last executing test programs:

13.707633439s ago: executing program 4 (id=733):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000020}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000680)={{0x0, 0x0, 0x80}, "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", "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"})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
inotify_init1(0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000040)=0xfffe, 0x4)
bind$inet(r4, &(0x7f0000003900)={0x2, 0x4e24, @remote}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
sendto$inet(r4, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000240)={0x0, 0x0, '\x00', 0x0, 0x0})
writev(r5, &(0x7f0000000300)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)

12.986091591s ago: executing program 1 (id=734):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000008000080001b0000850000007500000046000000fcffffff9500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00x'], 0x28}}, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x80000, 0x4)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000380)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x12}]}, 0x38}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000000)={{{@in=@dev, @in=@empty}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = dup(r4)
ioctl$PTP_EXTTS_REQUEST2(r5, 0x40383d0c, &(0x7f0000000040)={0x0, 0xd})
accept$inet6(r5, 0x0, &(0x7f0000000180))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f00000001c0)=0xc)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, <r7=>0x0}, &(0x7f0000000300)=0x8)
setreuid(0x0, r7)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@updsa={0x138, 0x1a, 0x4, 0x0, 0x0, {{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r10 = openat$cgroup_subtree(r9, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r11, 0x69e74000)

12.614393783s ago: executing program 0 (id=737):
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x40)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r3)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r7, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"})
vmsplice(r1, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000340)}], 0x2, 0x0)
socket$isdn(0x22, 0x2, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

12.588646375s ago: executing program 1 (id=738):
mount$tmpfs(0x0, 0x0, 0x0, 0x30820, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./bus/file0\x00')
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04ff0f00"], 0x9)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet(0x2, 0x3, 0x6)
setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendto$packet(r6, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000005000000000000008100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100003001c154a3c4c3fdffffffe2357f87d6ff16da31d0a64087d20a4b5e7f27a2f4c79dcc8049fba97c27751b4bc4d4c0e9951bcb", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x28b0, 0x28, &(0x7f0000000040)=""/40, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe327, r1, 0x2, &(0x7f00000004c0)=[r1], &(0x7f0000000500)=[{0x2, 0x5, 0x10, 0x6}, {0x3, 0x5, 0xb}], 0x10, 0x80000000}, 0x90)

10.07015362s ago: executing program 3 (id=740):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffff000)
socket(0x1, 0x3, 0x0)
pipe(&(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f00000001c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0'}, 0xb)
write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x4ffe2, 0x0)

10.013775845s ago: executing program 4 (id=741):
r0 = socket(0x10, 0x80003, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRES16, @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d0300000800"], 0x40}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'veth0_virt_wifi\x00'})
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3ef6a997fb2963b8909e7a8041f8c84afda621b1878024d8e22271af9f", @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d61637365630000040002800c001a800800028004000180"], 0x40}}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xe0, &(0x7f00000000c0)=""/224}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
r9 = socket$inet(0x2, 0x3, 0x800000000000a)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x210)
r10 = openat$cgroup_int(r7, &(0x7f0000000200)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_int(r10, &(0x7f0000000240)=0x800, 0x12)
r11 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r11, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r12 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r13 = socket$inet6(0xa, 0x2, 0x8)
setsockopt$inet6_int(r13, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)

9.893563015s ago: executing program 1 (id=742):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x18}]}, 0x24}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f065584d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x48)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020025797a30000000000800410072786500140033"], 0x38}}, 0x0)
close(0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_query, @initr0, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81}]}, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$nl_route_sched(r4, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000840)=@newtaction={0xe68, 0x30, 0x1, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x10}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r9, &(0x7f00000000c0)={0x24, @long}, 0x8)
sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x8001}, 0x240060c0)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000180)={0x8214, 0x3, 0x2, 0x4, 0x45})
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007e40), 0x4000000000000aa, 0x810)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

9.760338266s ago: executing program 2 (id=743):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r5)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
r7 = inotify_init1(0x0)
fcntl$setown(r7, 0x8, 0xffffffffffffffff)
fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, <r8=>0x0})
r9 = syz_open_procfs(r8, &(0x7f0000000040)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r9, 0x6612, 0x0)
mkdir(0x0, 0x0)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x5e}, 0x20)
r11 = openat$cgroup_procs(r10, 0x0, 0x2, 0x0)
write$cgroup_pid(r11, &(0x7f0000000040), 0xfdef)
ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000480)='ip6gre0\x00')

9.744399648s ago: executing program 1 (id=744):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
capset(&(0x7f0000000080), 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0)
r4 = syz_open_procfs(0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0)
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0)
syz_clone(0x10000291, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x22000000, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000001040), &(0x7f0000001080)="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")
socket$nl_generic(0x10, 0x3, 0x10)

9.71482491s ago: executing program 0 (id=745):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x40000000015, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, 0x0)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$usbfs(0x0, 0x74, 0x101301)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b63, 0x4)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmmsg$inet(r2, &(0x7f00000028c0)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002840)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}}], 0x1, 0x0)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x5}, 0x20)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x41014, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580), 0x70}}, 0x0)
shutdown(r0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7.829758671s ago: executing program 1 (id=746):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'bridge0\x00'})
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='bridge0\x00')
syz_genetlink_get_family_id$nl80211(0x0, r3)
sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000d40)=ANY=[@ANYRESDEC=r2, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
sendmsg$nl_route(r4, 0x0, 0x0)
r5 = epoll_create1(0x0)
r6 = socket(0x2, 0x80802, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x2001})
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)
ioctl$TIOCL_SCROLLCONSOLE(r8, 0x4b3a, 0x0)
epoll_pwait(r7, &(0x7f0000000040)=[{}], 0x1, 0x5b1, 0x0, 0x0)
close(r7)
shutdown(r6, 0x0)
close(r5)

7.827273101s ago: executing program 2 (id=747):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x5)
ptrace$getregset(0x4204, r0, 0x6, &(0x7f00000002c0)={&(0x7f0000000340)=""/162, 0xa2})
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_PEC(r3, 0x708, 0x40)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x4, &(0x7f0000000080)={0x0, "6a4da751434fd7f4a4331cbdbfe693a5b8bcdf3aa54bce5d926e9408d52773fa7f"}})
memfd_create(0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000340)='d', 0x1}, {&(0x7f00000005c0)="c2", 0x1}], 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r5 = getpid()
process_vm_readv(r5, 0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000008480)=""/95, 0x5f}, {}], 0x2, 0x0)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xd0, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000001780)={0x0, 0x1, 0x20, 0x16, 0x200, &(0x7f0000000880)="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"})

7.819008292s ago: executing program 4 (id=748):
process_vm_writev(0x0, &(0x7f00000002c0)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffd, 0x4a000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x400000, 0x5, 0x800}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, r2})
r3 = inotify_init1(0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, <r4=>0x0})
prctl$PR_SET_PTRACER(0x59616d61, r4)
r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$NBD_DO_IT(r5, 0xab03)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
process_vm_readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/237, 0xed}], 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/177, 0xb1}], 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

7.685249954s ago: executing program 3 (id=749):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffff000)
socket(0x1, 0x3, 0x0)
pipe(&(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f00000001c0), 0x1)
sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_script(r8, &(0x7f0000000080), 0x4)
write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0'}, 0xb)
write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x4ffe2, 0x0)

5.182128508s ago: executing program 2 (id=750):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@resgid}, {@noload}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000001540)="$eJzs3MtvG8UfAPDvrvPoO/n1Vx59QAMFEVFImrRAD0gIBFIvSEhwgGNIQ1XqtqgJEq0q2iJUjoi/ADgi8RdwggsCTiCucEdIFeqlhQMyWns3cWLXuHYdh/rzkdaZ2dfM7OxkZ3e8DmBgTWQfScS2iPglIsZq0dUrTNT+3Lx+cf7P6xfnk6hUXv1jtLrejesX54tVi+225pHJNCL9MIm9TdJdPH/h1Fy5vHAuj08vnX5nevH8hSdPnp47sXBi4czs0aNHDs888/TsU3eknFm5bux5/+y+3cfe+OTl+Uq8+f2XWX635cvry1Ez3nWaEzERlUqlkq6aO1L9fLTrvW8s2yPiSh5OhvqcGdpWioisuoar7X8sSrFSeWPx0gd9zRzQU9n1abRhbin/O5RkyzfVrQvcTRLtGgZUccXP7n+Lab36HhvBteezz4Vq+W/mU23JUGT37cl47Y691KP0t0XE65f/+jSboulzCACAO+vrrP/zRLP+Xxr31q23Ix9DGY+IgxGxMyL+HxG7IuKeiOq690XE/beZfnX86cpKvLH/89PmjgvXhqz/92w+trW6/7c8ajNeymPbq+UfTt46WV44lB+TyRgezeIzLdL45sWfP77Vsom6/l82ZekXfcE8H78PrXlAd3xuaa6bMte7diViz1Cz8ifLIwFJROyOiD0d7D87Zicf/2JfFt6xtXH5v5e/lcsd5Gi1yucRj9Xq/3KsKX8hqQ2R3Gp8cnpTlBcOTRdnRaMffrz6Sn18uC7cXfm7l9X/lqbnf17+ohkU47WLbe54ZCV49deP8n02NuVOz/+R5LVVybw3t7R0biZiZCQa58+ubFvEi/Wz8k8eiLiaDwTXt/+dEX9/lm+3NyKyk/iBiHgwIvbneX8oIh6OiAMtDsV3LzzyduuD1d/6P96q/iPGk/rx+g4CpVPfflXsbLkq838u7dX/kWpoMp/Tzv+/djN4J44hAAAAbHRpdQw6SaeWw2k6NVX7Dv+u2JKWzy4uHZyId88cr41Vj8dwWjzpGqt7HjqTPxsu4rNr4ocj4n/Vbxptrsan5s+Wt/e78DDgtt6i/Wd+69WXXoCN47be10p6lw9g/XlfEwZX2+1/uLf5ANaf6z8MLu0fBlez9n8p4mYfsgKss9u6/j/Xu3wA669V+/fID+5u7v9hcGn/MJAaX4kvfqOhkzf9VwI7j3W1+QAFSj3ac9T/aEcPApH2/dB1Hkg3Qjb254HRiGh3q0s9rdO15w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/3z8BAAD//yxO2No=")
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
fsopen(0x0, 0x0)
getcwd(0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffefffaaaaaaaaaaaa88a80000810000008100600020000000000000000000000000000000000000000000ff020000000000000000000000000001"], 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020"])
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)={'0000000000000000000000000000000', 0x30}, 0x20, 0x1)
getdents64(r0, 0x0, 0x0)

5.111264363s ago: executing program 0 (id=751):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000120000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"5800010000080200", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r5, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)
shutdown(r4, 0x0)

3.907188936s ago: executing program 0 (id=752):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d}, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
acct(&(0x7f00000001c0)='./file0\x00')
acct(0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x1, 0x6, 0x2c, 0x41, 0x0, 0x0, 0x4000402}, 0x0)
listen(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x90)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffff", 0x42}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bind$inet(r1, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

3.822943734s ago: executing program 2 (id=753):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x40000000015, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, 0x0)
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b63, 0x4)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmmsg$inet(r2, &(0x7f00000028c0)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002840)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}}], 0x1, 0x0)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x5}, 0x20)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x41014, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580), 0x70}}, 0x0)
shutdown(r0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.766846399s ago: executing program 3 (id=754):
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000080)="d3967696f869cc53bf48accfe191562cdbae50c2d03234dc7921788794df9996bdc7f99142aeedb0c79c0ea7141aaa270d7fca7479"}}, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x0, 0x3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, <r8=>0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[<r10=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r10, r8, r9})
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB='security'], &(0x7f0000000100)=0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@rand_addr=' \x01\x00', @in6=@remote}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, @in6=@dev, @in=@remote}]}]}, 0xec}}, 0x0)

