last executing test programs:

19m0.792827465s ago: executing program 32 (id=156):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/179, 0xb3)

18m12.889362498s ago: executing program 33 (id=437):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = gettid()
r4 = getpgrp(0x0)
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000180)={r1, r1, 0x100})

16m43.801930081s ago: executing program 34 (id=1220):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000100000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)

16m16.987437177s ago: executing program 7 (id=1414):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = dup(r1)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec970000f02b00fe8000000000000000000200000000aaff020000000000000000000000000001"], 0xffe)

16m16.59311606s ago: executing program 7 (id=1419):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)

16m16.116491615s ago: executing program 7 (id=1422):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xb7}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

16m15.767350027s ago: executing program 7 (id=1424):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000400)={[{@shortname_lower}, {@shortname_winnt}, {@fat=@nfs}, {@numtail}, {@uni_xlate}, {@shortname_lower}, {@fat=@sys_immutable}, {@numtail}, {@shortname_lower}, {@rodir}, {@utf8no}, {@rodir}, {@rodir}]}, 0x0, 0x2e4, &(0x7f0000000e00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

16m15.433536788s ago: executing program 7 (id=1425):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

16m15.155471147s ago: executing program 7 (id=1427):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0xe, @empty, 0x6}}, [0xb, 0xb, 0xc4e7, 0x8000008000000005, 0x8, 0x42, 0xffffffffffff363b, 0x1, 0xffffffffffffff01, 0x10001, 0xfffffffffffffffd, 0x4, 0x814, 0xfffd, 0x76]}, &(0x7f0000000180)=0x100)

16m14.588177456s ago: executing program 35 (id=1427):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0xe, @empty, 0x6}}, [0xb, 0xb, 0xc4e7, 0x8000008000000005, 0x8, 0x42, 0xffffffffffff363b, 0x1, 0xffffffffffffff01, 0x10001, 0xfffffffffffffffd, 0x4, 0x814, 0xfffd, 0x76]}, &(0x7f0000000180)=0x100)

15m0.858796342s ago: executing program 1 (id=2111):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f00000002c0))
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000300)=@ethtool_perm_addr})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r0, 0xcfa3e000)

15m0.319409989s ago: executing program 1 (id=2114):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

14m59.216273346s ago: executing program 1 (id=2126):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xf}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010)

14m58.48779609s ago: executing program 1 (id=2133):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000a40)=ANY=[@ANYRES16, @ANYBLOB="00ae9c5f56fc6bde148a12de0409332a87859ece002ab33c11d7ac1e2cbf52e7bd0850867b46b10024fa61bcd314f6d293de3e467b21cd05b843fd51230ec48e9f09732ee7c0e6c9d1a24c04b186664ef64177e01fb48cf3356d85d35876d9d51dd89d87bbdb8d5d7d9f8b4b84436d3e53edfc836a156be5bba2798c8861cea7fa5725813211804140b3c09efb1df22c3e40383ae14a102db2b9d4d3a2a70be08c47f005a0fc503a53d61e6c07a42d54d33b5064b71daf5694f038cd2eb8e72b9dea6791acf99f1ac61e5b6137027cad863946c648347b311572dd8b689d1301fb20", @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2e098d82fde6dba5614d96565c673f893729377685a896ee02018f5d0f83d7f921f9712c8702d305c8c91cbfe1493e8598d611be62863fa02b88e886240514fc8d2d62f72dac126481ef08ca8eaf6de", @ANYRES8, @ANYRESDEC, @ANYRES32, @ANYRES8=0x0, @ANYRESOCT=0x0], 0xfe, 0x2cf, &(0x7f0000000480)="$eJzs3cFrE1sUx/HTpq9JU9rkweOBgnrQjW6GNv4BGqQFMaDURtSFMLUTDRmTMhMqEbHZiFv/juLSnaD+A92IG/fuiiC4KSiOdGbSTtqkTdu0ie33A2XuzLk/7m2SlpNAktW7r5+UCq5RMKsymFAZFKnLmkh6fRQaCI+D/nhYoupyafTHlzO3792/kc3lpmZUp7OzlzOqOn7u/dPnb85/rI7eeTv+Li4r6Qer3zNfV4ZXTq3+nn1cdLXoarlSVVPnKpWqOWdbOl90S4bqLdsyXUuL5Z+W01Qv2JWFhZqa5fmx5IJjua6a5ZqWrJpWK1p1amo+MotlNQxDx5Jysg11MCe/PDNjZtuWvVhXd4RDN9LqouNk662L+eUj2BMAAOgzO/f/Qa/frv/f7A730v//377/Hwj7f5Gw/3fX+/9EuAj9fxfUm8526f9xLDhO1kyGf7/N6P8BAAAAAAAAAAAAAAAAAAAAAPgbrHleyvO81PoxvOSfx0UkEbwF3D/v8TZxSKL3vxf52bj/w/MtsSs92i66LPLGvYSI/Woxv5gPjkE9W5Ci2GLJhKTkl/94CAXj6eu5qQn1peWDvRTmlxbzMYk38g3pVvmz/04GeW3O/yPJ6PoZScl/rdfPtMwPy8ULkbwhKfn0UCpiy7z/uN7Mv5hUvXYztyU/4s8DAAAAAOA4MHTDtufvft2fkJDt9SAfeX3A87ylnV4f2PL8ekhOd/IRlQAAAAAA4MDc2rOSaduWs49BXEQOEO/+wPNEer+NmPTHrdE8uCoifbCNoxokRCS4ovuJf9uId5TyIlfqbeYMhd/A0R+3z+6DXv9nAgAAANBtm03/HkKfXx7ijgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOHk6/TywxvxtpUZhh3hkudiR/4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAH/kTAAD//17wFfc=")
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020)

14m58.235458358s ago: executing program 1 (id=2137):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000280)={0x2f}, 0x8)
sendmmsg(r0, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="03", 0x1}], 0x1}}], 0x1, 0x4)

14m57.472500823s ago: executing program 1 (id=2149):
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xffffffffffffff05, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x0, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x0, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x81}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x69e7}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_USERDATA={0x0, 0xc, "434f3a373ca0ef3d9fe6793657e5bdc23f20f223b18d6d3e69ac2ad439f7663b7cce1a23cf9b411b78d4969959bf1b1cd6972ea2e6688613"}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0xea}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x32}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_HANDLE={0x0, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x0, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x0, 0x3, 'batadv0\x00'}, @NFTA_HOOK_HOOKNUM={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x6b7201cf}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)

14m57.027891938s ago: executing program 36 (id=2149):
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xffffffffffffff05, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x0, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x0, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x81}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x69e7}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_USERDATA={0x0, 0xc, "434f3a373ca0ef3d9fe6793657e5bdc23f20f223b18d6d3e69ac2ad439f7663b7cce1a23cf9b411b78d4969959bf1b1cd6972ea2e6688613"}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0xea}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x32}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_HANDLE={0x0, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x0, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x0, 0x3, 'batadv0\x00'}, @NFTA_HOOK_HOOKNUM={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x6b7201cf}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)

13m3.073977203s ago: executing program 8 (id=3174):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
removexattr(&(0x7f0000000180)='./file7/file0\x00', 0x0)

13m2.845230141s ago: executing program 8 (id=3178):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x123202, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c)

13m2.687428896s ago: executing program 8 (id=3182):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084)
sendto$inet(r0, &(0x7f0000000300)="8995b3c271", 0x5, 0x4044880, 0x0, 0x0)

13m0.600305265s ago: executing program 8 (id=3205):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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")
syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x0, 0xc, 0x6, 0xfffffffffffffffd, 0x20000001000, 0x7, 0xfffffffd})
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff)

12m59.85523892s ago: executing program 8 (id=3210):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e80)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
io_submit(0x0, 0x3, &(0x7f0000002080)=[&(0x7f0000001d00)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000001cc0), 0x0, 0x80000000, 0x0, 0x3}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x8, 0x10, 0xffffffffffffffff, &(0x7f0000001d80)="7c43dd59bceeed66d0a6f9aa7ef56be4c7fdd8a36cd6620eb8", 0x19, 0x5, 0x0, 0x2}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000001ec0)="c0cac1054b398828cd955e580c925909ffbc22026bb653c2830bb5e678a8ab603aae6f3f2f6c5656bf12664d3d14fc1f62cbf4d3216b4368f57d3c3cab08c8b0c9068ca9b0f805924f94ad3200fdf77980db6d6155352abb3731a952545eb3d5ae189850ac00d44bcaedcd7c86a8d81215d1701fed53af1b156e09e92b7afdb09b3d97bfab2c6a66f0b9b62ac527e6d9775ea9b8f48ee38ef3c0603c7e592fff4da550d771eb4797fe9fd503571ea30926da95d74924bc00002b1393dd8054ba6493d9b7ac4c03698a51ef9a9d0bfefe93e77570180060f927", 0xd9, 0x2, 0x0, 0x3}])
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x40004f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x40004f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001a00)=ANY=[], 0x610)

12m59.340340917s ago: executing program 8 (id=3215):
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000500)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x700, 0x0, 0x0, 0x14, 0x9, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}})

12m59.122166194s ago: executing program 37 (id=3215):
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000500)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x700, 0x0, 0x0, 0x14, 0x9, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}})

10m3.69542135s ago: executing program 0 (id=4182):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x8001, 0x0, 0x2, 0x0, 0x0)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x1}}], [], 0x6b}})
read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0xaf2)

