RSI: 0000000000005c75 RDI: 0000000000005c76
[ 1149.711691][T15060] RBP: ffffc90003b1eff8 R08: ffffc90003b1eac7 R09: 1ffff92000763d58
[ 1149.719670][T15060] R10: dffffc0000000000 R11: fffff52000763d59 R12: 0000000000000000
[ 1149.727651][T15060] R13: dffffc0000000000 R14: ffff88807d158e00 R15: 0000000000000020
[ 1149.735666][T15060]  ? u32_get+0x370/0x370
[ 1149.739945][T15060]  tc_new_tfilter+0xf29/0x1770
[ 1149.744720][T15060]  ? kmem_cache_free+0xf7/0x290
[ 1149.749577][T15060]  ? nlmon_xmit+0xac/0xf0
[ 1149.753920][T15060]  ? dev_hard_start_xmit+0x262/0x870
[ 1149.759231][T15060]  ? tcf_proto_signal_destroying+0x240/0x240
[ 1149.765243][T15060]  ? rcu_read_unlock+0x8c/0xa0
[ 1149.770031][T15060]  ? tcf_proto_signal_destroying+0x240/0x240
[ 1149.776023][T15060]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1149.781148][T15060]  ? tcf_proto_signal_destroying+0x240/0x240
[ 1149.787139][T15060]  rtnetlink_rcv_msg+0x8cc/0xfc0
[ 1149.792100][T15060]  ? rtnetlink_bind+0x80/0x80
[ 1149.796790][T15060]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1149.802171][T15060]  ? lockdep_hardirqs_on+0x94/0x140
[ 1149.807381][T15060]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1149.812760][T15060]  ? _local_bh_enable+0xa0/0xa0
[ 1149.817621][T15060]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1149.822739][T15060]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1149.827860][T15060]  ? __dev_queue_xmit+0x1cd2/0x37c0
[ 1149.833085][T15060]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1149.838216][T15060]  ? ref_tracker_free+0x68c/0x840
[ 1149.843258][T15060]  ? __copy_skb_header+0x3ba/0x4f0
[ 1149.848385][T15060]  ? refcount_inc+0x70/0x70
[ 1149.852899][T15060]  ? memcpy+0x3c/0x60
[ 1149.856893][T15060]  ? __copy_skb_header+0x3ba/0x4f0
[ 1149.862018][T15060]  ? __skb_clone+0x480/0x790
[ 1149.866625][T15060]  netlink_rcv_skb+0x1fb/0x450
[ 1149.871404][T15060]  ? rtnetlink_bind+0x80/0x80
[ 1149.876102][T15060]  ? netlink_ack+0x1170/0x1170
[ 1149.880895][T15060]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1149.886117][T15060]  netlink_unicast+0x74d/0x8d0
[ 1149.890911][T15060]  netlink_sendmsg+0x8ad/0xbd0
[ 1149.895696][T15060]  ? netlink_getsockopt+0x550/0x550
[ 1149.900913][T15060]  ? aa_sock_msg_perm+0x94/0x150
[ 1149.905861][T15060]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1149.911160][T15060]  ? security_socket_sendmsg+0x7c/0xa0
[ 1149.916636][T15060]  ? netlink_getsockopt+0x550/0x550
[ 1149.921848][T15060]  ____sys_sendmsg+0x5be/0x970
[ 1149.926641][T15060]  ? __sys_sendmsg_sock+0x30/0x30
[ 1149.931676][T15060]  ? __import_iovec+0x315/0x500
[ 1149.936538][T15060]  ? import_iovec+0x6f/0xa0
[ 1149.941064][T15060]  ___sys_sendmsg+0x2a2/0x360
[ 1149.945758][T15060]  ? __sched_text_start+0x8/0x8
[ 1149.950626][T15060]  ? __sys_sendmsg+0x290/0x290
[ 1149.955446][T15060]  __sys_sendmmsg+0x2c3/0x510
[ 1149.960145][T15060]  ? __ia32_sys_sendmsg+0x80/0x80
[ 1149.965193][T15060]  ? __ia32_sys_get_robust_list+0x100/0x100
[ 1149.971109][T15060]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1149.977106][T15060]  ? lock_chain_count+0x20/0x20
[ 1149.981976][T15060]  __x64_sys_sendmmsg+0x9c/0xb0
[ 1149.986844][T15060]  do_syscall_64+0x4c/0xa0
[ 1149.991281][T15060]  ? clear_bhb_loop+0x60/0xb0
[ 1149.995967][T15060]  ? clear_bhb_loop+0x60/0xb0
[ 1150.000655][T15060]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1150.006566][T15060] RIP: 0033:0x7f3ec439c799
[ 1150.010998][T15060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1150.030617][T15060] RSP: 002b:00007f3ec52b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1150.039043][T15060] RAX: ffffffffffffffda RBX: 00007f3ec4615fa0 RCX: 00007f3ec439c799
[ 1150.047020][T15060] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005
[ 1150.055001][T15060] RBP: 00007f3ec4432c99 R08: 0000000000000000 R09: 0000000000000000
[ 1150.062975][T15060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1150.070958][T15060] R13: 00007f3ec4616038 R14: 00007f3ec4615fa0 R15: 00007ffc89d08a88
[ 1150.078956][T15060]  </TASK>
[ 1150.082396][T15060] Kernel Offset: disabled
[ 1150.086712][T15060] Rebooting in 86400 seconds..