3.708541553s ago: executing program 4 (id=755):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000000103000000000000000000020000010c000d8008000200e000000134001880080003400001300008000340000000070800034000000006080002400000000508000240000000000800014000000fff08001a4000000005980002802c0001801400030000000000000000000000ffffac1414aa14000c00fc0100000000000000000000000000001400018008000100ac14142708000200ac1e2a01060003"], 0x150}}, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00')
lseek(r3, 0x7, 0x0)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0100001200f3"], 0x14c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{}, {}, @broadcast, @device_b}, 0x0, 0x45, @default, @val, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000080), 0x4)
setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000040), 0x4)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
r10 = msgget$private(0x0, 0x0)
msgsnd(r10, &(0x7f0000000000)=ANY=[@ANYRES32], 0xb, 0x0)
msgrcv(r10, 0x0, 0x0, 0x3, 0x4800)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r6, 0x5101)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0x0, 0x0, 0x0, [0x0, 0x9]})
listen(r7, 0x0)

2.597073108s ago: executing program 2 (id=756):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
close(r0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@cgroup, 0xffffffffffffffff, 0x2b, 0x16}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10)
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x10000)
sendfile(r2, r1, 0x0, 0xffefffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000001480)={'syztnl0\x00', 0x0, 0x40, 0x10, 0x0, 0x0, {{0x3c, 0x4, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private=0xa010100, {[@end, @cipso={0x86, 0x26, 0x3, [{0x1, 0x2}, {0x0, 0x8, "3a74568474d6"}, {0x6, 0x10, "9ffd40296bf62cb3f6b5fcee3809"}, {0x5, 0x6, "ed0a7d9e"}]}, @timestamp_prespec={0x44, 0x14, 0x5f, 0x3, 0x0, [{@local, 0x7ff}, {@loopback, 0x2}]}, @timestamp={0x44, 0x28, 0x34, 0x0, 0x9, [0x1, 0xff, 0xfff, 0x7ff5, 0x2, 0x40, 0x5, 0x3, 0x14000]}, @timestamp_addr={0x44, 0x14, 0xec, 0x1, 0x0, [{@multicast1, 0x8}, {@local, 0xea}]}, @cipso={0x86, 0x60, 0x70685e1ab3239fae, [{0x5, 0x4, "bff8"}, {0x7, 0xe, "a44e681292654ad8191644be"}, {0x6, 0x11, "633535dd48834902a8c0535d28e4b0"}, {0x0, 0xe, "4f653c5eb2456d81f6ca88ce"}, {0x0, 0x6, "46e7c6f2"}, {0x7, 0x4, "d978"}, {0x5, 0xe, "27aafaa05129ad6bae41ed7a"}, {0x5, 0x9, "52d1267e74d14d"}, {0x5, 0x8, "2ea9e4524374"}]}, @generic={0x4a, 0x4, "8423"}]}}}}})
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x14, r4, 0x100, 0x70bd25, 0x25dfdbff}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000aed0000"], &(0x7f0000000400)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000700)='cpuset.memory_spread_page\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f00000003c0)=0x1ff, 0x12)
mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff)

2.595249678s ago: executing program 3 (id=757):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
capset(&(0x7f0000000080), 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0)
r4 = syz_open_procfs(0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0)
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0)
syz_clone(0x10000291, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x22000000, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000001040), &(0x7f0000001080)="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")
socket$nl_generic(0x10, 0x3, 0x10)

1.793019357s ago: executing program 0 (id=758):
r0 = socket(0x10, 0x80003, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRES16, @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d0300000800"], 0x40}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'veth0_virt_wifi\x00'})
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3ef6a997fb2963b8909e7a8041f8c84afda621b1878024d8e22271af9f", @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d61637365630000040002800c001a800800028004000180"], 0x40}}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xe0, &(0x7f00000000c0)=""/224}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
r9 = socket$inet(0x2, 0x3, 0x800000000000a)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000000000000004ff8d978fa7ef9850000000000e5ffffffffffffff000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000e2d0be86000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000799e3b3c00000001000000000000000000ffffffff01000000110000000000000000000300736630000011000000000008000064756d6d793000000000000000000000010000000000000000000000000000006c6f00000000200000000000f8fffffffeffffffffff000000000000ffffffffffff000000000000000070000000a8000000d8000000646e6174000000000000200000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa00000100000000000000726564697265637400000000f6f678c1bcc95568ee000000000000000000000008000000000000000008000000000000"]}, 0x210)
openat$cgroup_int(r7, &(0x7f0000000200)='cpu.weight.nice\x00', 0x2, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r10 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r10, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r11 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r12 = socket$inet6(0xa, 0x2, 0x8)
setsockopt$inet6_int(r12, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)

1.702186635s ago: executing program 4 (id=759):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffff000)
socket(0x1, 0x3, 0x0)
pipe(&(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f00000001c0), 0x1)
sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_script(r8, &(0x7f0000000080), 0x4)
write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0'}, 0xb)
write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x4ffe2, 0x0)

1.665372758s ago: executing program 3 (id=760):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000180))
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
prlimit64(0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r6, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000540)=ANY=[], 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7ffff000}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x3}, {0x6}]}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="9d", 0x1}], 0x1}, 0x20000010)

611.788987ms ago: executing program 3 (id=761):
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x10)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
faccessat(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a5000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='percpu_free_percpu\x00', r6}, 0x10)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x41, 0x3, 0x270, 0xf8, 0x19, 0x0, 0x0, 0x0, 0x1d8, 0x1f0, 0x1f0, 0x1d8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'dummy0\x00', 'wg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@ecn={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0)

206.112552ms ago: executing program 0 (id=762):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000080)=0x101)
unlink(&(0x7f0000000200)='./file0\x00')
ftruncate(r1, 0x402)
ftruncate(r1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap(&(0x7f00003b1000/0xe000)=nil, 0xe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mremap(&(0x7f0000c41000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f00004c3000/0x3000)=nil)
socket$kcm(0x29, 0x2, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'], 0x1, 0x5ca, &(0x7f00000006c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0)
symlinkat(&(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file3\x00', 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x60942, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}})
r4 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
setresuid(0xee01, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x801c581f, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0x2f)

102.048571ms ago: executing program 2 (id=763):
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x40)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r3)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r7, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"})
vmsplice(r1, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000340)}], 0x2, 0x0)
socket$isdn(0x22, 0x2, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

26.537637ms ago: executing program 4 (id=764):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/user\x00')
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6_vti0\x00', <r1=>0x0, 0x4, 0x21, 0x0, 0x7, 0x70, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x10, 0xf48, 0x7, 0x9}})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '+:^.}@^],'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '9-}{%,!+}'}, {0x20, 'macvlan0\x00'}], 0xa, "29e16ef85f2f0ccd954523db90471dbbccb9c5f1dce31855b7d8b9ee78904bf0b47845d996655f7ba68d3f48"}, 0x69)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x10}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100), &(0x7f0000000080)=@tcp=r2}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000280), &(0x7f00000002c0)=""/60}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ff00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000f000000b70300000000000085000000830000ec0c61be000000800055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xf9, &(0x7f00000003c0)=""/249}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x14, 0x7, 0x9, 0x7fff, 0x1258, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0), 0x4)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r7, 0xfffffffd, 0x6}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000800000500000000130e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018670000030000000000000008000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0xa9a, 0x8a, &(0x7f0000000440)=""/138, 0x41100, 0x20, '\x00', r1, 0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x5, 0x80000000, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000008c0)=[r3, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff, r8], &(0x7f0000000900)=[{0x3, 0x3, 0x3}, {0x5, 0x5, 0x5, 0x8}, {0x4, 0x5, 0x1, 0x2}], 0x10, 0x8}, 0x90)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r10=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x40, 0x0, r6, 0x101, '\x00', r10, r6, 0x1, 0x5, 0x3}, 0x48)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', <r12=>0x0})
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0xfffffffffffffe83, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x115, 0x819ad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0)

0s ago: executing program 1 (id=765):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffff000)
socket(0x1, 0x3, 0x0)
pipe(&(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_script(r8, &(0x7f0000000080), 0x4)
write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0'}, 0xb)
write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x4ffe2, 0x0)

kernel console output (not intermixed with test programs):