10m3.275483264s ago: executing program 0 (id=4185):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
shutdown(r0, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff004)

10m1.86675825s ago: executing program 0 (id=4192):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
write$P9_RVERSION(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000)

10m0.978779659s ago: executing program 0 (id=4196):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4")
chdir(&(0x7f0000000240)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents(r1, 0x0, 0x0)
getdents64(r1, 0x0, 0x0)

9m59.996487682s ago: executing program 0 (id=4200):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000240)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x8}}, {@init_itable}, {@block_validity}, {@debug}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x479, &(0x7f0000000dc0)="$eJzs3LtvW9UfAPCvr2M36a/9pZTyaGkhUBAVgqRJH3RgKQKJASQkGIqYQhqqUpeiJgONIggMYUSV2BEjEn8BC2VBwITECjtCilAWCpPRta8fSew8jF2X+PORbJ/jc+xzvvfhe3yurwMYWGPpXS5iX0T8EhGj1ezaCmPVh9urizN/rS7O5KJcfu2PXKXen6uLM7Wqtdf9r5oplzdpd/nNiOlSafZ6lp+Yv/rexFwxy12afXfq3NzpU8eKZ6fOdCXO/Wlfj3xw7ejhl964+crMhZtv/fBV2t99WXlzHN0yVl26LT3R7cb6bH9TOjfUx46wI/mISFdXobL/j0Y+Ruplo/Hix33tHNBT5XJS3tO+eKkM7GLpQB0YRLUDffr9t3ZL8yN3ZvjRdyvnoz6PcTu7VUuGIsnqFLLvSL0wFhEXlv7+/MJwNd+LeQgAgGa3zkfE0xvHfxFJ3N9U7//ZuaEDEXFPRByMiHsj4lBE3BdRqftARDy4w/bXnyHZOP4pj3YU2Dal47/nsnNba8d/tdFfHMhnuf2V+Au5ty+XZk9my+REFPak+cnGWxbWt/HtCz9/2q79+vgvu6Xtp4+NGsnvQ+sm6C5Oz0/H+vN0HVr5KOLIUCP+4Xr8ufqYN23ncEQc6bCNy099ebRd2dbxb6ILg/LyFxFPVtf/UqxZ/42lm6ufn7yx8Mzlq9OXZivnJ8+dPjX57NmpMxPDUZo9OVHbKjb68aflV9u1/6/i74KVW+XY23L7r8d/IDccMXdj4UrlfO3czttY/vWTtt9pOt3+i7nXK+li/S4iJiOKuZej+an3p+fnr081XlvLVx4nq9v/ieOt9/+D0VgSD0VEuhEfi4iHI+KRrO+PRsRjEXF8k/i/f/7xd3Ye/yaz8l2Uxn9xq/Ufzet/y8RCRKx5Jn/lu693Hn9Nuv5PV1Insmdqn3+b2VZPO9qaAQAA4L8nqfwGPpeM19NJMj5e/Q3/odiblK4N1+vuq85/Js0zXbX50MlsbriWn1qXP5XNG3+WH6nkx2eulS72LWogsmt1Wu3/qd/y/e4d0HOu14LBZf8HgMHj+A+Dy/4Pg6vV/v9hH/oB3HlbHP8H5b8AYCAZ/8PgarP/9/TCa+Du4PgPA6nVtfH5iCglaVFaY5sX0m8rMRLdeZ/dlih27Q2/iYildLX1vM+R3BWLbhclCtGyaGjbf2bRYWJPy6J+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xz8BAAD//+380FY=")
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4)
sendmsg$AUDIT_TRIM(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x3f6, 0x400, 0x70bd2a, 0x25dfdbff}, 0x61}, 0x1, 0x0, 0x0, 0x8044}, 0xc014)

9m59.364953783s ago: executing program 0 (id=4203):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000000))
sendmsg(r3, 0x0, 0x4824)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)='=@w', 0x3}, {&(0x7f0000000080)="b282", 0x2}], 0x2, 0x1)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

9m58.747566263s ago: executing program 38 (id=4203):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000000))
sendmsg(r3, 0x0, 0x4824)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)='=@w', 0x3}, {&(0x7f0000000080)="b282", 0x2}], 0x2, 0x1)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

9m8.777007364s ago: executing program 5 (id=4424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

9m8.186919294s ago: executing program 5 (id=4426):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

9m7.646082641s ago: executing program 5 (id=4428):
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_on}, {@index_off}, {@nfs_export_off}]})
r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43)
chdir(&(0x7f00000003c0)='./bus\x00')
unlink(&(0x7f0000000140)='./file0\x00')
mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)

9m7.162004738s ago: executing program 5 (id=4433):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x18f883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xa)

9m6.733758651s ago: executing program 5 (id=4435):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x803, 0x4)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)="f2a3caf1952c87a38acd5773d122cb755867e6eb5188ea264a07a2f38b", 0x1d}], 0x1}}], 0x1, 0x4000)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8001, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x8000001, 0xa, 0x0, 0x5, 0x100, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x8, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

9m6.095529873s ago: executing program 5 (id=4439):
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000003dc0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xe, 0x2}, {0x7, 0xfff3}}}, 0x24}}, 0xc040)
sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}], 0x1}}], 0x2, 0x4008440)

9m5.380214066s ago: executing program 39 (id=4439):
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000003dc0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xe, 0x2}, {0x7, 0xfff3}}}, 0x24}}, 0xc040)
sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}], 0x1}}], 0x2, 0x4008440)

21.606526929s ago: executing program 2 (id=6189):
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020400)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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")
truncate(&(0x7f0000000380)='./file1\x00', 0xbf8)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r1, 0x0, 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

18.582794175s ago: executing program 2 (id=6193):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_clone(0x400, &(0x7f0000000240)="3187a3", 0x3, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x98}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x180000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x80000000000, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
unshare(0xe040400)
socket$inet_tcp(0x2, 0x1, 0x0)

16.775334833s ago: executing program 2 (id=6196):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = dup(r3)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000fffff0000000000005000100060000000900020073797a32000000000500040000000000140007800800124000080000080008400000000014000300686173683a69702c706f72742c6970000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x0)

13.087343661s ago: executing program 2 (id=6201):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5505, &(0x7f0000002480)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000080), 0x7f03)

12.951622416s ago: executing program 6 (id=6202):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x7, 0x30004c0c, 0x0, 0xfffe, 0x8, 0x1ff, 0x0, 0x0, 0x100, 0x100}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x70042, 0x1)
umount2(&(0x7f00000000c0)='./file0\x00', 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000740), 0x80008c, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0)

11.609441558s ago: executing program 6 (id=6205):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000200))
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x2000)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000001700008500000086000000b7080000000000007baaf8ff00000000b50800000000be007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc)
mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000840000/0x2000)=nil)
r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c})

9.98501151s ago: executing program 4 (id=6206):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)

9.98407342s ago: executing program 6 (id=6216):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c)
listen(r0, 0x0)
listen(r1, 0x9)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800000, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
listen(r2, 0x2)
r3 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00')
read$FUSE(r3, &(0x7f0000012400)={0x2020}, 0x2020)

9.483149357s ago: executing program 2 (id=6208):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x40)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

8.799387539s ago: executing program 6 (id=6209):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f00000003c0)=ANY=[@ANYBLOB="726f6469722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c757466383d302c696f636861727365743d63703836362c726f6469722c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c636f6465706167653d3835322c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c726f6469722c696f636861727365743d6b6f69382d722c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c636865636b3d7374726963742c007dda7c45d5aad78cccfdc2ffc29d6a3b6e1b129f9d0266d865d85fd2bfa2ccc210c0dcd127a25f0d6c6d96a9a07afc56b8e1aba9cc2ada1d083e28a51159b7c76a012ba863bd2b72ca09635af17887064bb040ed8e5244d0f8d2cf2a0964bc96503d78291d"], 0x6, 0x2d5, &(0x7f0000000680)="$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")
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x3ea, 0xffffffff, 0x40})
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x2000000)
mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0xc01a2, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0)

8.714124111s ago: executing program 4 (id=6210):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0xc0040, 0x2c)
getdents64(r2, &(0x7f0000000000)=""/49, 0x31)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000000)=""/49, 0x31)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

8.405235111s ago: executing program 4 (id=6212):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)}, 0x20040890)
r1 = socket(0x10, 0x803, 0x0)
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000))
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x40, 0x7, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x20, 0x40, 0x2f, 0x40a}})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='vlan0\x00')
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0)

8.339991243s ago: executing program 3 (id=6213):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x21}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000dc0), &(0x7f0000000040)=0x8)

7.469573901s ago: executing program 6 (id=6214):
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044)
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x31, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000480)=[{&(0x7f0000000940)=""/4092, 0xffc}], 0x1)
splice(r1, 0x0, r3, 0x0, 0x7151, 0x0)

7.446799931s ago: executing program 9 (id=6215):
mbind(&(0x7f0000789000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x56, 0x2)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fgetxattr(r0, 0x0, &(0x7f0000000740)=""/4096, 0x1000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01000100ffffffff00e4cfbb4f0000006a"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880)