0_macvtap: link becomes ready
[  262.775530][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  262.845525][ T6437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.469'.
[  262.972486][ T3623] Bluetooth: hci1: command 0x1009 tx timeout
[  263.204479][ T6323] device veth1_macvtap entered promiscuous mode
[  263.362215][ T6436] loop2: detected capacity change from 0 to 1024
[  263.444513][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  263.506951][ T6436] netlink: 'syz.2.470': attribute type 10 has an invalid length.
[  263.551502][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.571636][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.588493][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.606890][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.617298][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.629943][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.640483][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.655322][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.665476][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.676088][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.686303][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.696772][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.708526][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.712617][ T3781] hfsplus: b-tree write err: -5, ino 4
[  263.746059][ T3781] hfsplus: bad catalog file entry
[  263.904907][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.919632][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.929557][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.941610][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.951877][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.084663][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.218105][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.327561][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.431018][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.543152][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.646595][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.674252][ T6454] loop0: detected capacity change from 0 to 128
[  264.687873][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.699707][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.708109][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  264.717997][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  264.728146][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  264.750425][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  264.963695][ T6323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.975698][ T6323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.070787][ T6323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.124796][ T6323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.543791][ T6465] loop0: detected capacity change from 0 to 1024
[  266.616599][  T604] device hsr_slave_0 left promiscuous mode
[  266.691110][  T604] device hsr_slave_1 left promiscuous mode
[  266.699662][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  266.708923][  T604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  266.717424][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  266.755947][  T604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  266.815629][  T604] device bridge_slave_1 left promiscuous mode
[  266.827954][  T604] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.873428][  T604] device bridge_slave_0 left promiscuous mode
[  266.906949][  T604] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.934863][  T604] device veth1_macvtap left promiscuous mode
[  266.955313][  T604] device veth0_macvtap left promiscuous mode
[  266.972146][  T604] device veth1_vlan left promiscuous mode
[  266.980380][  T604] device veth0_vlan left promiscuous mode
[  267.550121][ T3976] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  267.598262][  T604] team0 (unregistering): Port device team_slave_1 removed
[  267.615837][  T604] team0 (unregistering): Port device team_slave_0 removed
[  267.627485][  T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  267.795284][  T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  268.389119][  T604] bond0 (unregistering): Released all slaves
[  268.421430][ T6482] tipc: Failed to remove unknown binding: 66,1,1/0:3648776261/3648776263
[  268.440800][ T6482] tipc: Failed to remove unknown binding: 66,1,1/0:3648776261/3648776263
[  268.561123][ T3716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.576245][ T3716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.636326][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  268.703229][ T3781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.766850][ T3781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.820384][ T3976] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0
[  268.829441][ T3976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.840471][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  268.877435][ T6472] chnl_net:caif_netlink_parms(): no params data found
[  269.044175][ T3674] Bluetooth: hci1: command 0x0409 tx timeout
[  269.062497][ T3976] usb 3-1: Product: syz
[  269.069870][ T3976] usb 3-1: Manufacturer: syz
[  269.076429][ T3976] usb 3-1: SerialNumber: syz
[  269.097483][ T6472] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.114781][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.124512][ T6472] device bridge_slave_0 entered promiscuous mode
[  269.126463][ T3976] usb 3-1: config 0 descriptor??
[  269.134162][ T6472] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.143574][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.152179][ T6472] device bridge_slave_1 entered promiscuous mode
[  269.251924][ T3976] ums_eneub6250 3-1:0.0: USB Mass Storage device detected
[  269.283067][ T6472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.357190][ T6472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.446541][ T6472] team0: Port device team_slave_0 added
[  269.520889][ T6509] futex_wake_op: syz.0.487 tries to shift op by 36; fix this program
[  269.868118][ T6472] team0: Port device team_slave_1 added
[  269.894899][ T4806] usb 3-1: USB disconnect, device number 15
[  269.997397][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.068478][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.098107][ T6512] loop0: detected capacity change from 0 to 256
[  270.149576][ T6472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.183785][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.193981][ T6514] loop4: detected capacity change from 0 to 512
[  270.200075][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.263584][ T6472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.287157][ T6514] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  270.491187][ T6514] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,delalloc,,errors=continue. Quota mode: writeback.
[  270.510490][ T6514] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff)
[  270.726512][ T6514] EXT4-fs error (device loop4): __ext4_new_inode:1282: comm syz.4.489: failed to insert inode 16: doubly allocated?
[  271.051304][ T6472] device hsr_slave_0 entered promiscuous mode
[  271.060674][   T21] Bluetooth: hci1: command 0x041b tx timeout
[  271.087619][ T6472] device hsr_slave_1 entered promiscuous mode
[  271.096195][ T6472] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  271.155796][ T6472] Cannot create hsr debugfs directory
[  271.708807][ T6535] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  272.274945][ T6472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.395088][ T6472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.517074][ T6543] netlink: 'syz.4.496': attribute type 1 has an invalid length.
[  272.538683][ T6472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.650324][ T6543] netlink: 92 bytes leftover after parsing attributes in process `syz.4.496'.
[  272.700334][ T3578] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  272.992800][ T6472] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.140338][ T1293] Bluetooth: hci1: command 0x040f tx timeout
[  274.182203][ T6472] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  274.242900][ T6472] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  274.261965][ T3578] usb 3-1: Using ep0 maxpacket: 8
[  274.272175][ T6472] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  274.285066][ T6472] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  274.439791][ T4806] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  274.455437][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'.
[  274.480340][ T3578] usb 3-1: device descriptor read/all, error -71
[  275.220156][   T21] Bluetooth: hci1: command 0x0419 tx timeout
[  275.400412][ T4806] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0
[  275.420393][ T4806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.428770][ T4806] usb 1-1: Product: syz
[  276.085180][ T4806] usb 1-1: Manufacturer: syz
[  276.104581][ T4806] usb 1-1: SerialNumber: syz
[  276.114452][ T4806] usb 1-1: config 0 descriptor??
[  276.140211][ T4806] usb 1-1: can't set config #0, error -71
[  276.179500][ T4806] usb 1-1: USB disconnect, device number 15
[  276.210511][ T6472] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.252464][ T6472] 8021q: adding VLAN 0 to HW filter on device team0
[  276.272875][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  276.950810][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  276.978636][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  277.013294][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  277.054738][ T3659] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.061880][ T3659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.102511][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  277.132679][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  277.152600][ T3659] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.159718][ T3659] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.178545][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  277.227522][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  277.260666][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  277.270894][ T3578] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  277.292746][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  277.336375][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  277.356807][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  277.377236][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  277.397921][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  277.499134][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  277.535951][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  277.543054][ T6578] loop0: detected capacity change from 0 to 32768
[  277.549194][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  277.559492][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  277.573078][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  277.889762][ T6594] loop4: detected capacity change from 0 to 1024
[  277.898323][   T25] audit: type=1326 audit(1724961390.772:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000
[  278.216291][   T25] audit: type=1326 audit(1724961390.772:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000
[  278.276247][   T25] audit: type=1326 audit(1724961390.782:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000
[  278.311493][ T6594] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  278.360319][ T3578] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=be.42
[  278.373739][ T3578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.393579][ T3578] usb 4-1: config 0 descriptor??
[  278.418804][   T25] audit: type=1326 audit(1724961390.782:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000
[  278.442768][   T25] audit: type=1326 audit(1724961390.782:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000
[  278.497160][ T3578] ldusb 4-1:0.0: Interrupt in endpoint not found
[  278.517130][   T25] audit: type=1326 audit(1724961390.792:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000
[  278.561000][   T25] audit: type=1326 audit(1724961390.792:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000
[  278.602769][   T25] audit: type=1326 audit(1724961390.792:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000
[  278.679102][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  278.698629][   T25] audit: type=1326 audit(1724961390.792:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000
[  278.721413][   T25] audit: type=1326 audit(1724961390.792:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000
[  278.752191][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  278.754359][   T21] usb 4-1: USB disconnect, device number 20
[  278.790686][ T6472] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.563395][ T6611] loop4: detected capacity change from 0 to 512
[  279.591440][ T6611] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  279.626795][ T6611] EXT4-fs (loop4): 1 truncate cleaned up
[  279.648286][ T6611] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  279.799884][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  279.808891][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  279.827616][ T6472] device veth0_vlan entered promiscuous mode
[  279.853505][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  281.047914][ T1293] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  281.064532][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  281.151885][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  281.159935][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  281.273959][ T6472] device veth1_vlan entered promiscuous mode
[  281.307141][ T6472] device veth0_macvtap entered promiscuous mode
[  281.325022][ T6472] device veth1_macvtap entered promiscuous mode
[  281.910578][ T3674] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  281.918842][ T1293] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  281.943436][ T1293] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  282.008465][ T1293] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  282.100593][ T1293] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.264863][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  282.280157][ T1293] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  282.286600][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  282.291065][ T1293] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  282.298849][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  282.320933][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  282.330547][ T1293] usb 3-1: Product: syz
[  282.334728][ T1293] usb 3-1: Manufacturer: syz
[  282.389244][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.423844][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.443951][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.460475][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.478189][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.496699][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.515300][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.530510][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.551008][ T6646] cgroup: Bad value for 'name'
[  282.558139][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.568688][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.579721][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.591802][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.592323][ T1293] cdc_wdm 3-1:1.0: skipping garbage
[  282.616260][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.619442][ T1293] cdc_wdm 3-1:1.0: skipping garbage
[  282.630895][ T3674] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0
[  282.640146][ T3674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.648228][ T3674] usb 1-1: Product: syz
[  282.658607][ T3674] usb 1-1: Manufacturer: syz
[  282.919704][ T6648] loop3: detected capacity change from 0 to 1024
[  282.930277][   T25] kauditd_printk_skb: 27 callbacks suppressed
[  282.930362][   T25] audit: type=1326 audit(1724961395.812:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000
[  282.958960][ T3674] usb 1-1: SerialNumber: syz
[  282.996170][   T25] audit: type=1326 audit(1724961395.812:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000
[  283.018863][   T25] audit: type=1326 audit(1724961395.822:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000
[  283.080641][ T1293] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  283.100932][ T3674] usb 1-1: config 0 descriptor??
[  283.113204][   T25] audit: type=1326 audit(1724961395.822:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000
[  283.137115][ T1293] cdc_wdm 3-1:1.0: Unknown control protocol
[  283.143522][   T25] audit: type=1326 audit(1724961395.822:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000
[  283.168568][ T1293] usb 3-1: USB disconnect, device number 18
[  283.175104][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  283.176075][ T3674] ums_eneub6250 1-1:0.0: USB Mass Storage device detected
[  283.191372][ T6648] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  283.197052][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  283.213056][   T25] audit: type=1326 audit(1724961395.822:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000
[  283.239040][   T25] audit: type=1326 audit(1724961395.822:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000
[  283.290236][   T25] audit: type=1326 audit(1724961395.822:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000
[  283.325670][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.327984][   T25] audit: type=1326 audit(1724961395.832:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000
[  283.409715][ T6625] overlayfs: failed to resolve './file0': -2
[  283.427392][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.479897][   T25] audit: type=1326 audit(1724961395.832:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000