7.056564284s ago: executing program 3 (id=6217):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0004}]})
getresgid(0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ac0)=@security={'security\x00', 0x44, 0x4, 0x4f8, 0xffffffff, 0x2f8, 0x0, 0x2f8, 0xffffffff, 0xffffffff, 0x428, 0x428, 0x428, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x228, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x8000000007, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0xe, 0x3}, {0x0, 0x2, 0x1}}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"8b7b", 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x800000, 0x8000, 0x4000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58)
r2 = accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4090}, 0x858)
splice(r3, 0x0, r2, 0x0, 0x808d, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe1b)
r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0)
ppoll(&(0x7f0000000180)=[{r5, 0x2809}], 0x1, 0x0, 0x0, 0x9c)

6.587638029s ago: executing program 4 (id=6218):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e3831000000000001090224"], 0x0)
syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0x23, 0x6, {0x6, 0x31, "ca67cc7e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bridge0\x00'})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ppoll(&(0x7f0000000080)=[{r4, 0x1240}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0xe5, 0x0, 0x2004c8, 0x8000000, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6.521014031s ago: executing program 9 (id=6219):
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x23, 0x5, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0xa, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

6.207217371s ago: executing program 9 (id=6220):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r4, r3}, 0xc)

6.081525185s ago: executing program 6 (id=6221):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x25, 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0)

4.087327419s ago: executing program 9 (id=6222):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)

4.081882529s ago: executing program 3 (id=6232):
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0)
sendfile(r3, r1, 0x0, 0x100000000)

2.639573336s ago: executing program 9 (id=6223):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x3, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}]}, 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0)

2.639321956s ago: executing program 3 (id=6224):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x4, 0x80}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.574876907s ago: executing program 2 (id=6225):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x2c, r2, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108963100000008021100000000000000000000000000640001000006020202020202010182"], 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x44, r5, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x42}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x14}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}}, 0x0)

1.667504496s ago: executing program 9 (id=6226):
timer_create(0x0, 0x0, 0x0)
r0 = inotify_init()
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x1ae)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_clone(0x0, 0x0, 0xfffffcfa, 0x0, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil)
close_range(r0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1.667321926s ago: executing program 4 (id=6227):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x2b, 0x1, 0x0)
listen(r3, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

1.650837787s ago: executing program 3 (id=6228):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020)

149.839285ms ago: executing program 4 (id=6229):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ptrace$getregs(0xc, r1, 0x8000, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
clock_adjtime(0x0, &(0x7f0000000640)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8})
clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6})

0s ago: executing program 3 (id=6230):
socket$inet6(0xa, 0x3, 0x8000000003c)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
close(r1)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$P9_RLERRORu(r3, &(0x7f00000023c0)=ANY=[@ANYBLOB="5300000007000046009d", @ANYRESHEX=r2], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

kernel console output (not intermixed with test programs):