[  283.496048][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.515870][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.526204][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.537249][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.547594][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.559844][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.570356][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.581237][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.591627][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.602601][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.620857][ T1293] usb 1-1: USB disconnect, device number 16
[  283.646304][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.684676][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  283.712809][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  283.757856][ T6472] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.767043][ T6472] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.776554][ T6472] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.786321][ T6472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.912166][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.927081][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.971416][ T3781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.971911][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  284.010208][ T3781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.038163][ T6665] loop3: detected capacity change from 0 to 512
[  284.063258][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  284.342673][ T6665] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  284.647562][ T6665] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,delalloc,,errors=continue. Quota mode: writeback.
[  284.737098][ T6665] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff)
[  284.952336][ T6677] loop0: detected capacity change from 0 to 512
[  284.964834][ T6665] EXT4-fs error (device loop3): __ext4_new_inode:1282: comm syz.3.528: failed to insert inode 16: doubly allocated?
[  285.716644][ T6682] loop2: detected capacity change from 0 to 512
[  285.723980][ T6677] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  285.774454][ T6682] EXT4-fs (loop2): Test dummy encryption mode enabled
[  285.788295][  T604] device hsr_slave_0 left promiscuous mode
[  285.794742][ T6682] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  285.850822][ T6677] EXT4-fs (loop0): 1 truncate cleaned up
[  285.856611][ T6677] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  285.909252][  T604] device hsr_slave_1 left promiscuous mode
[  285.927950][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.936231][ T6682] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.531: iget: bogus i_mode (0)
[  285.988618][  T604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.060602][ T6682] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.531: couldn't read orphan inode 17 (err -117)
[  286.085387][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.114889][  T604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.122587][ T6682] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,abort,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  286.140623][  T604] device bridge_slave_1 left promiscuous mode
[  286.146861][  T604] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.797041][  T604] device bridge_slave_0 left promiscuous mode
[  286.857635][  T604] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.996709][  T604] device veth1_macvtap left promiscuous mode
[  287.023427][ T6705] loop0: detected capacity change from 0 to 512
[  287.031959][  T604] device veth0_macvtap left promiscuous mode
[  287.038100][  T604] device veth1_vlan left promiscuous mode
[  287.046428][  T604] device veth0_vlan left promiscuous mode
[  287.077689][ T6705] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #16: comm syz.0.534: iget: bad extended attribute block 128
[  287.080169][ T3563] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  287.116991][ T6705] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.534: couldn't read orphan inode 16 (err -117)
[  287.314400][ T6705] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  287.570652][ T3563] usb 2-1: Using ep0 maxpacket: 16
[  287.636988][ T6705] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038 (0x7fffffff)
[  287.691961][ T3563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  287.722861][ T3563] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  287.740510][ T6701] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  287.748957][ T6705] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.534: bg 0: block 352: padding at end of block bitmap is not set
[  287.772931][ T6701] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.531: bg 0: block 7: invalid block bitmap
[  287.810369][ T3563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.821234][ T3563] usb 2-1: config 0 descriptor??
[  287.828960][ T6705] EXT4-fs error (device loop0): ext4_xattr_block_set:2197: inode #12: comm syz.0.534: bad block 0
[  288.133860][ T6720] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  288.227895][ T6690] udc-core: couldn't find an available UDC or it's busy
[  288.306917][ T6690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  288.696851][  T604] team0 (unregistering): Port device team_slave_1 removed
[  288.713579][  T604] team0 (unregistering): Port device team_slave_0 removed
[  288.728663][  T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  288.743886][  T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  288.812108][  T604] bond0 (unregistering): Released all slaves
[  288.906798][ T6685] udc-core: couldn't find an available UDC or it's busy
[  288.920962][ T6685] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  288.963047][ T3563] hid (null): invalid report_count 983040256
[  288.969133][ T3563] hid (null): unknown global tag 0xc
[  288.983822][ T3563] hid (null): invalid report_count 7155259
[  288.994454][ T3563] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0
[  289.002818][ T3563] hid-generic 0003:0158:0100.0006: invalid report_count 983040256
[  289.011994][ T3563] hid-generic 0003:0158:0100.0006: item 0 4 1 9 parsing failed
[  289.020716][ T3563] hid-generic: probe of 0003:0158:0100.0006 failed with error -22
[  289.365618][ T4808] usb 2-1: USB disconnect, device number 17
[  289.458830][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  289.492130][ T6232] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2815: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  289.615863][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  289.759408][ T6730] loop0: detected capacity change from 0 to 1024
[  290.196859][   T25] kauditd_printk_skb: 27 callbacks suppressed
[  290.197192][   T25] audit: type=1326 audit(1724961402.762:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000
[  290.301119][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  290.317972][   T25] audit: type=1326 audit(1724961402.762:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000
[  290.322507][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  290.344310][ T3780] Bluetooth: hci2: command 0x1003 tx timeout
[  290.393426][   T25] audit: type=1326 audit(1724961402.762:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000
[  290.433359][ T3589] Bluetooth: hci2: sending frame failed (-49)
[  290.441380][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  290.446948][   T25] audit: type=1326 audit(1724961402.762:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000
[  290.485796][ T6730] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  290.491122][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  290.513384][   T25] audit: type=1326 audit(1724961402.762:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000
[  290.543878][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  290.599449][   T25] audit: type=1326 audit(1724961402.762:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000
[  290.630870][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  290.656994][   T25] audit: type=1326 audit(1724961402.762:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000
[  290.691349][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  290.718774][   T25] audit: type=1326 audit(1724961402.762:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000
[  290.822229][   T25] audit: type=1326 audit(1724961402.762:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000
[  290.957735][   T25] audit: type=1326 audit(1724961402.762:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000
[  291.000433][ T6742] loop1: detected capacity change from 0 to 512
[  291.041219][ T6740] loop3: detected capacity change from 0 to 2048
[  291.052323][ T6742] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  291.091816][ T6742] EXT4-fs (loop1): 1 truncate cleaned up
[  291.097488][ T6742] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  291.138069][ T6740] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  291.247429][ T6744] wireguard: wireguard0: Could not create IPv6 socket
[  291.261048][ T6744] device wireguard0 entered promiscuous mode
[  292.468669][ T6757] 9pnet_virtio: no channels available for device syz
[  292.512891][   T13] Bluetooth: hci2: command 0x1001 tx timeout
[  292.520412][ T3589] Bluetooth: hci2: sending frame failed (-49)
[  293.773968][    C1] eth0: bad gso: type: 1, size: 1408
[  294.053590][ T6777] loop1: detected capacity change from 0 to 256
[  294.078920][  T604] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.099804][ T6773] loop0: detected capacity change from 0 to 2048
[  294.208302][  T604] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.381571][ T6773] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  294.569332][  T604] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.581902][ T4808] Bluetooth: hci2: command 0x1009 tx timeout
[  295.198629][ T6773] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  295.281295][  T604] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.284510][ T6790] loop1: detected capacity change from 0 to 256
[  295.427286][ T6790] FAT-fs (loop1): Directory bread(block 64) failed
[  295.459739][ T6790] FAT-fs (loop1): Directory bread(block 65) failed
[  295.508103][ T6790] FAT-fs (loop1): Directory bread(block 66) failed
[  295.562003][ T6790] FAT-fs (loop1): Directory bread(block 67) failed
[  295.568660][ T6790] FAT-fs (loop1): Directory bread(block 68) failed
[  295.575560][ T6790] FAT-fs (loop1): Directory bread(block 69) failed
[  295.582485][ T6790] FAT-fs (loop1): Directory bread(block 70) failed
[  295.594813][ T6790] FAT-fs (loop1): Directory bread(block 71) failed
[  295.616472][ T6790] FAT-fs (loop1): Directory bread(block 72) failed
[  295.680291][ T6790] FAT-fs (loop1): Directory bread(block 73) failed
[  295.695081][ T6778] chnl_net:caif_netlink_parms(): no params data found
[  296.759500][ T3780] Bluetooth: hci4: command 0x0409 tx timeout
[  296.780513][ T4808] Bluetooth: hci0: command 0x0409 tx timeout
[  296.833462][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.901227][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.909255][ T6778] device bridge_slave_0 entered promiscuous mode
[  296.919032][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.926563][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.946970][ T6778] device bridge_slave_1 entered promiscuous mode
[  297.084603][ T6778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.108867][ T6778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.193962][ T6778] team0: Port device team_slave_0 added
[  297.219207][ T6778] team0: Port device team_slave_1 added
[  297.295881][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.334097][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.410393][ T6778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.436729][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.446029][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.612344][ T6778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.880802][ T6778] device hsr_slave_0 entered promiscuous mode
[  297.945734][ T6778] device hsr_slave_1 entered promiscuous mode
[  297.958688][ T6778] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  297.984116][ T6778] Cannot create hsr debugfs directory
[  299.094751][  T604] device hsr_slave_0 left promiscuous mode
[  299.155404][  T604] device hsr_slave_1 left promiscuous mode
[  299.192435][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.241576][  T604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.257212][ T3780] Bluetooth: hci0: command 0x041b tx timeout
[  299.259914][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.273631][  T604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.290734][  T604] device bridge_slave_1 left promiscuous mode
[  299.296964][  T604] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.316923][  T604] device bridge_slave_0 left promiscuous mode
[  299.330343][  T604] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.351182][  T604] device veth1_macvtap left promiscuous mode
[  299.357228][  T604] device veth0_macvtap left promiscuous mode
[  299.383300][  T604] device veth1_vlan left promiscuous mode
[  299.389114][  T604] device veth0_vlan left promiscuous mode
[  299.824156][  T604] team0 (unregistering): Port device team_slave_1 removed
[  299.849867][  T604] team0 (unregistering): Port device team_slave_0 removed
[  299.876348][  T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.907308][  T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.024656][  T604] bond0 (unregistering): Released all slaves
[  300.385259][ T6895] IPVS: lc: SCTP 172.20.20.187:0 - no destination available
[  300.527367][ T6903] loop3: detected capacity change from 0 to 1024
[  300.625726][ T6903] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  300.650314][ T6903] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  300.662045][ T3780] Bluetooth: hci2: command 0x0409 tx timeout
[  300.668310][ T6903] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869)
[  300.692357][ T6903] journal_init_common: Cannot get buffer for journal superblock
[  300.701096][ T6903] EXT4-fs (loop3): Could not load journal inode
[  300.816486][ T6860] chnl_net:caif_netlink_parms(): no params data found
[  300.872535][ T6778] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  300.906240][ T6778] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  300.967289][ T6778] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  301.020190][ T6778] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  301.042428][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.072689][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.116006][ T6860] device bridge_slave_0 entered promiscuous mode
[  301.162491][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.190170][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.237023][ T6860] device bridge_slave_1 entered promiscuous mode
[  301.310279][ T3780] Bluetooth: hci0: command 0x040f tx timeout
[  301.409703][ T6860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  301.482057][ T6860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.539632][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.601537][ T6860] team0: Port device team_slave_0 added
[  301.646590][ T6778] 8021q: adding VLAN 0 to HW filter on device team0
[  301.683576][ T6860] team0: Port device team_slave_1 added
[  301.696016][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  301.734583][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  301.781295][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  301.810945][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  301.849992][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.857295][ T6713] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.951767][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  301.973403][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  302.008482][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  302.027459][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.034621][ T6713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.073459][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  302.101880][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0
[  302.114167][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.248202][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  302.380617][ T6778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  302.442094][ T6778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  302.641857][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  302.672803][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  303.024893][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  303.072271][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  303.128795][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  303.137261][   T13] Bluetooth: hci2: command 0x041b tx timeout
[  303.166677][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  303.207738][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  303.234425][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  303.259416][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  303.286425][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  303.316434][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  303.330403][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.346113][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.372082][    C1] vkms_vblank_simulate: vblank timer overrun
[  303.381328][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[  303.432815][ T6860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.459435][ T6972] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  304.307683][ T6860] device hsr_slave_0 entered promiscuous mode
[  304.366226][ T6860] device hsr_slave_1 entered promiscuous mode
[  304.377083][ T6997] IPVS: lc: SCTP 172.20.20.187:0 - no destination available
[  304.418338][ T6998] netlink: 64 bytes leftover after parsing attributes in process `syz.0.586'.
[  304.428297][ T6860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  304.440280][ T6860] Cannot create hsr debugfs directory
[  304.534346][ T6996] loop1: detected capacity change from 0 to 4096
[  304.554428][ T7003] loop3: detected capacity change from 0 to 1024