1713][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  483.001173][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  483.031990][T14393] device veth0_macvtap entered promiscuous mode
[  483.070172][T14393] device veth1_macvtap entered promiscuous mode
[  483.173062][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  483.200940][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  483.215858][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.252675][T14393] batman_adv: batadv0: Interface activated: batadv_slave_0
[  483.305366][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  483.344666][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.403188][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  483.466628][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.538952][T14393] batman_adv: batadv0: Interface activated: batadv_slave_1
[  483.646732][T14393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  483.676194][T14393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  483.712245][T14393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  483.760137][T14393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  483.779341][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  483.858848][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  483.921186][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  483.971329][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  484.030786][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  485.111480][ T4280] Bluetooth: hci3: command 0x040f tx timeout
[  485.342184][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.367521][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.432361][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  485.461933][ T4913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.477187][ T4913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.496386][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  485.617855][T14589] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  485.627528][T14589] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  485.636533][T14589] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  485.645766][T14589] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  485.723393][ T4807] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  485.776804][ T4807] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  486.265881][T14606] netlink: 'syz.2.3279': attribute type 4 has an invalid length.
[  486.329261][T14606] netlink: 'syz.2.3279': attribute type 4 has an invalid length.
[  487.208256][ T4280] Bluetooth: hci3: command 0x0419 tx timeout
[  487.378289][T14654] overlayfs: failed to clone upperpath
[  488.546270][T14687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3304'.
[  491.486242][T14754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  492.246206][T14782] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000
[  495.323384][ T4737] libceph: connect (1)[c::]:6789 error -101
[  495.329861][ T4737] libceph: mon0 (1)[c::]:6789 connect error
[  495.374632][T14834] ceph: No mds server is up or the cluster is laggy
[  495.690776][ T4737] libceph: connect (1)[c::]:6789 error -101
[  495.697375][ T4737] libceph: mon0 (1)[c::]:6789 connect error
[  496.970478][T14827] could not allocate digest TFM handle blake2s-256-generic
[  498.159226][ T4727] kernel read not supported for file [userfaultfd] (pid: 4727 comm: kworker/1:11)
[  499.528154][T14917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  499.563643][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  500.024871][T14936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3373'.
[  500.937329][T14958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3384'.
[  501.122124][T14967] tipc: Failed to remove unknown binding: 66,1,1/0:4183729910/4183729912
[  501.182868][T14967] tipc: Failed to remove unknown binding: 66,1,1/0:4183729910/4183729912
[  501.200171][T14971] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3388'.
[  501.212056][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3388'.
[  501.273618][T14969] HTB: quantum of class 80190007 is big. Consider r2q change.
[  501.600480][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  501.607065][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  501.782643][T14987] overlayfs: failed to clone upperpath
[  502.083587][T14997] netlink: 'syz.4.3397': attribute type 4 has an invalid length.
[  502.255726][T15002] netlink: 'syz.4.3397': attribute type 4 has an invalid length.
[  502.814632][T15009] overlayfs: failed to clone upperpath
[  503.397117][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3404'.
[  505.279579][T15068] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3416'.
[  506.038575][T15079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3421'.
[  506.178300][T15081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3420'.
[  506.511315][T15081] HTB: quantum of class 801A0007 is big. Consider r2q change.
[  506.656637][T15094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3425'.
[  506.785571][T15102] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3427'.
[  506.888554][T15099] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3427'.
[  507.499416][T15123] overlayfs: failed to clone upperpath
[  508.699956][T15157] x_tables: unsorted entry at hook 2
[  509.711498][T15181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3453'.
[  510.431542][T15197] netlink: 'syz.2.3456': attribute type 4 has an invalid length.
[  510.564424][T15197] netlink: 'syz.2.3456': attribute type 4 has an invalid length.
[  511.390432][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3465'.
[  515.997202][T15288] overlayfs: failed to clone upperpath
[  516.365563][T15292] netlink: 'syz.9.3480': attribute type 4 has an invalid length.
[  516.421092][T15292] netlink: 'syz.9.3480': attribute type 4 has an invalid length.
[  519.322139][T15344] sch_tbf: burst 19360 is lower than device lo mtu (11337746) !
[  519.404193][T15347] overlayfs: failed to clone upperpath
[  521.347577][T15394] 9pnet_fd: Insufficient options for proto=fd
[  524.809660][T15466] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3524'.
[  525.418590][ T6803] kernel write not supported for file bpf-prog (pid: 6803 comm: kworker/0:18)
[  529.972234][T15563] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  530.027247][T15565] netlink: 'syz.3.3551': attribute type 30 has an invalid length.
[  530.071481][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3551'.
[  530.189567][T15569] netlink: 'syz.3.3551': attribute type 30 has an invalid length.
[  530.237206][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3551'.
[  530.645956][T15577] loop0: detected capacity change from 0 to 256
[  530.686536][T15578] 9pnet_virtio: no channels available for device syz
[  531.716499][T15577] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  533.600819][   T27] audit: type=1326 audit(539.687:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15618 comm="syz.2.3567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd92bb9ce59 code=0x0
[  534.650081][T15636] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3573'.
[  534.700749][T15636] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms
[  534.902377][T15639] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3573'.
[  535.023540][T15639] bond6: Unable to set peer notification delay as MII monitoring is disabled
[  538.642650][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3601'.
[  538.727865][T15734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3601'.
[  539.465826][T15756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3607'.
[  539.660280][T15761] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3607'.
[  539.877406][T15764] overlayfs: failed to clone upperpath
[  539.961956][T15767] overlayfs: failed to clone lowerpath
[  541.016928][T15793] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3616'.
[  541.549326][T15790] infiniband syz1: set active
[  541.610784][T15790] infiniband syz1: added bond0
[  542.013560][T15790] RDS/IB: syz1: added
[  542.030683][T15790] smc: adding ib device syz1 with port count 1
[  542.171485][T15790] smc:    ib device syz1 port 1 has pnetid 
[  543.727292][T15830] tipc: Failed to remove unknown binding: 66,0,0/0:2958823342/2958823343
[  545.048944][T15858] xt_hashlimit: size too large, truncated to 1048576
[  548.264868][T15899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  548.300971][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  549.749320][T15925] netlink: 'syz.2.3664': attribute type 1 has an invalid length.
[  549.834124][T15925] device bond7 entered promiscuous mode
[  549.900163][T15925] 8021q: adding VLAN 0 to HW filter on device bond7
[  550.088394][T15927] device veth11 entered promiscuous mode
[  550.101938][T15927] bond7: (slave veth11): Enslaving as a backup interface with a down link
[  551.745967][T15954] overlayfs: failed to clone upperpath
[  552.249803][T15965] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  552.279707][T15965] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  553.428839][T15983] netlink: 10184 bytes leftover after parsing attributes in process `syz.4.3685'.
[  553.484560][T15983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3685'.
[  554.396565][T15992] ceph: No mds server is up or the cluster is laggy
[  554.595317][T16003] netlink: 'syz.3.3693': attribute type 3 has an invalid length.
[  554.685856][T16004] netlink: 'syz.3.3693': attribute type 10 has an invalid length.
[  555.369089][T16020] overlayfs: failed to clone upperpath
[  556.486461][T16036] IPVS: Scheduler module ip_vs_ not found
[  557.014492][T16041] device bond1 entered promiscuous mode
[  557.560544][T16055] device batadv_slave_1 entered promiscuous mode
[  557.769205][T16056] netlink: 'syz.9.3714': attribute type 10 has an invalid length.
[  557.788175][T16056] team0: Port device netdevsim0 added
[  558.260100][T16054] device batadv_slave_1 left promiscuous mode
[  558.519561][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3717'.
[  559.236392][ T4280] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  559.245908][ T4280] Bluetooth: hci0: Injecting HCI hardware error event
[  559.258055][   T48] Bluetooth: hci0: hardware error 0x00
[  559.964127][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3727'.
[  560.329352][T16091] overlayfs: failed to clone upperpath
[  561.345400][   T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  562.753069][T16131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  562.993353][T16137] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  563.008253][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  563.014731][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  563.068290][T16137] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  563.108612][T16137] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  563.158827][T16137] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  563.221045][T16137] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  563.270920][T16137] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  563.317428][T16137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  563.541607][T16137] team0: Port device team_slave_0 removed
[  563.649758][T16137] team0: Port device team_slave_1 removed
[  563.681415][T16137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  563.689116][T16137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  563.806385][T16137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  563.890381][T16137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.017399][T16148] loop0: detected capacity change from 0 to 4096
[  564.017591][T16137] bond5: (slave veth0_virt_wifi): Releasing active interface
[  564.176768][T16137] bond1: (slave bridge1): Releasing active interface
[  564.249496][T16137] bond2: (slave erspan1): Releasing backup interface
[  564.258127][T16137] device erspan1 left promiscuous mode
[  564.311445][T16137] bond4: (slave gretap1): Releasing active interface
[  564.388297][T16137] bond5: (slave veth9): Releasing active interface
[  564.411612][T16137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  564.451133][T16137] bond7: (slave veth11): Releasing backup interface
[  564.529696][T16139] team0: Port device ip6gre1 added
[  565.894189][T16170] netlink: 'syz.4.3761': attribute type 4 has an invalid length.
[  566.393601][T16180] netlink: 'syz.4.3765': attribute type 1 has an invalid length.
[  566.405958][T16180] netlink: 64403 bytes leftover after parsing attributes in process `syz.4.3765'.
[  567.015822][T16191] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  567.070303][T16191] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  567.156490][T16191] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  567.220760][T16191] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  567.339654][T16191] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  567.407615][T16191] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  567.659922][T16191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  569.343010][T16232] netlink: 'syz.2.3786': attribute type 4 has an invalid length.
[  569.438965][T16235] netlink: 'syz.2.3786': attribute type 4 has an invalid length.
[  572.226276][T16287] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3807'.
[  572.636478][T16291] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  573.154241][T16298] device bridge3 entered promiscuous mode
[  575.054665][    C1] hrtimer: interrupt took 58693 ns
[  581.629217][T16391] overlayfs: failed to clone upperpath
[  582.280133][T16398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  582.449795][T16398] device bridge_slave_0 left promiscuous mode
[  582.471603][T16398] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.614667][T16398] device bridge_slave_1 left promiscuous mode
[  582.683496][T16398] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.889693][T16398] bond0: (slave bond_slave_0): Releasing backup interface
[  583.156950][T16398] bond0: (slave bond_slave_1): Releasing backup interface
[  583.586600][T16398] team0: Port device team_slave_0 removed
[  583.638522][T16398] team0: Port device team_slave_1 removed
[  583.708710][T16398] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  583.776669][T16398] batman_adv: batadv0: Removing interface: batadv_slave_0
[  583.812644][T16398] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  583.848607][T16398] batman_adv: batadv0: Removing interface: batadv_slave_1
[  584.066533][T16399] team0: Port device ip6gre1 added
[  584.208372][T16423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3855'.
[  584.304437][T16423] device team1 entered promiscuous mode
[  584.380595][T16423] 8021q: adding VLAN 0 to HW filter on device team1
[  584.421677][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3855'.
[  584.652073][T16425] device team2 entered promiscuous mode
[  584.717293][T16425] 8021q: adding VLAN 0 to HW filter on device team2
[  586.467191][ T6803] libceph: connect (1)[c::]:6789 error -101