[  304.600647][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  304.608203][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  304.701056][ T6778] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.956273][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  305.059103][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  305.179359][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  305.216438][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  305.291820][ T6778] device veth0_vlan entered promiscuous mode
[  305.305323][ T3780] Bluetooth: hci2: command 0x040f tx timeout
[  305.345481][ T6860] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.477443][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  305.494870][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  305.517786][ T6472] ntfs3: loop1: failed to convert "0000" to iso8859-6
[  305.538283][ T6778] device veth1_vlan entered promiscuous mode
[  305.594028][ T6472] ntfs3: loop1: failed to convert "0030" to iso8859-6
[  305.608281][ T6860] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.618079][ T6472] ntfs3: loop1: failed to convert name for inode 1e.
[  305.674578][ T6472] ntfs3: loop1: failed to convert "0032" to iso8859-6
[  305.701416][ T6472] ntfs3: loop1: failed to convert "0033" to iso8859-6
[  305.720206][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  305.729759][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  305.827131][ T6860] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.867810][ T6778] device veth0_macvtap entered promiscuous mode
[  305.925571][ T6778] device veth1_macvtap entered promiscuous mode
[  305.969679][ T6860] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.013341][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.050350][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.079927][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.091127][   T25] kauditd_printk_skb: 28 callbacks suppressed
[  306.091147][   T25] audit: type=1326 audit(1724961419.112:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.3.592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x0
[  306.122502][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.150118][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.171241][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.196388][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.207933][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.218380][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.229944][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.242981][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.262992][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  306.274608][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  306.310999][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  306.330607][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  306.353077][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.370355][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.393100][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.415489][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.438421][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.449811][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.468119][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.479203][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.496585][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.509652][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.530768][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.542594][ T6778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.571340][ T6778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.588988][ T6778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.599523][ T6778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.617386][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  306.629511][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  306.785645][  T604] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.868462][ T4565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.908839][ T4565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.938956][  T604] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.946259][ T3767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.991683][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  306.999311][ T3767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.011870][ T7054] loop0: detected capacity change from 0 to 128
[  307.032772][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  307.067778][  T604] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.109122][ T7055] loop3: detected capacity change from 0 to 512
[  307.189761][  T604] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.320992][ T7060] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  307.482588][ T3780] Bluetooth: hci2: command 0x0419 tx timeout
[  307.930990][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.2.552'.
[  308.090755][ T7065] IPVS: lc: SCTP 172.20.20.187:0 - no destination available
[  308.141314][ T7068] netlink: 64 bytes leftover after parsing attributes in process `syz.3.597'.
[  308.157820][ T6860] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  308.284899][ T6860] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  308.323468][ T6860] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  308.351264][ T6860] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  308.495139][ T7075] x_tables: unsorted entry at hook 3
[  308.502227][ T7075] netlink: 32 bytes leftover after parsing attributes in process `syz.2.600'.
[  308.548056][ T7056] chnl_net:caif_netlink_parms(): no params data found
[  308.588224][ T7077] netlink: 'syz.2.600': attribute type 2 has an invalid length.
[  308.626562][ T7077] netlink: 60 bytes leftover after parsing attributes in process `syz.2.600'.
[  308.873075][ T7056] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.891199][ T7056] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.933996][ T7056] device bridge_slave_0 entered promiscuous mode
[  308.975681][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.038198][ T7056] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.050891][ T7056] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.074748][ T7094] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  309.094201][ T7056] device bridge_slave_1 entered promiscuous mode
[  309.173318][ T6860] 8021q: adding VLAN 0 to HW filter on device team0
[  309.220316][ T3578] Bluetooth: hci1: command 0x0409 tx timeout
[  309.248788][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  309.257675][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  309.309948][ T7056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.354951][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  309.374183][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  309.384320][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.391449][ T6713] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.420795][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  309.571947][ T7056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.514938][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  310.548617][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  310.569670][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.576824][ T6713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.586082][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  310.626472][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  311.826958][ T4807] Bluetooth: hci1: command 0x041b tx timeout
[  312.327319][ T7120] loop2: detected capacity change from 0 to 128
[  312.336081][ T7056] team0: Port device team_slave_0 added
[  312.379189][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  312.477097][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  312.498388][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  312.519132][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  312.564358][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  312.573586][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  312.587107][ T7056] team0: Port device team_slave_1 added
[  312.601918][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  312.658224][ T7056] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.665584][ T7056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.762219][ T7056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  313.113699][ T6860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  313.221058][ T6860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  313.283655][ T7056] batman_adv: batadv0: Adding interface: batadv_slave_1
[  313.310177][ T7056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.380066][ T7056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.420607][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  313.432369][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  313.553755][ T7056] device hsr_slave_0 entered promiscuous mode
[  313.566022][ T7056] device hsr_slave_1 entered promiscuous mode
[  313.580701][ T7056] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.588288][ T7056] Cannot create hsr debugfs directory
[  313.677517][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.706337][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  313.720707][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  313.927009][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  313.935883][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  313.980764][ T6860] device veth0_vlan entered promiscuous mode
[  313.987447][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  313.998205][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  314.008117][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  314.016457][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  314.024149][ T3780] Bluetooth: hci1: command 0x040f tx timeout
[  314.059293][ T6860] device veth1_vlan entered promiscuous mode
[  314.156620][ T6860] device veth0_macvtap entered promiscuous mode
[  314.173623][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  314.188872][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  314.197564][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  314.206994][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  314.267291][ T6860] device veth1_macvtap entered promiscuous mode
[  314.275994][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  314.286818][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  314.311686][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.327067][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.337095][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.352363][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.362528][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.373262][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.383391][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.393912][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.403897][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.414361][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.425598][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.437759][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.451074][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_0
[  314.463366][  T604] device hsr_slave_0 left promiscuous mode
[  314.469756][  T604] device hsr_slave_1 left promiscuous mode
[  314.477916][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.486599][  T604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.494647][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.502940][  T604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.510696][  T604] device bridge_slave_1 left promiscuous mode
[  314.517207][  T604] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.525951][  T604] device bridge_slave_0 left promiscuous mode
[  314.532491][  T604] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.547257][  T604] device hsr_slave_0 left promiscuous mode
[  314.553698][  T604] device hsr_slave_1 left promiscuous mode
[  314.559919][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.567667][  T604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.575739][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.583836][  T604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.591672][  T604] device bridge_slave_1 left promiscuous mode
[  314.597811][  T604] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.606855][  T604] device bridge_slave_0 left promiscuous mode
[  314.614287][  T604] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.630918][  T604] device veth1_macvtap left promiscuous mode
[  314.637047][  T604] device veth0_macvtap left promiscuous mode
[  314.643191][  T604] device veth1_vlan left promiscuous mode
[  314.648950][  T604] device veth0_vlan left promiscuous mode
[  314.656705][  T604] device veth1_macvtap left promiscuous mode
[  314.662868][  T604] device veth0_macvtap left promiscuous mode
[  314.668902][  T604] device veth1_vlan left promiscuous mode
[  314.674823][  T604] device veth0_vlan left promiscuous mode
[  314.916545][  T604] team0 (unregistering): Port device team_slave_1 removed
[  314.928326][  T604] team0 (unregistering): Port device team_slave_0 removed
[  314.943560][  T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  314.959809][  T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.019582][  T604] bond0 (unregistering): Released all slaves
[  315.144280][  T604] team0 (unregistering): Port device team_slave_1 removed
[  315.158499][  T604] team0 (unregistering): Port device team_slave_0 removed
[  315.172072][  T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.187052][  T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.253791][  T604] bond0 (unregistering): Released all slaves
[  315.316174][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  315.324756][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  315.340785][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.351662][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.369111][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.389949][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.400253][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.410712][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.420549][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.431010][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.441943][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.459715][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  315.472510][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  315.488480][ T6860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.501162][ T6860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.509879][ T6860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.518984][ T6860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.626748][ T1244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.640841][ T1244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.674622][ T3781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.682247][ T7056] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  315.690343][ T3781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.708218][ T7056] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  315.719572][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  315.727784][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  315.737788][ T7056] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  315.756541][ T7056] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  315.848901][ T7171] loop2: detected capacity change from 0 to 256
[  315.906410][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'.
[  316.043127][ T7171] FAT-fs (loop2): Directory bread(block 64) failed
[  316.080457][ T7171] FAT-fs (loop2): Directory bread(block 65) failed
[  316.108543][ T3976] Bluetooth: hci1: command 0x0419 tx timeout
[  316.123549][ T7171] FAT-fs (loop2): Directory bread(block 66) failed
[  316.155121][ T7171] FAT-fs (loop2): Directory bread(block 67) failed
[  316.317235][ T7171] FAT-fs (loop2): Directory bread(block 68) failed
[  316.324050][ T7171] FAT-fs (loop2): Directory bread(block 69) failed
[  316.331435][ T7171] FAT-fs (loop2): Directory bread(block 70) failed
[  316.338100][ T7171] FAT-fs (loop2): Directory bread(block 71) failed
[  316.347116][ T7171] FAT-fs (loop2): Directory bread(block 72) failed
[  316.354092][ T7171] FAT-fs (loop2): Directory bread(block 73) failed
[  317.130594][ T1389] ieee802154 phy0 wpan0: encryption failed: -22
[  317.136917][ T1389] ieee802154 phy1 wpan1: encryption failed: -22
[  317.196942][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'.
[  318.460204][   T25] audit: type=1804 audit(1724961431.262:190): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.617" name="/newroot/6/bus/file0" dev="loop2" ino=1048700 res=1 errno=0
[  318.556648][ T7203] loop3: detected capacity change from 0 to 2048
[  318.564543][ T7208] IPVS: lc: SCTP 172.20.20.187:0 - no destination available
[  318.590259][ T7056] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.628332][ T7209] netlink: 64 bytes leftover after parsing attributes in process `syz.0.610'.
[  318.648697][ T7203] UDF-fs: bad mount option "uid=" or missing value
[  318.709326][ T6778] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  318.760403][ T6778] FAT-fs (loop2): Filesystem has been set read-only
[  318.760676][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  318.800093][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  318.810574][ T7056] 8021q: adding VLAN 0 to HW filter on device team0