[  586.475258][ T6803] libceph: mon0 (1)[c::]:6789 connect error
[  586.574044][T16463] ceph: No mds server is up or the cluster is laggy
[  586.850610][ T6803] libceph: connect (1)[c::]:6789 error -101
[  586.884964][ T6803] libceph: mon0 (1)[c::]:6789 connect error
[  587.549919][T16478] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  587.562894][T16478] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  587.605464][T16478] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  587.660255][T16478] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  587.667920][T16478] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  587.767289][T16478] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  587.819460][T16478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  587.923928][T16478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  588.316682][T16478] team0: Port device team_slave_0 removed
[  588.528245][T16478] team0: Port device team_slave_1 removed
[  588.602019][T16478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  588.675227][T16478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  588.714592][T16478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  588.923403][T16478] team0: Port device netdevsim0 removed
[  588.996901][T16478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  589.094647][T16482] team0: Port device ip6gre1 added
[  589.587415][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3877'.
[  590.215254][T16511] rdma_rxe: rxe_register_device failed with error -23
[  590.287854][T16511] rdma_rxe: failed to add bond0
[  590.365672][T16511] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3882'.
[  590.702513][T16511] bond0 (unregistering): Released all slaves
[  591.169225][T16499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3876'.
[  592.581566][T16537] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3891'.
[  596.967707][T16590] bond1: (slave erspan1): Releasing active interface
[  597.056133][T16590] device erspan1 left promiscuous mode
[  599.067814][ T4896] wlan1: Trigger new scan to find an IBSS to join
[  601.013350][   T48] Bluetooth: hci3: command 0x0406 tx timeout
[  601.026431][T16648] loop0: detected capacity change from 0 to 128
[  602.675092][T16679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3944'.
[  603.751274][T16697] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  603.836863][T16697] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  603.899187][T16697] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  603.907161][T16697] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  604.153168][T16697] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  604.250925][T16697] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  604.268015][T16697] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  604.318976][T16697] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  604.365324][T16697] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  604.759132][T16697] team0: Port device team_slave_0 removed
[  604.864785][T16697] team0: Port device team_slave_1 removed
[  604.902327][T16697] bond0: (slave veth0_virt_wifi): Releasing active interface
[  605.047474][T16697] bond2: (slave ip6gre1): Releasing backup interface
[  605.076869][T16697] device ip6gre1 left promiscuous mode
[  605.149067][T16697] infiniband syz1: set down
[  605.194391][T16697] bond0: (slave veth9): Releasing active interface
[  605.291419][T16698] team0: Port device ip6gre2 added
[  605.333582][ T4896] infiniband syz1: set down
[  605.361879][ T6803] bond0 speed is unknown, defaulting to 1000
[  605.371423][  T129] bond0 speed is unknown, defaulting to 1000
[  605.379887][ T6802] bond0 speed is unknown, defaulting to 1000
[  606.057055][T16648] loop0: detected capacity change from 128 to 0
[  606.594299][ T4911] wlan1: Trigger new scan to find an IBSS to join
[  606.957657][    C0] blk_print_req_error: 18 callbacks suppressed
[  606.957679][    C0] I/O error, dev loop0, sector 40 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  607.009430][T14393] FAT-fs (loop0): Directory bread(block 40) failed
[  607.276535][    C0] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  607.309910][ T4889] FAT-fs (loop0): bread failed in fat_clusters_flush
[  607.430547][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  607.450450][T14393] FAT-fs (loop0): unable to read boot sector to mark fs as dirty
[  609.025100][ T4889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  609.389276][T16756] rdma_rxe: rxe_register_device failed with error -23
[  609.464716][T16757] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3972'.
[  609.526769][T16756] rdma_rxe: failed to add bond0
[  610.251333][T16768] loop0: detected capacity change from 0 to 512
[  610.735849][T16768] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.3975: bad orphan inode 15
[  610.878598][T16768] ext4_test_bit(bit=14, block=5) = 0
[  610.949678][T16768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  611.708154][T14393] EXT4-fs (loop0): unmounting filesystem.
[  612.345782][T16788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3980'.
[  612.425201][T16788] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3980'.
[  612.459006][T16788] netlink: 'syz.3.3980': attribute type 6 has an invalid length.
[  612.523537][T16788] netlink: 'syz.3.3980': attribute type 5 has an invalid length.
[  612.557332][T16788] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3980'.
[  613.295377][T16805] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3986'.
[  615.424485][ T6803] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  615.869276][ T6803] usb 1-1: Using ep0 maxpacket: 16
[  616.190212][ T6803] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  616.200379][ T6803] usb 1-1: config 0 has no interface number 0
[  616.229395][ T6803] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  616.294046][ T6803] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  616.506557][T16864] xt_hashlimit: size too large, truncated to 1048576
[  616.714489][ T6803] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  616.723618][ T6803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.766237][ T6803] usb 1-1: Product: syz
[  616.770473][ T6803] usb 1-1: Manufacturer: syz
[  616.800463][ T6803] usb 1-1: SerialNumber: syz
[  616.826810][ T6803] usb 1-1: config 0 descriptor??
[  616.877261][T16842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  616.907420][T16842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  617.172753][T16842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  617.225115][T16842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  618.967780][ T6803] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  619.001635][ T6803] asix: probe of 1-1:0.34 failed with error -71
[  619.173512][ T6803] usb 1-1: USB disconnect, device number 2
[  624.450629][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  624.456991][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  627.678234][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  627.728931][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  627.778731][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  627.940910][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  627.968778][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  628.021840][ T4272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  628.305229][T16946] bond0 speed is unknown, defaulting to 1000
[  630.231731][ T4272] Bluetooth: hci3: command 0x0409 tx timeout
[  632.273656][ T4272] Bluetooth: hci3: command 0x041b tx timeout
[  632.659091][T16993] overlayfs: failed to clone upperpath
[  632.913931][T16946] chnl_net:caif_netlink_parms(): no params data found
[  633.424157][T16946] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.455540][T16946] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.535511][T16946] device bridge_slave_0 entered promiscuous mode
[  633.620528][T16946] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.648384][T16946] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.715439][T16946] device bridge_slave_1 entered promiscuous mode
[  633.862390][T16946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  633.932913][T16946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  634.291650][T16946] team0: Port device team_slave_0 added
[  634.336645][T16946] team0: Port device team_slave_1 added
[  634.428184][ T4272] Bluetooth: hci3: command 0x040f tx timeout
[  634.585137][T16946] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.620845][T16946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  634.881233][T16946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.961821][T16946] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.974681][T16946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  635.084633][T16946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  635.274583][T17020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4067'.
[  635.642065][T16946] device hsr_slave_0 entered promiscuous mode
[  635.663819][T16946] device hsr_slave_1 entered promiscuous mode
[  635.711360][T16946] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  635.731711][T16946] Cannot create hsr debugfs directory
[  635.951691][T17031] overlayfs: failed to clone upperpath
[  636.196025][T16946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.438346][T16946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.484171][   T48] Bluetooth: hci3: command 0x0419 tx timeout
[  636.720954][T16946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.899540][T17046] overlayfs: failed to clone upperpath
[  637.021393][T16946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.947718][T16946] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  638.009193][T16946] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  638.052727][T16946] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  638.106110][T16946] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  638.444063][T16946] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.528144][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  638.545243][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  638.692662][T16946] 8021q: adding VLAN 0 to HW filter on device team0
[  638.761294][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  638.790560][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  638.844181][ T4889] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.851464][ T4889] bridge0: port 1(bridge_slave_0) entered forwarding state
[  639.018905][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  639.049261][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  639.099542][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  639.157019][ T4889] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.164366][ T4889] bridge0: port 2(bridge_slave_1) entered forwarding state
[  639.250439][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  639.309933][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  639.392283][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  639.430394][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  639.510556][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  639.546435][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  639.635174][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  639.681710][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  639.721729][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  639.759425][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  639.837252][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  639.884452][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  640.599570][   T27] audit: type=1326 audit(646.731:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.4.4097" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[  640.743000][   T27] audit: type=1326 audit(646.731:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.4.4097" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[  640.864834][   T27] audit: type=1326 audit(646.731:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.4.4097" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[  641.049795][   T27] audit: type=1326 audit(646.731:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.4.4097" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[  641.106351][T17124] device vlan0 entered promiscuous mode
[  641.189466][T17124] device syz_tun entered promiscuous mode
[  641.247608][T17124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  641.276352][   T27] audit: type=1326 audit(646.731:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.4.4097" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[  641.337863][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4101'.
[  641.443292][   T27] audit: type=1326 audit(646.731:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.4.4097" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[  641.561664][   T27] audit: type=1326 audit(646.731:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.4.4097" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[  641.651600][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  641.690807][   T27] audit: type=1326 audit(646.731:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.4.4097" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[  641.739990][   T27] audit: type=1326 audit(646.731:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.4.4097" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[  641.791413][   T27] audit: type=1326 audit(646.731:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.4.4097" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[  641.986964][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  642.008406][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  642.035687][T16946] 8021q: adding VLAN 0 to HW filter on device batadv0
[  642.136878][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  642.157901][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  642.229213][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4103'.
[  642.240236][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  642.261378][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  642.287059][T16946] device veth0_vlan entered promiscuous mode
[  642.312967][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  642.345298][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  642.389025][T16946] device veth1_vlan entered promiscuous mode
[  642.546509][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  642.577763][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  642.630486][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  642.700168][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  642.768738][T16946] device veth0_macvtap entered promiscuous mode
[  642.782690][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  642.826597][T16946] device veth1_macvtap entered promiscuous mode