[  318.871442][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  318.900516][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  318.930273][ T1244] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.937389][ T1244] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.985914][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  319.007348][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  319.026234][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.033381][ T1244] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.597328][ T3563] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  319.752670][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  319.765380][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  319.814221][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  319.831628][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  319.918057][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  319.948878][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  319.979482][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  320.005763][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  320.073226][ T3563] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  320.084557][ T3563] usb 4-1: config 1 has no interface number 0
[  320.090840][ T3563] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.095034][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  320.102720][ T3563] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  320.119734][ T3563] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  320.133766][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  320.583039][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  320.631252][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  320.686451][ T7056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  320.720225][ T3563] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  320.738947][ T3563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.773868][ T3563] usb 4-1: Product: syz
[  320.795767][ T3563] usb 4-1: Manufacturer: syz
[  320.826968][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.622'.
[  320.836328][ T3563] usb 4-1: can't set config #1, error -71
[  320.924751][ T3563] usb 4-1: USB disconnect, device number 21
[  321.148881][ T7264] netlink: 48 bytes leftover after parsing attributes in process `syz.0.625'.
[  321.200669][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  321.209348][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  321.225300][ T7269] IPVS: lc: SCTP 172.20.20.187:0 - no destination available
[  321.244173][ T7056] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.276251][ T7271] netlink: 56 bytes leftover after parsing attributes in process `syz.3.626'.
[  321.450915][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  321.471110][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  321.595258][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  321.613035][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  321.636926][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  321.657249][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  321.689857][ T7056] device veth0_vlan entered promiscuous mode
[  321.770636][ T7056] device veth1_vlan entered promiscuous mode
[  321.906093][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  321.924380][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  321.961939][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  322.019253][ T7254] loop4: detected capacity change from 0 to 32768
[  322.034673][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  322.064854][ T7254] Dev loop4 Sun disklabel: Csum bad, label corrupted
[  322.092616][ T7254]  loop4: unable to read partition table
[  322.113297][ T7254] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[  322.155636][ T7056] device veth0_macvtap entered promiscuous mode
[  322.182031][ T7056] device veth1_macvtap entered promiscuous mode
[  322.283655][ T3027] Dev loop4 Sun disklabel: Csum bad, label corrupted
[  322.316654][ T3027]  loop4: unable to read partition table
[  322.333189][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.351793][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.385077][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.398617][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.409760][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.427985][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.439113][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.450598][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.465215][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.476190][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.495568][ T7056] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.511740][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  322.543942][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  322.596810][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  322.619985][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.667452][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.691473][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.713539][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.728936][ T7303] loop0: detected capacity change from 0 to 1024
[  322.735460][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.746576][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.758958][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.769604][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.779771][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.790863][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.802523][ T7056] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.833723][ T7273] chnl_net:caif_netlink_parms(): no params data found
[  322.872055][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  322.991312][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  323.077514][ T7056] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.123774][ T7056] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.388242][ T7056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.423345][ T7056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.470644][ T4806] Bluetooth: hci0: command 0x0409 tx timeout
[  323.739609][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.764300][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.785094][ T7273] device bridge_slave_0 entered promiscuous mode
[  323.916102][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.935526][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.947624][ T7273] device bridge_slave_1 entered promiscuous mode
[  324.748994][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.867748][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.024727][ T7273] team0: Port device team_slave_0 added
[  325.054542][ T3659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.075653][ T3659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.089614][ T7273] team0: Port device team_slave_1 added
[  325.101702][ T7338] IPVS: lc: SCTP 172.20.20.187:0 - no destination available
[  325.151554][ T7336] netlink: 56 bytes leftover after parsing attributes in process `syz.4.636'.
[  325.172624][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  325.226729][ T1244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.229275][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.257222][ T1244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.258360][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.317113][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.343078][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.350381][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.388668][ T7273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.407482][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  325.447239][  T604] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.540598][ T4806] Bluetooth: hci0: command 0x041b tx timeout
[  325.542232][  T604] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.644474][ T7273] device hsr_slave_0 entered promiscuous mode
[  325.683818][ T7273] device hsr_slave_1 entered promiscuous mode
[  325.699123][ T7357] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns
[  325.709505][ T7273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.840219][ T7273] Cannot create hsr debugfs directory
[  325.963552][ T7356] loop0: detected capacity change from 0 to 2048
[  325.984251][  T604] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.077459][ T7356] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  326.139696][ T7356] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  326.140270][   T25] audit: type=1800 audit(1724961439.152:191): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.639" name="bus" dev="loop0" ino=18 res=0 errno=0
[  326.185095][ T7368] netlink: 'syz.3.641': attribute type 16 has an invalid length.
[  326.194421][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'.
[  326.222282][  T604] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.277523][ T7378] loop3: detected capacity change from 0 to 128
[  326.278114][ T7356] netlink: 36 bytes leftover after parsing attributes in process `syz.0.639'.
[  326.335074][ T3578] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  327.400072][ T3578] usb 5-1: Using ep0 maxpacket: 32
[  327.597264][ T7395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.645'.
[  327.636478][ T1293] Bluetooth: hci0: command 0x040f tx timeout
[  327.654769][ T3578] usb 5-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a
[  327.687146][ T3578] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[  327.780560][ T7399] netlink: 108 bytes leftover after parsing attributes in process `syz.1.646'.
[  328.282319][ T3578] usb 5-1: Product: syz
[  328.288397][ T3578] usb 5-1: config 0 descriptor??
[  328.362024][ T3578] gspca_main: STV06xx-2.14.0 probing 046d:08f6
[  328.368374][ T3578] gspca_stv06xx: st6422 sensor detected
[  329.690254][ T3578] STV06xx: probe of 5-1:0.0 failed with error -71
[  329.700356][ T3623] Bluetooth: hci0: command 0x0419 tx timeout
[  329.718036][ T3578] usb 5-1: USB disconnect, device number 8
[  329.769609][ T7427] loop1: detected capacity change from 0 to 16
[  329.849361][ T7428] loop3: detected capacity change from 0 to 2048
[  329.899816][ T7427] erofs: (device loop1): mounted with root inode @ nid 36.
[  329.922227][ T7428] UDF-fs: bad mount option "u
" or missing value
[  329.963101][ T7273] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  329.992657][ T7273] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  330.085017][ T7273] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  330.206873][ T7442] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  330.247008][ T3623] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  330.670250][ T7273] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  330.760851][ T3623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.775992][ T3623] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  330.792197][ T3623] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  330.802178][ T3623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.834571][ T3623] usb 1-1: config 0 descriptor??
[  331.280300][ T1293] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  331.428457][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.453189][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  331.462268][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  331.476978][ T7273] 8021q: adding VLAN 0 to HW filter on device team0
[  331.501122][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  331.510523][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  331.519827][ T3767] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.530836][ T3767] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.553099][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  331.564066][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  331.573499][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  331.574219][ T3623] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  331.582422][ T3767] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.596275][ T3767] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.596564][ T3623] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  331.615190][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  331.618349][ T3623] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  331.634945][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  331.651104][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  331.664438][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  331.690249][ T4807] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  331.708299][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  331.720569][ T3623] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  331.750763][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  331.759583][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  331.768662][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  331.787518][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  331.847373][ T7273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  331.860827][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  331.872160][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  331.901767][ T1293] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0
[  331.912664][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  331.922222][ T1293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.941344][ T1293] usb 5-1: Product: syz
[  331.960202][ T1293] usb 5-1: Manufacturer: syz
[  331.976393][ T1293] usb 5-1: SerialNumber: syz
[  331.987537][ T1293] usb 5-1: config 0 descriptor??
[  332.012940][ T3623] usb 1-1: USB disconnect, device number 17
[  332.042023][ T1293] ums_eneub6250 5-1:0.0: USB Mass Storage device detected
[  332.111401][ T4807] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  332.122117][ T4807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  332.154788][ T4807] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  332.165550][ T4807] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  332.208211][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  332.216881][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  332.229480][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.247859][ T7447] overlayfs: failed to resolve './file0': -2
[  332.293939][ T1293] usb 5-1: USB disconnect, device number 9
[  332.300429][ T4807] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  332.322912][ T4807] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  332.332458][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  332.351410][ T4807] usb 2-1: Product: syz
[  332.351878][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  332.371907][ T4807] usb 2-1: Manufacturer: syz
[  332.407022][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  332.418568][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  332.434220][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  332.447853][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  332.462511][ T4807] cdc_wdm 2-1:1.0: skipping garbage
[  332.486298][ T7273] device veth0_vlan entered promiscuous mode
[  332.492943][ T4807] cdc_wdm 2-1:1.0: skipping garbage
[  332.515904][ T4807] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  332.539444][ T7273] device veth1_vlan entered promiscuous mode
[  332.542454][ T4807] cdc_wdm 2-1:1.0: Unknown control protocol
[  332.664019][  T604] device hsr_slave_0 left promiscuous mode
[  332.688686][  T604] device hsr_slave_1 left promiscuous mode
[  332.695944][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  332.712016][  T604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  332.726135][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.758810][  T604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  332.909124][  T604] device bridge_slave_1 left promiscuous mode
[  332.915610][  T604] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.924591][  T604] device bridge_slave_0 left promiscuous mode
[  332.941143][  T604] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.326878][  T604] device hsr_slave_0 left promiscuous mode
[  333.350539][  T604] device hsr_slave_1 left promiscuous mode
[  333.407724][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  333.439085][  T604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  333.560537][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  333.579069][  T604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.630744][  T604] device bridge_slave_0 left promiscuous mode
[  333.636984][  T604] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.693972][  T604] device veth1_macvtap left promiscuous mode
[  333.716760][  T604] device veth0_macvtap left promiscuous mode
[  333.733416][  T604] device veth1_vlan left promiscuous mode
[  333.748160][  T604] device veth0_vlan left promiscuous mode
[  333.778898][  T604] device veth1_macvtap left promiscuous mode
[  333.790444][  T604] device veth0_macvtap left promiscuous mode
[  333.796709][  T604] device veth1_vlan left promiscuous mode
[  333.816234][  T604] device veth0_vlan left promiscuous mode
[  335.099779][ T7506] netlink: 92 bytes leftover after parsing attributes in process `syz.4.667'.
[  335.761194][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.667'.
[  336.016146][  T604] team0 (unregistering): Port device team_slave_1 removed
[  336.029726][  T604] team0 (unregistering): Port device team_slave_0 removed
[  336.044505][  T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  336.057829][  T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  336.126813][  T604] bond0 (unregistering): Released all slaves
[  336.240338][ T1293] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  336.266594][  T604] team0 (unregistering): Port device team_slave_1 removed
[  336.282409][  T604] team0 (unregistering): Port device team_slave_0 removed
[  336.295447][  T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  336.309928][  T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  336.374958][  T604] bond0 (unregistering): Released all slaves
[  336.547990][ T7273] device veth0_macvtap entered promiscuous mode
[  336.556489][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  336.566145][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  336.601036][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  336.619070][ T7521] tmpfs: Bad value for 'mpol'
[  336.631139][ T7273] device veth1_macvtap entered promiscuous mode
[  336.637640][ T1293] usb 1-1: config 0 has an invalid interface number: 18 but max is 0
[  336.652275][ T1293] usb 1-1: config 0 has no interface number 0
[  336.658682][ T1293] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.673637][ T1293] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.682570][ T7521] overlayfs: missing 'lowerdir'
[  336.727701][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.738916][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.749167][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.761118][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.771424][ T1293] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  336.772411][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.780538][ T1293] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  336.780558][ T1293] usb 1-1: Manufacturer: syz
[  336.789519][ T1293] usb 1-1: config 0 descriptor??
[  336.798653][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.818804][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.830448][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.862654][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.879638][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  336.909049][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  336.936306][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  336.949808][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.965442][ T3623] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  337.014365][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.029063][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.042350][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.055908][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.068786][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.080519][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.093565][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.108957][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.119291][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  337.140526][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  337.187722][ T7273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.199037][ T7273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.218097][ T7273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.234718][ T7273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.431168][ T7528] udc-core: couldn't find an available UDC or it's busy
[  337.469124][ T7528] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  337.512862][ T3781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.535738][ T3781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.571122][ T3623] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0
[  337.604452][ T3623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.637427][ T3623] usb 5-1: Product: syz
[  337.644877][ T3623] usb 5-1: Manufacturer: syz
[  337.662208][ T3623] usb 5-1: SerialNumber: syz
[  337.694382][ T3623] usb 5-1: config 0 descriptor??
[  337.725301][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  337.759141][ T4610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.778958][ T3623] ums_eneub6250 5-1:0.0: USB Mass Storage device detected
[  337.788792][ T4610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.898620][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  337.956053][ T7519] overlayfs: failed to resolve './file0': -2
[  338.057873][ T3621] usb 5-1: USB disconnect, device number 10
[  338.087616][ T7532] loop2: detected capacity change from 0 to 1024
[  338.130663][ T7532] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  338.173540][ T7532] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869)
[  338.215015][ T7532] EXT4-fs (loop2): journal inode is deleted
[  338.755440][ T7535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.675'.
[  338.853915][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[  339.121337][ T1293] usbhid 1-1:0.18: can't add hid device: -71
[  339.131631][ T1293] usbhid: probe of 1-1:0.18 failed with error -71
[  339.186066][ T1293] usb 1-1: USB disconnect, device number 18
[  339.244817][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'.
[  339.288727][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'.
[  339.771251][ T7553] loop3: detected capacity change from 0 to 512
[  340.101429][ T7553] EXT4-fs (loop3): Unrecognized mount option "euid>00000000000000000000" or missing value
[  340.178030][ T7556] loop0: detected capacity change from 0 to 512
[  340.806316][ T7556] EXT4-fs (loop0): Unrecognized mount option "nobh"" or missing value
[  341.364154][ T7569] IPVS: lc: SCTP 172.20.20.187:0 - no destination available
[  341.378920][   T25] audit: type=1326 audit(1724961454.392:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000
[  343.076072][   T25] audit: type=1326 audit(1724961454.392:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000
[  343.155767][   T25] audit: type=1326 audit(1724961454.952:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000
[  343.265039][   T25] audit: type=1326 audit(1724961454.952:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000
[  343.847172][   T25] audit: type=1326 audit(1724961454.952:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000
[  343.945674][   T25] audit: type=1326 audit(1724961454.952:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000
[  343.996693][   T25] audit: type=1326 audit(1724961454.952:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000
[  344.057013][ T7592] loop4: detected capacity change from 0 to 128
[  344.105461][   T25] audit: type=1326 audit(1724961454.952:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000
[  344.129926][   T25] audit: type=1326 audit(1724961454.952:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000
[  344.155292][   T25] audit: type=1326 audit(1724961454.952:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000
[  344.266316][ T7592] FAT-fs (loop4): Unrecognized mount option "����01777777777777777777777" or missing value
[  344.310293][ T3563] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  344.814581][ T7581] chnl_net:caif_netlink_parms(): no params data found
[  345.010125][   T13] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  345.110247][ T3563] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0
[  345.119311][ T3563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.127477][ T3563] usb 4-1: Product: syz
[  345.128733][ T7581] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.138856][ T3563] usb 4-1: Manufacturer: syz
[  345.144441][ T3563] usb 4-1: SerialNumber: syz
[  345.168404][ T7581] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.187003][ T7581] device bridge_slave_0 entered promiscuous mode
[  345.187669][ T3563] usb 4-1: config 0 descriptor??
[  345.201244][ T7608] input: syz0 as /devices/virtual/input/input13
[  345.219001][ T7581] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.228548][ T7581] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.235893][ T4808] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  345.261671][ T7581] device bridge_slave_1 entered promiscuous mode
[  345.263962][ T3563] ums_eneub6250 4-1:0.0: USB Mass Storage device detected
[  345.305735][ T4807] Bluetooth: hci3: command 0x0409 tx timeout
[  345.369510][ T7581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.390337][   T13] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  345.420413][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.440292][ T7581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.471192][   T13] usb 1-1: config 0 descriptor??
[  345.488819][ T3623] usb 4-1: USB disconnect, device number 22
[  345.579518][ T7581] team0: Port device team_slave_0 added
[  345.592504][ T7581] team0: Port device team_slave_1 added
[  345.610308][ T4808] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  345.623826][ T4808] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  345.634278][ T4808] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  345.643651][ T4808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.687458][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.695483][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.742632][ T7581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.772326][ T7598] netlink: 'syz.0.689': attribute type 3 has an invalid length.
[  345.782884][ T4808] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  345.799807][ T4808] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  345.818722][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.829340][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.856483][ T4808] usb 5-1: Product: syz
[  345.866359][ T4808] usb 5-1: Manufacturer: syz
[  345.871521][ T7581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.917202][ T3623] usb 2-1: USB disconnect, device number 18
[  345.947445][ T4808] cdc_wdm 5-1:1.0: skipping garbage
[  345.955521][ T4808] cdc_wdm 5-1:1.0: skipping garbage
[  345.972109][ T4808] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  345.981160][ T4808] cdc_wdm 5-1:1.0: Unknown control protocol
[  346.015933][ T7581] device hsr_slave_0 entered promiscuous mode
[  346.023143][ T7581] device hsr_slave_1 entered promiscuous mode
[  346.034053][ T7581] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  346.047700][ T7581] Cannot create hsr debugfs directory
[  346.071123][   T13] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  346.387997][ T7624] loop2: detected capacity change from 0 to 512
[  346.426584][ T7581] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.617609][ T7624] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  346.636712][ T7624] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.694: invalid indirect mapped block 1 (level 1)
[  346.667997][ T7624] EXT4-fs (loop2): 1 truncate cleaned up
[  346.673791][ T7624] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  346.854573][   T13] gs_usb 1-1:0.0: Couldn't get bit timing const for channel (err=-71)
[  346.863564][   T13] gs_usb: probe of 1-1:0.0 failed with error -71
[  346.872924][   T13] usb 1-1: USB disconnect, device number 19
[  346.897819][ T7624] netlink: 96 bytes leftover after parsing attributes in process `syz.2.694'.
[  347.014497][ T4807] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  347.091849][ T7581] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.119339][ T7632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.130505][ T3780] usb 5-1: USB disconnect, device number 11
[  347.138676][ T7632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.696'.
[  347.186280][ T7581] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.249347][ T7581] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.360124][ T4807] usb 4-1: Using ep0 maxpacket: 16
[  347.380121][   T13] Bluetooth: hci3: command 0x041b tx timeout
[  347.452594][ T7637] binder: 7633:7637 ioctl c0306201 20000680 returned -14
[  347.481770][ T7581] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  347.653101][ T7581] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  348.033222][ T7638] loop0: detected capacity change from 0 to 1024
[  348.070295][ T7581] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  348.081600][ T7581] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  348.140184][ T4807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.150245][ T7638] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  348.160139][ T4807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.172798][ T7638] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869)
[  348.205731][ T4807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  348.214956][ T7581] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.223942][ T7638] EXT4-fs (loop0): journal inode is deleted
[  348.232906][ T4807] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  348.243628][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  348.243639][ T4807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.346867][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  348.366986][ T4807] usb 4-1: config 0 descriptor??
[  348.368076][ T7581] 8021q: adding VLAN 0 to HW filter on device team0
[  351.649756][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  351.659106][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  351.668643][ T3661] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.675775][ T3661] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.684162][ T3578] Bluetooth: hci3: command 0x040f tx timeout
[  351.705385][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  351.715277][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  351.724073][ T3661] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.731235][ T3661] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.798944][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  351.920133][ T4807] usbhid 4-1:0.0: can't add hid device: -71
[  351.926182][ T4807] usbhid: probe of 4-1:0.0 failed with error -71
[  351.939759][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.947435][ T7652] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.966752][ T4807] usb 4-1: USB disconnect, device number 23
[  352.029267][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  352.056213][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  352.745197][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  352.849106][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  352.858570][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  352.873330][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  352.889625][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  352.921082][ T7676] i2c i2c-0: Invalid block write size 47
[  352.937785][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  352.949852][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  352.962964][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  352.972942][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  352.995308][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  353.017546][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'.
[  353.106448][ T7684] loop0: detected capacity change from 0 to 16
[  353.156514][ T3976] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  353.175928][ T7684] erofs: (device loop0): mounted with root inode @ nid 36.
[  353.248278][ T7684] UHID_CREATE from different security context by process 291 (syz.0.708), this is not allowed.
[  353.286231][  T604] device hsr_slave_0 left promiscuous mode
[  353.308413][  T604] device hsr_slave_1 left promiscuous mode
[  353.328037][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  353.356908][  T604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.370942][  T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.380284][ T3563] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  353.412830][  T604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.434021][  T604] device bridge_slave_1 left promiscuous mode
[  353.453224][  T604] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.473069][  T604] device bridge_slave_0 left promiscuous mode
[  353.482732][  T604] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.512273][  T604] device veth1_macvtap left promiscuous mode
[  353.521497][  T604] device veth0_macvtap left promiscuous mode
[  353.527695][  T604] device veth1_vlan left promiscuous mode
[  353.534436][  T604] device veth0_vlan left promiscuous mode
[  353.722153][ T3976] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0
[  353.750718][ T3976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.759333][ T3976] usb 4-1: Product: syz
[  353.768626][ T3976] usb 4-1: Manufacturer: syz
[  353.770425][ T3563] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  353.780063][ T3976] usb 4-1: SerialNumber: syz
[  353.801829][ T3976] usb 4-1: config 0 descriptor??
[  353.812738][ T3578] Bluetooth: hci3: command 0x0419 tx timeout
[  353.822173][ T3563] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  353.841053][ T3976] ums_eneub6250 4-1:0.0: USB Mass Storage device detected
[  353.841566][ T3563] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  353.867562][ T3563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.888409][ T3563] usb 5-1: config 0 descriptor??
[  353.931285][ T3563] gspca_main: spca561-2.14.0 probing abcd:cdee
[  354.026186][ T7695] loop2: detected capacity change from 0 to 512
[  354.065504][   T13] usb 4-1: USB disconnect, device number 24
[  354.144596][ T7695] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.710: iget: special inode unallocated
[  354.176342][ T7695] EXT4-fs (loop2): get root inode failed
[  354.184296][ T7695] EXT4-fs (loop2): mount failed
[  354.534773][ T7695] loop2: detected capacity change from 0 to 128
[  354.541404][ T3563] spca561: probe of 5-1:0.0 failed with error -22
[  354.560942][ T3563] usb 5-1: MIDIStreaming interface descriptor not found
[  354.803235][ T7695] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  354.816564][ T7695] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038 (0x7fffffff)
[  354.843024][  T604] team0 (unregistering): Port device team_slave_1 removed
[  354.910198][   T13] Bluetooth: hci4: command 0x0406 tx timeout
[  354.917963][   T13] Bluetooth: hci7: command 0x0406 tx timeout
[  355.001980][  T604] team0 (unregistering): Port device team_slave_0 removed
[  355.049972][  T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  355.118271][  T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  355.416027][ T3563] usb 5-1: USB disconnect, device number 12
[  355.588064][  T604] bond0 (unregistering): Released all slaves
[  357.377801][ T7581] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.680631][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  357.838278][ T7739] loop0: detected capacity change from 0 to 512
[  357.905368][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  358.468681][ T3563] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  358.488998][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  358.499216][ T7739] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  358.514038][ T7739] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.714: invalid indirect mapped block 1 (level 1)
[  358.516140][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  358.536342][ T7739] EXT4-fs (loop0): 1 truncate cleaned up
[  358.542079][ T7739] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  358.559546][ T3563] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  358.580302][ T7738] netlink: 96 bytes leftover after parsing attributes in process `syz.0.714'.