[  642.984423][T16946] batman_adv: batadv0: Interface activated: batadv_slave_0
[  643.018049][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  643.048754][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  643.108942][T16946] batman_adv: batadv0: Interface activated: batadv_slave_1
[  643.163643][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  643.196055][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  643.247261][T16946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  643.275432][T16946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  643.325472][T16946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  643.358585][T16946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  643.698036][ T4901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.723727][ T4901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.760905][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  643.890938][ T4893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.918751][ T4893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.970911][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  644.251822][T17175] netlink: 'syz.0.4032': attribute type 39 has an invalid length.
[  644.638607][T17184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4116'.
[  645.225809][T17192] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4117'.
[  645.613909][   T27] kauditd_printk_skb: 231 callbacks suppressed
[  645.613927][   T27] audit: type=1326 audit(651.753:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17193 comm="syz.9.4118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[  645.780702][   T27] audit: type=1326 audit(651.753:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17193 comm="syz.9.4118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[  645.969422][   T27] audit: type=1326 audit(651.753:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17193 comm="syz.9.4118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[  646.160404][   T27] audit: type=1326 audit(651.753:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17193 comm="syz.9.4118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[  646.300389][   T27] audit: type=1326 audit(651.783:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17193 comm="syz.9.4118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[  646.449314][   T27] audit: type=1326 audit(651.783:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17193 comm="syz.9.4118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[  646.600535][   T27] audit: type=1326 audit(651.783:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17193 comm="syz.9.4118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[  646.630331][   T27] audit: type=1326 audit(651.783:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17193 comm="syz.9.4118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[  646.681185][T17219] loop0: detected capacity change from 0 to 512
[  646.728710][T17219] EXT4-fs: Ignoring removed i_version option
[  646.769138][   T27] audit: type=1326 audit(651.783:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17193 comm="syz.9.4118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[  646.769353][T17219] EXT4-fs: Ignoring removed oldalloc option
[  646.898989][T17219] EXT4-fs (loop0): Test dummy encryption mode enabled
[  646.991617][T17219] EXT4-fs (loop0): 1 truncate cleaned up
[  646.998710][T17219] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  647.296694][T17219] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  647.313561][T17219] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #15: comm syz.0.4129: mark_inode_dirty error
[  647.357288][T17219] EXT4-fs error (device loop0): ext4_get_max_inline_size:116: inode #15: comm syz.0.4129: can't get inode location 15
[  647.726958][T16946] EXT4-fs (loop0): unmounting filesystem.
[  648.035529][T17245] overlayfs: failed to clone upperpath
[  648.069826][T17248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  648.078202][T17248] IPv6: NLM_F_CREATE should be set when creating new route
[  648.085606][T17248] IPv6: NLM_F_CREATE should be set when creating new route
[  648.766757][T17273] loop0: detected capacity change from 0 to 128
[  648.810683][T17273] EXT4-fs: inline encryption not supported
[  648.829619][T17273] EXT4-fs (loop0): Test dummy encryption mode enabled
[  648.937430][T17273] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  649.611362][T17273] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  649.811319][T16946] EXT4-fs (loop0): unmounting filesystem.
[  651.150896][T17328] loop0: detected capacity change from 0 to 512
[  651.194100][T17328] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  651.271918][T17328] EXT4-fs (loop0): 1 truncate cleaned up
[  651.311793][T17328] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  651.413997][T16946] EXT4-fs (loop0): unmounting filesystem.
[  652.244532][T17349] loop0: detected capacity change from 0 to 256
[  655.641117][T17399] loop0: detected capacity change from 0 to 2048
[  655.777156][T17399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  656.014809][T17399] loop0: detected capacity change from 2048 to 0
[  656.047294][    C0] I/O error, dev loop0, sector 640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  656.088099][    C0] I/O error, dev loop0, sector 640 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  656.154900][    C0] I/O error, dev loop0, sector 640 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  656.371947][    C0] I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  656.502133][T16946] EXT4-fs (loop0): unmounting filesystem.
[  656.557518][   T57] loop: Write error at byte offset 9223372036854775807, length 4096.
[  656.583391][    C0] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  656.593150][    C0] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  656.603360][    C0] Buffer I/O error on dev loop0, logical block 0, lost sync page write
[  656.612567][T16946] EXT4-fs (loop0): I/O error while writing superblock
[  656.623705][   T57] loop: Write error at byte offset 9223372036855037951, length 4096.
[  656.642420][    C0] I/O error, dev loop0, sector 512 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  656.652243][    C0] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  657.328683][ T4893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.466358][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  658.499245][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  658.511142][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  658.527066][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  658.540662][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  658.549419][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  658.713884][ T4893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.983574][ T4893] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.040738][T17440] bond0 speed is unknown, defaulting to 1000
[  659.258634][ T4893] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.634543][   T48] Bluetooth: hci3: command 0x0409 tx timeout
[  662.063336][T17440] chnl_net:caif_netlink_parms(): no params data found
[  662.713236][   T48] Bluetooth: hci3: command 0x041b tx timeout
[  663.687905][T17440] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.706789][T17440] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.741735][T17440] device bridge_slave_0 entered promiscuous mode
[  663.921032][T17440] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.929908][T17440] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.963700][T17440] device bridge_slave_1 entered promiscuous mode
[  664.635889][T17440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  664.805796][   T48] Bluetooth: hci3: command 0x040f tx timeout
[  665.186841][T17440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  665.424480][T17440] team0: Port device team_slave_0 added
[  665.490816][T17440] team0: Port device team_slave_1 added
[  665.669702][T17440] batman_adv: batadv0: Adding interface: batadv_slave_0
[  665.707406][T17440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  665.852900][T17440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  665.917532][ T4893] device hsr_slave_0 left promiscuous mode
[  665.948488][ T4893] device hsr_slave_1 left promiscuous mode
[  665.988222][ T4893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  666.022919][ T4893] batman_adv: batadv0: Removing interface: batadv_slave_0
[  666.096918][ T4893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  666.115194][ T4893] batman_adv: batadv0: Removing interface: batadv_slave_1
[  666.159582][ T4893] device bridge_slave_1 left promiscuous mode
[  666.195655][ T4893] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.279449][ T4893] device bridge_slave_0 left promiscuous mode
[  666.285767][ T4893] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.481640][ T4893] device veth1_macvtap left promiscuous mode
[  666.500256][ T4893] device veth0_macvtap left promiscuous mode
[  666.526241][ T4893] device veth1_vlan left promiscuous mode
[  666.557294][ T4893] device veth0_vlan left promiscuous mode
[  666.870990][ T4272] Bluetooth: hci3: command 0x0419 tx timeout
[  670.742516][T17617] Set syz1 is full, maxelem 65536 reached
[  671.104775][ T4893] team0 (unregistering): Port device team_slave_1 removed
[  671.338035][ T4893] team0 (unregistering): Port device team_slave_0 removed
[  671.568443][ T4893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  671.819579][ T4893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  672.866013][ T4893] bond0 (unregistering): Released all slaves
[  673.141264][T17440] batman_adv: batadv0: Adding interface: batadv_slave_1
[  673.152705][T17440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  673.192551][T17440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  673.244912][T17597] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  673.287637][T17627] device bridge0 entered promiscuous mode
[  673.618353][T17440] device hsr_slave_0 entered promiscuous mode
[  673.744071][T17440] device hsr_slave_1 entered promiscuous mode
[  673.764570][T17440] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  673.794441][T17440] Cannot create hsr debugfs directory
[  677.812376][T17440] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  677.843537][T17440] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  677.991440][T17440] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  678.029542][T17440] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  678.392732][T17724] netlink: 'syz.2.4293': attribute type 1 has an invalid length.
[  678.457118][T17724] 8021q: adding VLAN 0 to HW filter on device bond8
[  678.593309][ T4340] batman_adv: batadv0: Removing interface: ip6gretap1
[  678.900419][T17440] 8021q: adding VLAN 0 to HW filter on device bond0
[  679.028236][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  679.050377][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  679.114774][T17440] 8021q: adding VLAN 0 to HW filter on device team0
[  679.309583][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  679.330265][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  679.404361][ T4901] bridge0: port 1(bridge_slave_0) entered blocking state
[  679.411653][ T4901] bridge0: port 1(bridge_slave_0) entered forwarding state
[  679.493050][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  679.547674][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  679.573653][ T4901] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.580845][ T4901] bridge0: port 2(bridge_slave_1) entered forwarding state
[  679.641531][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  679.901728][ T4340] bond1: (slave vti0): Releasing backup interface
[  679.939003][ T4340] device vti0 left promiscuous mode
[  679.984735][ T4340] bond1: Destroying bond
[  681.570917][ T4340] bond1 (unregistering): Released all slaves
[  681.690321][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  681.706446][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  681.786345][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  681.843316][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  682.023439][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  682.053770][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  682.092567][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  682.139417][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  682.188858][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  682.474610][T17440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  682.529320][T17440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  682.565620][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  682.582185][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  684.367003][ T4340] device hsr_slave_0 left promiscuous mode
[  684.413091][ T4340] device hsr_slave_1 left promiscuous mode
[  684.460492][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_0
[  684.491854][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_1
[  684.897471][ T4340] bond0 (unregistering): (slave veth1): Releasing active interface
[  684.924899][ T4340] bond0 (unregistering): (slave veth1): the permanent HWaddr of slave - 4e:aa:bb:c5:59:98 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  685.829856][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  685.836229][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  685.922761][T17873] 9pnet: p9_errstr2errno: server reported unknown error �@c0x0000000000000006
[  686.265124][ T4340] bond0 (unregistering): (slave veth0_virt_wifi): Releasing active interface
[  686.299613][ T4340] bond0 (unregistering): Released all slaves
[  688.342926][ T4340] team0 (unregistering): Port device team_slave_1 removed
[  688.466034][ T4340] team0 (unregistering): Port device team_slave_0 removed
[  689.741886][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  689.758125][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  689.840122][T17440] 8021q: adding VLAN 0 to HW filter on device batadv0
[  692.060931][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  692.088061][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  692.154345][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  692.182508][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  692.222868][T17440] device veth0_vlan entered promiscuous mode
[  692.243417][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  692.280867][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  692.325836][T17440] device veth1_vlan entered promiscuous mode
[  692.434441][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  692.473208][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  692.516942][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  692.559666][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  692.628272][T17440] device veth0_macvtap entered promiscuous mode
[  692.672800][T17440] device veth1_macvtap entered promiscuous mode
[  692.773633][T17440] batman_adv: batadv0: Interface activated: batadv_slave_0
[  692.805002][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  692.824495][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  692.850691][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  692.882749][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  692.918529][T17440] batman_adv: batadv0: Interface activated: batadv_slave_1
[  692.963720][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  692.995222][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  693.046650][T17440] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  693.080198][T17440] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  693.109352][T17440] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  693.148086][T17440] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  693.470037][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  693.491894][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  693.538539][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  693.610101][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  693.651299][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  693.728978][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  695.395242][T18036] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.4378'.
[  695.551991][T18036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4378'.
[  696.350507][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4384'.
[  696.479844][T18045] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  696.490538][T18045] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  696.501620][T18045] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  696.512477][T18045] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  696.689330][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4384'.
[  696.711179][   T27] audit: type=1326 audit(702.869:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18050 comm="syz.4.4386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff07b99ce59 code=0x0
[  696.772510][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4384'.
[  698.559855][T18074] tipc: Enabled bearer <udp:s>, priority 10
[  703.408108][T18092] device bond0 entered promiscuous mode
[  704.687563][T18119] loop5: detected capacity change from 0 to 4096
[  704.829177][T18119] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  705.286209][T17440] EXT4-fs (loop5): unmounting filesystem.
[  705.302545][T18141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4411'.
[  706.050449][T18143] netlink: 'syz.9.4412': attribute type 1 has an invalid length.
[  706.675510][T18143] 8021q: adding VLAN 0 to HW filter on device bond0
[  706.741659][T18145] device veth0_virt_wifi entered promiscuous mode
[  706.882164][T18145] bond0: (slave veth0_virt_wifi): making interface the new active one
[  706.924622][T18145] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  706.974393][T18147] bond0: (slave veth0_virt_wifi): Releasing active interface
[  709.354021][T18201] ipt_CLUSTERIP: Please specify destination IP
[  710.559953][ T4909] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.809013][ T4909] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.999367][ T4909] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.364317][ T4909] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.417401][T18232] tipc: Failed to remove unknown binding: 66,1,1/9:2019320034/2019320036
[  712.617715][T18253] netlink: 'syz.4.4448': attribute type 4 has an invalid length.
[  712.963566][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  712.979367][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  712.993658][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  713.005322][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  713.083912][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  713.119892][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  713.498813][T18256] bond0 speed is unknown, defaulting to 1000
[  714.036651][T18272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4454'.
[  714.116114][T18272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4454'.
[  715.164809][ T4272] Bluetooth: hci3: command 0x0409 tx timeout
[  716.592865][ T4909] device hsr_slave_0 left promiscuous mode
[  716.630441][ T4909] device hsr_slave_1 left promiscuous mode
[  716.685138][ T4909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  716.733315][ T4909] batman_adv: batadv0: Removing interface: batadv_slave_0
[  716.781098][ T4909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  716.843273][ T4909] batman_adv: batadv0: Removing interface: batadv_slave_1
[  716.899056][ T4909] device bridge_slave_1 left promiscuous mode
[  716.939600][ T4909] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.011366][ T4909] device bridge_slave_0 left promiscuous mode
[  717.044685][ T4909] bridge0: port 1(bridge_slave_0) entered disabled state
[  717.243625][ T4272] Bluetooth: hci3: command 0x041b tx timeout
[  717.421252][ T4909] device veth1_macvtap left promiscuous mode
[  717.439630][ T4909] device veth0_macvtap left promiscuous mode
[  717.447271][ T4909] device veth1_vlan left promiscuous mode
[  717.453242][ T4909] device veth0_vlan left promiscuous mode
[  719.322952][ T4272] Bluetooth: hci3: command 0x040f tx timeout
[  720.483182][ T4909] team0 (unregistering): Port device team_slave_1 removed
[  720.700329][ T4909] team0 (unregistering): Port device team_slave_0 removed
[  720.920453][ T4909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  721.160484][ T4909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  721.401666][ T4272] Bluetooth: hci3: command 0x0419 tx timeout
[  722.679495][ T4909] bond0 (unregistering): Released all slaves
[  722.868774][T18256] chnl_net:caif_netlink_parms(): no params data found
[  722.887257][T18312] netlink: 'syz.4.4461': attribute type 1 has an invalid length.
[  723.229823][T18256] bridge0: port 1(bridge_slave_0) entered blocking state
[  723.309975][T18256] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.347988][T18256] device bridge_slave_0 entered promiscuous mode
[  723.378541][T18256] bridge0: port 2(bridge_slave_1) entered blocking state
[  723.469378][T18256] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.542192][T18256] device bridge_slave_1 entered promiscuous mode
[  723.746166][T18256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  723.818630][T18256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  724.086112][T18256] team0: Port device team_slave_0 added
[  724.109541][T18418] mmap: syz.3.4486 (18418): VmData 49348608 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  724.144214][T18256] team0: Port device team_slave_1 added
[  724.397277][T18256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  724.414347][T18256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  724.505597][T18256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  724.580377][T18256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  724.587575][T18256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  724.739251][T18256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  724.903994][T18256] device hsr_slave_0 entered promiscuous mode
[  724.976303][T18256] device hsr_slave_1 entered promiscuous mode
[  725.039894][T18256] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  725.080427][T18256] Cannot create hsr debugfs directory
[  726.367107][T18452] device bond2 entered promiscuous mode
[  726.654433][T18463] netlink: 'syz.4.4496': attribute type 4 has an invalid length.
[  727.395727][T18476] device bond9 entered promiscuous mode
[  728.858161][T18256] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  728.894412][T18256] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  728.988918][T18256] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  729.069273][T18256] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  729.496444][T18256] 8021q: adding VLAN 0 to HW filter on device bond0
[  729.573605][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  729.593356][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  729.625964][T18256] 8021q: adding VLAN 0 to HW filter on device team0
[  729.682379][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  729.709963][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  729.770871][ T4913] bridge0: port 1(bridge_slave_0) entered blocking state
[  729.778179][ T4913] bridge0: port 1(bridge_slave_0) entered forwarding state
[  729.862584][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  729.899134][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  729.942163][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  729.997462][ T4913] bridge0: port 2(bridge_slave_1) entered blocking state
[  730.004670][ T4913] bridge0: port 2(bridge_slave_1) entered forwarding state
[  730.062175][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  730.132799][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  730.188866][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  730.263173][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  730.335339][T18256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  730.362757][T18256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  730.413793][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  730.424381][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  730.466734][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  730.798494][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  731.019744][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  731.054412][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  731.065694][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  731.111368][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  731.341270][T18550] device bridge0 entered promiscuous mode
[  731.979706][T18564] IPv6: NLM_F_CREATE should be specified when creating new route
[  732.716731][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  732.725266][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  732.739775][T18256] 8021q: adding VLAN 0 to HW filter on device batadv0
[  733.434067][T18589] sctp: [Deprecated]: syz.9.4533 (pid 18589) Use of struct sctp_assoc_value in delayed_ack socket option.
[  733.434067][T18589] Use struct sctp_sack_info instead
[  733.683331][   T27] audit: type=1800 audit(739.867:669): pid=18566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4538" name="bus" dev="ramfs" ino=78235 res=0 errno=0
[  734.717212][T18616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4540'.
[  734.958516][T18616] 8021q: adding VLAN 0 to HW filter on device bond4
[  735.136477][T18618] 8021q: adding VLAN 0 to HW filter on device bond4
[  735.170310][T18618] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[  735.250311][T18618] bond4: (slave vxcan1): Error -95 calling set_mac_address
[  735.616888][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  735.658088][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  735.756904][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  735.770845][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  735.832088][T18256] device veth0_vlan entered promiscuous mode
[  735.859666][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  735.893916][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  735.940063][T18256] device veth1_vlan entered promiscuous mode
[  735.970330][T18636] netlink: 'syz.2.4546': attribute type 2 has an invalid length.
[  736.073975][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  736.098582][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  736.135404][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  736.165877][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  736.220295][T18256] device veth0_macvtap entered promiscuous mode
[  736.275064][T18256] device veth1_macvtap entered promiscuous mode
[  736.342292][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  736.396002][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  736.629608][T18256] batman_adv: batadv0: Interface activated: batadv_slave_0
[  736.650168][T18087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  736.667206][   T27] audit: type=1804 audit(742.849:670): pid=18651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4548" name="file0" dev="ramfs" ino=78431 res=1 errno=0
[  736.726836][T18087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  736.753013][T18256] batman_adv: batadv0: Interface activated: batadv_slave_1
[  736.784811][T18087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  736.796468][T18087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  736.870072][T18256] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  736.889988][T18256] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  736.918478][T18256] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  736.955908][T18256] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  737.525409][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4550'.
[  738.538448][ T4909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  738.594712][ T4909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  738.662193][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  738.924455][ T4901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  738.932409][ T4901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  739.015537][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  739.551535][T18697] device bond5 entered promiscuous mode
[  739.574352][   T27] audit: type=1804 audit(745.760:671): pid=18703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4561" name="bus" dev="ramfs" ino=78559 res=1 errno=0
[  739.716484][   T27] audit: type=1804 audit(745.760:672): pid=18703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4561" name="bus" dev="ramfs" ino=78559 res=1 errno=0
[  740.070390][T18709] netlink: 'syz.6.4562': attribute type 4 has an invalid length.
[  741.960382][T18750] trusted_key: encrypted_key: insufficient parameters specified
[  743.715709][T18774] netlink: 'syz.2.4585': attribute type 1 has an invalid length.
[  744.522360][T18781] 8021q: adding VLAN 0 to HW filter on device bond11
[  744.531412][T18781] bond10: (slave bond11): making interface the new active one
[  744.539577][T18781] bond10: (slave bond11): Enslaving as an active interface with an up link
[  747.235995][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  747.242656][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  747.334577][T18820] device ip6gre2 entered promiscuous mode
[  747.636251][T18851] loop6: detected capacity change from 0 to 512
[  747.784599][T18851] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  747.848339][T18851] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal
[  749.430073][T18862] netlink: 'syz.4.4606': attribute type 4 has an invalid length.
[  749.524643][T18864] netlink: 'syz.4.4606': attribute type 4 has an invalid length.
[  749.791987][T18868] netlink: 'syz.6.4604': attribute type 1 has an invalid length.