[  358.629860][ T7729] QAT: Device 0 not found
[  358.662528][  T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  358.899463][  T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  358.959369][ T7581] device veth0_vlan entered promiscuous mode
[  359.216901][ T7581] device veth1_vlan entered promiscuous mode
[  359.229223][ T7752] loop3: detected capacity change from 0 to 512
[  359.342750][  T592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  359.371708][  T592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  359.400223][ T7752] EXT4-fs (loop3): invalid first ino: 0
[  359.412655][  T592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  359.492318][ T7755] loop0: detected capacity change from 0 to 512
[  359.562992][ T7581] device veth0_macvtap entered promiscuous mode
[  359.614221][ T7581] device veth1_macvtap entered promiscuous mode
[  359.647114][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  359.773337][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  359.790874][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  359.809802][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  359.826081][ T7755] EXT4-fs error (device loop0): ext4_fill_super:4840: inode #2: comm syz.0.723: iget: special inode unallocated
[  359.869101][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  359.892905][ T7755] EXT4-fs (loop0): get root inode failed
[  359.918802][ T7755] EXT4-fs (loop0): mount failed
[  359.933555][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.010077][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.054506][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.083298][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.094307][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.116606][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.130044][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.148955][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.164151][  T592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  360.184319][  T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  360.243756][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.248677][ T7763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.724'.
[  360.274719][ T7755] loop0: detected capacity change from 0 to 128
[  360.303118][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.314093][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.325010][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.351848][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.371567][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.393987][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.418425][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.533128][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.666778][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  361.602810][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  361.611796][ T7755] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  361.643045][ T7755] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038 (0x7fffffff)
[  361.661562][ T7581] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.685654][ T7581] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.758203][ T7581] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.819218][ T7581] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.851326][ T7776] loop3: detected capacity change from 0 to 512
[  362.003556][ T7776] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz.3.728: casefold flag without casefold feature
[  362.017788][ T5154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.054206][ T1244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.077722][ T5154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.087191][ T7776] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.728: corrupted inode contents
[  362.109910][ T1244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.112300][ T7776] EXT4-fs error (device loop3): ext4_dirty_inode:6004: inode #3: comm syz.3.728: mark_inode_dirty error
[  362.148310][  T592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  362.158682][ T7776] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.728: bg 0: block 64: padding at end of block bitmap is not set
[  362.173175][  T592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  362.200664][ T7776] __quota_error: 57 callbacks suppressed
[  362.200682][ T7776] Quota error (device loop3): write_blk: dquota write failed
[  362.249482][ T7776] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  362.308679][ T7776] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.728: Failed to acquire dquot type 0
[  362.334057][ T7776] EXT4-fs (loop3): 1 truncate cleaned up
[  362.345355][ T7776] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  362.391925][ T7776] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038 (0x7fffffff)
[  363.022922][   T25] audit: type=1326 audit(1724961476.032:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.3.728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x0
[  363.091801][ T7776] syz.3.728 (7776) used greatest stack depth: 18776 bytes left
[  363.102408][ T7794] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  363.221662][ T7794] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  366.895386][ T7844] mmap: syz.1.744 (7844) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  366.934839][ T7844] program syz.1.744 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  369.382173][ T3660] wlan1: Trigger new scan to find an IBSS to join
[  370.601924][ T7860] ptrace attach of "./syz-executor exec"[6860] was attempted by "./syz-executor exec"[7860]
[  370.712496][ T7862] loop2: detected capacity change from 0 to 512
[  370.809427][ T7862] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none.
[  372.016747][ T7870] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.750: Unimplemented hash flags: 0x0001
[  372.029372][ T7870] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.750: Corrupt directory, running e2fsck is recommended
[  373.548615][ T3661] wlan1: Creating new IBSS network, BSSID f2:90:0d:b0:d2:0b
[  373.765965][ T7896] program syz.3.757 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  374.276003][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.284410][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.800676][ T7917] loop3: detected capacity change from 0 to 4096
[  375.937952][ T7921] loop0: detected capacity change from 0 to 1024
[  375.973450][ T7926] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  376.114657][ T7923] ------------[ cut here ]------------
[  376.120761][ T7923] WARNING: CPU: 0 PID: 7923 at kernel/softirq.c:363 __local_bh_enable_ip+0x1b3/0x1f0
[  376.130333][ T7923] Modules linked in:
[  376.134239][ T7923] CPU: 0 PID: 7923 Comm: syz.2.763 Not tainted 5.15.165-syzkaller #0
[  376.142389][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  376.152443][ T7923] RIP: 0010:__local_bh_enable_ip+0x1b3/0x1f0
[  376.158435][ T7923] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 4a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b e9 d0 fe ff ff e8 3f 00 00 00 eb a2 <0f> 0b e9 02 ff ff ff 48 c7 c1 44 86 e9 8d 80 e1 07 80 c1 03 38 c1
[  376.178077][ T7923] RSP: 0018:ffffc90002e07140 EFLAGS: 00010046
[  376.184222][ T7923] RAX: 0000000000000000 RBX: 1ffff920005c0e2c RCX: 0000000000040000
[  376.192187][ T7923] RDX: ffffc900053f2000 RSI: 0000000000000200 RDI: ffffffff884b2405
[  376.200146][ T7923] RBP: ffffc90002e071f0 R08: dffffc0000000000 R09: fffffbfff1bd2a56
[  376.208098][ T7923] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  376.216050][ T7923] R13: 1ffff1100efa1398 R14: ffffc90002e07180 R15: 0000000000000200
[  376.224006][ T7923] FS:  00007ff4c75e66c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[  376.232915][ T7923] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  376.239563][ T7923] CR2: 0000000020001140 CR3: 000000001dbe4000 CR4: 00000000003506f0
[  376.247518][ T7923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  376.255747][ T7923] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  376.263704][ T7923] Call Trace:
[  376.266964][ T7923]  <TASK>
[  376.269970][ T7923]  ? __warn+0x15b/0x300
[  376.274118][ T7923]  ? __local_bh_enable_ip+0x1b3/0x1f0
[  376.279482][ T7923]  ? report_bug+0x1b7/0x2e0
[  376.283997][ T7923]  ? handle_bug+0x3d/0x70
[  376.288338][ T7923]  ? exc_invalid_op+0x16/0x40
[  376.293001][ T7923]  ? asm_exc_invalid_op+0x16/0x20
[  376.298035][ T7923]  ? local_bh_enable+0x5/0x20
[  376.302710][ T7923]  ? __local_bh_enable_ip+0x1b3/0x1f0
[  376.308080][ T7923]  ? local_bh_enable+0x5/0x20
[  376.312749][ T7923]  ? _local_bh_enable+0xa0/0xa0
[  376.317618][ T7923]  __dev_queue_xmit+0x1c56/0x3230
[  376.322657][ T7923]  ? dev_queue_xmit+0x20/0x20
[  376.327314][ T7923]  ? __copy_skb_header+0x47b/0x600
[  376.332407][ T7923]  ? __skb_clone+0x454/0x6c0
[  376.336982][ T7923]  ? skb_clone+0x1ee/0x350
[  376.341380][ T7923]  __netlink_deliver_tap+0x4d2/0x760
[  376.346686][ T7923]  netlink_deliver_tap+0x16c/0x180
[  376.351776][ T7923]  netlink_broadcast_filtered+0xc2d/0x11a0
[  376.357575][ T7923]  netlink_broadcast+0x35/0x50
[  376.362320][ T7923]  genlmsg_multicast_netns+0x8e/0xc0
[  376.367589][ T7923]  nl80211_frame_tx_status+0x659/0xa40
[  376.373028][ T7923]  ? cfg80211_control_port_tx_status+0x50/0x50
[  376.379160][ T7923]  ? do_raw_spin_unlock+0x137/0x8b0
[  376.384345][ T7923]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  376.390221][ T7923]  ? _raw_spin_unlock+0x40/0x40
[  376.395058][ T7923]  cfg80211_mgmt_tx_status+0x3a/0x50
[  376.400322][ T7923]  ieee80211_report_used_skb+0x12f6/0x1810
[  376.406116][ T7923]  ? _raw_spin_lock_irqsave+0xac/0x120
[  376.411569][ T7923]  ? ieee80211_handle_filtered_frame+0x750/0x750
[  376.417883][ T7923]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  376.423323][ T7923]  ? _raw_spin_lock+0x40/0x40
[  376.428088][ T7923]  ? skb_queue_purge+0x2b9/0x2e0
[  376.433017][ T7923]  ieee80211_free_txskb+0x1e/0x30
[  376.438025][ T7923]  ieee80211_do_stop+0x10b8/0x1ce0
[  376.443130][ T7923]  ? ieee80211_stop_queues_by_reason+0x1ce/0x250
[  376.449439][ T7923]  ? ieee80211_sdata_stop+0x70/0x70
[  376.454647][ T7923]  ? ieee80211_get_vif_queues+0x228/0x390
[  376.460367][ T7923]  ieee80211_if_change_type+0x447/0x9f0
[  376.466014][ T7923]  ieee80211_change_iface+0x57/0x430
[  376.471472][ T7923]  ? cfg80211_mlme_purge_registrations+0x1f3/0x220
[  376.477962][ T7923]  cfg80211_change_iface+0x789/0xf20
[  376.483235][ T7923]  __cfg80211_wext_siwmode+0x1b7/0x280
[  376.488680][ T7923]  ? __cfg80211_wext_giwfreq+0x7e0/0x7e0
[  376.494300][ T7923]  ? apparmor_capable+0x12e/0x190
[  376.499332][ T7923]  ? full_name_hash+0x8f/0xe0
[  376.504026][ T7923]  ioctl_standard_call+0xdb/0x280
[  376.509048][ T7923]  ? __cfg80211_wext_giwfreq+0x7e0/0x7e0
[  376.514666][ T7923]  ? __cfg80211_wext_giwfreq+0x7e0/0x7e0
[  376.520281][ T7923]  wext_ioctl_dispatch+0x16f/0x460
[  376.525372][ T7923]  ? wext_ioctl_dispatch+0x460/0x460
[  376.530657][ T7923]  ? iw_handler_get_private+0x1e0/0x1e0
[  376.536186][ T7923]  wext_handle_ioctl+0x15b/0x260
[  376.541467][ T7923]  ? call_commit_handler+0xf0/0xf0
[  376.546607][ T7923]  sock_ioctl+0x13b/0x770
[  376.550918][ T7923]  ? sock_poll+0x410/0x410
[  376.555333][ T7923]  ? __fget_files+0x413/0x480
[  376.559998][ T7923]  ? bpf_lsm_file_ioctl+0x5/0x10
[  376.564924][ T7923]  ? security_file_ioctl+0x7d/0xa0
[  376.570028][ T7923]  ? sock_poll+0x410/0x410
[  376.574423][ T7923]  __se_sys_ioctl+0xf1/0x160
[  376.578997][ T7923]  do_syscall_64+0x3b/0xb0
[  376.583393][ T7923]  ? clear_bhb_loop+0x15/0x70
[  376.588136][ T7923]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  376.594012][ T7923] RIP: 0033:0x7ff4c9169ef9
[  376.598424][ T7923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.618526][ T7923] RSP: 002b:00007ff4c75e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  376.626947][ T7923] RAX: ffffffffffffffda RBX: 00007ff4c9305f80 RCX: 00007ff4c9169ef9
[  376.634915][ T7923] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000006
[  376.642880][ T7923] RBP: 00007ff4c91d793e R08: 0000000000000000 R09: 0000000000000000
[  376.650843][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.658809][ T7923] R13: 0000000000000000 R14: 00007ff4c9305f80 R15: 00007ffeb3a1a488
[  376.666767][ T7923]  </TASK>
[  376.669772][ T7923] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  376.677022][ T7923] CPU: 0 PID: 7923 Comm: syz.2.763 Not tainted 5.15.165-syzkaller #0
[  376.685058][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  376.695108][ T7923] Call Trace:
[  376.698365][ T7923]  <TASK>
[  376.701297][ T7923]  dump_stack_lvl+0x1e3/0x2d0
[  376.705956][ T7923]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  376.711564][ T7923]  ? panic+0x860/0x860
[  376.715676][ T7923]  ? panic+0x860/0x860
[  376.719719][ T7923]  ? __local_bh_enable_ip+0xe0/0x1f0
[  376.724978][ T7923]  ? __local_bh_enable_ip+0xe0/0x1f0
[  376.730240][ T7923]  panic+0x318/0x860
[  376.734199][ T7923]  ? __warn+0x16a/0x300
[  376.738326][ T7923]  ? fb_is_primary_device+0xd0/0xd0
[  376.743508][ T7923]  ? __local_bh_enable_ip+0x1b3/0x1f0
[  376.748862][ T7923]  __warn+0x2b2/0x300
[  376.752822][ T7923]  ? __local_bh_enable_ip+0x1b3/0x1f0
[  376.758168][ T7923]  report_bug+0x1b7/0x2e0
[  376.762475][ T7923]  handle_bug+0x3d/0x70
[  376.766609][ T7923]  exc_invalid_op+0x16/0x40
[  376.771087][ T7923]  asm_exc_invalid_op+0x16/0x20
[  376.775913][ T7923] RIP: 0010:__local_bh_enable_ip+0x1b3/0x1f0
[  376.781875][ T7923] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 4a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b e9 d0 fe ff ff e8 3f 00 00 00 eb a2 <0f> 0b e9 02 ff ff ff 48 c7 c1 44 86 e9 8d 80 e1 07 80 c1 03 38 c1
[  376.801474][ T7923] RSP: 0018:ffffc90002e07140 EFLAGS: 00010046
[  376.807528][ T7923] RAX: 0000000000000000 RBX: 1ffff920005c0e2c RCX: 0000000000040000
[  376.815477][ T7923] RDX: ffffc900053f2000 RSI: 0000000000000200 RDI: ffffffff884b2405
[  376.823424][ T7923] RBP: ffffc90002e071f0 R08: dffffc0000000000 R09: fffffbfff1bd2a56
[  376.831387][ T7923] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  376.839332][ T7923] R13: 1ffff1100efa1398 R14: ffffc90002e07180 R15: 0000000000000200
[  376.847285][ T7923]  ? local_bh_enable+0x5/0x20
[  376.851948][ T7923]  ? local_bh_enable+0x5/0x20
[  376.856679][ T7923]  ? _local_bh_enable+0xa0/0xa0
[  376.861528][ T7923]  __dev_queue_xmit+0x1c56/0x3230
[  376.866554][ T7923]  ? dev_queue_xmit+0x20/0x20
[  376.871208][ T7923]  ? __copy_skb_header+0x47b/0x600
[  376.876332][ T7923]  ? __skb_clone+0x454/0x6c0
[  376.880905][ T7923]  ? skb_clone+0x1ee/0x350
[  376.885300][ T7923]  __netlink_deliver_tap+0x4d2/0x760
[  376.890573][ T7923]  netlink_deliver_tap+0x16c/0x180
[  376.895664][ T7923]  netlink_broadcast_filtered+0xc2d/0x11a0
[  376.901453][ T7923]  netlink_broadcast+0x35/0x50
[  376.906715][ T7923]  genlmsg_multicast_netns+0x8e/0xc0
[  376.912069][ T7923]  nl80211_frame_tx_status+0x659/0xa40
[  376.917509][ T7923]  ? cfg80211_control_port_tx_status+0x50/0x50
[  376.923659][ T7923]  ? do_raw_spin_unlock+0x137/0x8b0
[  376.928840][ T7923]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  376.934707][ T7923]  ? _raw_spin_unlock+0x40/0x40
[  376.939533][ T7923]  cfg80211_mgmt_tx_status+0x3a/0x50
[  376.944796][ T7923]  ieee80211_report_used_skb+0x12f6/0x1810
[  376.950584][ T7923]  ? _raw_spin_lock_irqsave+0xac/0x120
[  376.956043][ T7923]  ? ieee80211_handle_filtered_frame+0x750/0x750
[  376.962430][ T7923]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  376.967865][ T7923]  ? _raw_spin_lock+0x40/0x40
[  376.972516][ T7923]  ? skb_queue_purge+0x2b9/0x2e0
[  376.977433][ T7923]  ieee80211_free_txskb+0x1e/0x30
[  376.982434][ T7923]  ieee80211_do_stop+0x10b8/0x1ce0
[  376.987535][ T7923]  ? ieee80211_stop_queues_by_reason+0x1ce/0x250
[  376.993839][ T7923]  ? ieee80211_sdata_stop+0x70/0x70
[  376.999016][ T7923]  ? ieee80211_get_vif_queues+0x228/0x390
[  377.004740][ T7923]  ieee80211_if_change_type+0x447/0x9f0
[  377.010268][ T7923]  ieee80211_change_iface+0x57/0x430
[  377.015531][ T7923]  ? cfg80211_mlme_purge_registrations+0x1f3/0x220
[  377.022013][ T7923]  cfg80211_change_iface+0x789/0xf20
[  377.027301][ T7923]  __cfg80211_wext_siwmode+0x1b7/0x280
[  377.032742][ T7923]  ? __cfg80211_wext_giwfreq+0x7e0/0x7e0
[  377.038377][ T7923]  ? apparmor_capable+0x12e/0x190
[  377.043377][ T7923]  ? full_name_hash+0x8f/0xe0
[  377.048034][ T7923]  ioctl_standard_call+0xdb/0x280
[  377.053038][ T7923]  ? __cfg80211_wext_giwfreq+0x7e0/0x7e0
[  377.058646][ T7923]  ? __cfg80211_wext_giwfreq+0x7e0/0x7e0
[  377.064250][ T7923]  wext_ioctl_dispatch+0x16f/0x460
[  377.069337][ T7923]  ? wext_ioctl_dispatch+0x460/0x460
[  377.074613][ T7923]  ? iw_handler_get_private+0x1e0/0x1e0
[  377.080138][ T7923]  wext_handle_ioctl+0x15b/0x260
[  377.085055][ T7923]  ? call_commit_handler+0xf0/0xf0
[  377.090147][ T7923]  sock_ioctl+0x13b/0x770
[  377.094716][ T7923]  ? sock_poll+0x410/0x410
[  377.099113][ T7923]  ? __fget_files+0x413/0x480
[  377.103769][ T7923]  ? bpf_lsm_file_ioctl+0x5/0x10
[  377.108680][ T7923]  ? security_file_ioctl+0x7d/0xa0
[  377.113768][ T7923]  ? sock_poll+0x410/0x410
[  377.118182][ T7923]  __se_sys_ioctl+0xf1/0x160
[  377.122750][ T7923]  do_syscall_64+0x3b/0xb0
[  377.127147][ T7923]  ? clear_bhb_loop+0x15/0x70
[  377.131800][ T7923]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  377.137704][ T7923] RIP: 0033:0x7ff4c9169ef9
[  377.142097][ T7923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  377.161676][ T7923] RSP: 002b:00007ff4c75e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  377.170066][ T7923] RAX: ffffffffffffffda RBX: 00007ff4c9305f80 RCX: 00007ff4c9169ef9
[  377.178013][ T7923] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000006
[  377.185959][ T7923] RBP: 00007ff4c91d793e R08: 0000000000000000 R09: 0000000000000000
[  377.193906][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.201854][ T7923] R13: 0000000000000000 R14: 00007ff4c9305f80 R15: 00007ffeb3a1a488
[  377.209812][ T7923]  </TASK>
[  377.213037][ T7923] Kernel Offset: disabled
[  377.217694][ T7923] Rebooting in 86400 seconds..