[  749.961598][T18868] bond1 (unregistering): Released all slaves
[  751.794172][T18905] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  752.575694][T18927] 9pnet_fd: Insufficient options for proto=fd
[  753.393726][T18941] loop6: detected capacity change from 0 to 512
[  753.495743][T18941] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  753.599841][T18941] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  753.749846][T18941] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  753.866648][T18941] EXT4-fs (loop6): 1 truncate cleaned up
[  753.873638][T18941] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  754.782777][T18256] EXT4-fs (loop6): unmounting filesystem.
[  755.166138][T18976] loop6: detected capacity change from 0 to 512
[  755.271057][T18976] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  755.345223][T18976] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  755.446199][T18976] EXT4-fs (loop6): orphan cleanup on readonly fs
[  755.454575][T18976] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  755.644808][T18976] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  755.834347][T18976] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  755.922289][T18976] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.4634: bg 0: block 40: padding at end of block bitmap is not set
[  756.144423][T18976] EXT4-fs (loop6): Remounting filesystem read-only
[  756.152478][T18976] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  756.277883][T18976] EXT4-fs (loop6): Remounting filesystem read-only
[  756.310685][T18976] EXT4-fs (loop6): 1 truncate cleaned up
[  756.355197][T18976] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  756.582554][T18976] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.4634: bad symlink.
[  756.865314][T18256] EXT4-fs (loop6): unmounting filesystem.
[  760.129957][T19061] xt_hashlimit: max too large, truncated to 1048576
[  760.711421][T19077] loop6: detected capacity change from 0 to 16
[  760.812540][T19077] erofs: Unknown parameter '00000000000000000000017777777777777777777770177777777777777777777718446744073709551615ÿÿÿÿÿÿÿ000000000000000000000x0000000000000000ÿÿÿÿÿÿÿÿÿ18446744073709551615"'
[  762.977300][T19129] trusted_key: encrypted_key: insufficient parameters specified
[  764.105306][T19146] loop6: detected capacity change from 0 to 256
[  766.366723][T19189] trusted_key: encrypted_key: insufficient parameters specified
[  766.445536][T19194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4690'.
[  766.759709][T19196] sch_tbf: burst 88 is lower than device veth15 mtu (1514) !
[  766.808963][T19203] netlink: 'syz.9.4692': attribute type 10 has an invalid length.
[  766.852443][T19205] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4692'.
[  767.625227][T19206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4693'.
[  769.238333][T19246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4705'.
[  770.124936][T19276] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[  771.032816][T19295] IPv6: sit1: Disabled Multicast RS
[  772.054780][T19288] loop6: detected capacity change from 0 to 32768
[  772.139234][T19288] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.4719 (19288)
[  772.278346][T19288] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  772.328130][T19288] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  772.346934][T19288] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  772.417031][T19288] BTRFS info (device loop6): use zstd compression, level 3
[  772.486105][T19288] BTRFS info (device loop6): use no compression
[  772.524556][T19288] BTRFS info (device loop6): using free space tree
[  772.805976][T19288] BTRFS info (device loop6): enabling ssd optimizations
[  775.458405][T18256] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  778.797833][   T27] audit: type=1326 audit(785.000:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19437 comm="syz.2.4751" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd92bb9ce59 code=0x0
[  779.241505][T19446] xt_hashlimit: max too large, truncated to 1048576
[  780.043720][T19395] kernel read not supported for file inotify (pid: 19395 comm: kworker/0:12)
[  781.059454][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4762'.
[  788.403618][   T27] audit: type=1326 audit(794.615:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19599 comm="syz.3.4792" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c2a19ce59 code=0x0
[  789.014026][T19607] netlink: 'syz.6.4794': attribute type 10 has an invalid length.
[  789.034452][T19607] bridge0: port 2(bridge_slave_1) entered disabled state
[  789.042036][T19607] bridge0: port 1(bridge_slave_0) entered disabled state
[  789.366234][T19607] bridge0: port 2(bridge_slave_1) entered blocking state
[  789.375330][T19607] bridge0: port 2(bridge_slave_1) entered forwarding state
[  789.384348][T19607] bridge0: port 1(bridge_slave_0) entered blocking state
[  789.393352][T19607] bridge0: port 1(bridge_slave_0) entered forwarding state
[  789.539908][T19607] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  789.578065][T19608] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4794'.
[  789.626645][T19608] device bridge_slave_1 left promiscuous mode
[  789.698162][T19608] bridge0: port 2(bridge_slave_1) entered disabled state
[  789.780796][T19608] device bridge_slave_0 left promiscuous mode
[  789.804771][T19608] bridge0: port 1(bridge_slave_0) entered disabled state
[  789.979074][T19622] overlayfs: failed to clone upperpath
[  790.109978][T19608] bond0: (slave bridge0): Releasing backup interface
[  790.407911][T19627] device erspan0 entered promiscuous mode
[  790.423660][T19627] device vlan3 entered promiscuous mode
[  790.442493][T19627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready
[  791.087722][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4801'.
[  791.268615][T19642] 8021q: adding VLAN 0 to HW filter on device bond6
[  792.618804][T19674] netlink: 'syz.4.4809': attribute type 10 has an invalid length.
[  792.697144][T19677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4809'.
[  793.139828][T19686] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.4812'.
[  793.189622][T19686] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4812'.
[  793.657160][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4815'.
[  796.082110][ T4340] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  796.424112][T19745] sctp: [Deprecated]: syz.4.4830 (pid 19745) Use of struct sctp_assoc_value in delayed_ack socket option.
[  796.424112][T19745] Use struct sctp_sack_info instead
[  799.096646][T19775] device bridge0 entered promiscuous mode
[  801.286350][T19824] device bond3 entered promiscuous mode
[  801.341943][T19826] device vcan0 entered promiscuous mode
[  801.371810][T19826] bond3: (slave vcan0): The slave device specified does not support setting the MAC address
[  801.434927][T19826] bond3: (slave vcan0): Error -95 calling set_mac_address
[  801.936888][T19844] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  802.389261][T19856] netlink: 'syz.3.4863': attribute type 1 has an invalid length.
[  802.508160][T19859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4864'.
[  802.687495][T19862] 8021q: adding VLAN 0 to HW filter on device bond8
[  802.742254][T19862] bond7: (slave bond8): making interface the new active one
[  802.762619][T19862] bond7: (slave bond8): Enslaving as an active interface with an up link
[  802.833953][T19865] bond7: (slave gretap1): Enslaving as a backup interface with an up link
[  802.862392][T19867] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  802.938066][T19867] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  803.016027][T19856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4863'.
[  803.087997][T19856] 8021q: adding VLAN 0 to HW filter on device bond7
[  803.131575][T19859] device macvlan2 entered promiscuous mode
[  803.162361][T19859] bond1: (slave macvlan2): Error -98 calling set_mac_address
[  804.884591][T19904] netlink: 'syz.3.4873': attribute type 1 has an invalid length.
[  805.019439][T19904] 8021q: adding VLAN 0 to HW filter on device bond9
[  805.176925][T19908] bond9: (slave geneve3): making interface the new active one
[  805.386567][T19908] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  805.455551][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready
[  806.880461][T19908] syz.3.4873 (19908) used greatest stack depth: 19312 bytes left
[  807.021509][T19924] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4877'.
[  808.187809][T19932] netlink: 452 bytes leftover after parsing attributes in process `syz.2.4880'.
[  808.392103][T19952] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[19954] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[19952]
[  809.768941][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  809.775484][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  812.583512][   T27] audit: type=1326 audit(818.807:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20006 comm="syz.9.4900" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7a459ce59 code=0x0
[  817.953950][T20059] netlink: 'syz.9.4910': attribute type 10 has an invalid length.
[  818.021507][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4910'.
[  818.316382][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'.
[  818.374254][T20075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'.
[  818.597785][T20075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'.
[  818.684373][T20075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'.
[  818.799278][T20075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'.
[  818.869730][T20075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'.
[  819.419042][T20102] netlink: 1320 bytes leftover after parsing attributes in process `syz.6.4923'.
[  824.101423][T20162] device bond12 entered promiscuous mode
[  824.185822][T20167] device vcan0 entered promiscuous mode
[  824.259004][T20167] bond12: (slave vcan0): The slave device specified does not support setting the MAC address
[  824.368459][T20167] bond12: (slave vcan0): Error -95 calling set_mac_address
[  826.101513][T20213] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  826.422381][T20219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4953'.
[  827.084782][T20233] netlink: 'syz.3.4957': attribute type 4 has an invalid length.
[  827.426397][T20233] netlink: 'syz.3.4957': attribute type 17 has an invalid length.
[  827.472435][T20233] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  827.929822][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4960'.
[  830.549863][T20316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4982'.
[  830.709699][T20319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4982'.
[  830.968005][T20323] bond4: (slave ip6gretap1): no link monitoring support
[  831.015528][T20328] overlayfs: failed to clone upperpath
[  831.043180][T20323] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  831.243451][T20330] device bond2 entered promiscuous mode
[  831.375832][T20333] device vcan0 entered promiscuous mode
[  831.383525][T20333] bond2: (slave vcan0): The slave device specified does not support setting the MAC address
[  831.402328][T20333] bond2: (slave vcan0): Error -95 calling set_mac_address
[  838.767333][T20370] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4997'.
[  839.409138][T20392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5001'.
[  840.711854][   T48] Bluetooth: hci3: command 0x0406 tx timeout
[  841.017964][T20427] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5009'.
[  842.358269][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5019'.
[  847.816953][T20555] overlayfs: failed to clone upperpath
[  847.944129][T19394] kernel read not supported for file [userfaultfd] (pid: 19394 comm: kworker/0:8)
[  850.410677][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880271d3c00: rx timeout, send abort
[  850.910454][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880271d2000: rx timeout, send abort
[  850.919093][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880271d3c00: abort rx timeout. Force session deactivation
[  851.418828][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880271d2000: abort rx timeout. Force session deactivation
[  851.709355][    C1] vcan0: j1939_tp_rxtimer: 0xffff888078d28000: rx timeout, send abort
[  851.721123][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078d28000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  852.043532][ T4272] Bluetooth: hci1: command 0x2016 tx timeout
[  852.498276][T20628] netlink: 'syz.2.5075': attribute type 3 has an invalid length.
[  852.543340][T20628] netlink: 'syz.2.5075': attribute type 3 has an invalid length.
[  852.603161][T20630] netlink: 'syz.9.5077': attribute type 1 has an invalid length.
[  852.712447][T20633] device bond5 entered promiscuous mode
[  852.743266][T20633] 8021q: adding VLAN 0 to HW filter on device bond5
[  853.726954][T20635] device bridge4 entered promiscuous mode
[  853.785838][   T57] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  853.814358][T20635] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  853.861911][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  853.975737][T20052] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  854.055857][ T4272] Bluetooth: hci1: command 0x0406 tx timeout
[  854.870110][T20655] team0: Port device team_slave_0 removed
[  855.221818][T20664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  856.054817][T20685] tipc: Failed to remove unknown binding: 66,0,0/0:3718831541/3718831542
[  859.367008][T20696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5097'.
[  859.480661][T20700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5097'.
[  859.915294][T20706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5100'.
[  866.430670][T20769] netlink: 'syz.2.5122': attribute type 4 has an invalid length.
[  868.044968][T20797] netlink: 'syz.6.5129': attribute type 10 has an invalid length.
[  868.271748][T20797] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  868.346406][T20797] team0: Failed to send options change via netlink (err -105)
[  868.422355][T20797] team0: Port device netdevsim0 added
[  868.475402][T20809] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  868.509569][T20809] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  868.555150][T20809] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  868.613507][T20809] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  868.659235][T20809] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  868.675409][T20816] overlayfs: failed to clone upperpath
[  868.697304][T20809] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  871.039161][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  871.047400][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  871.809301][T20875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5150'.
[  876.098007][T20920] overlayfs: failed to clone upperpath
[  876.602725][T20926] tmpfs: Bad value for 'nr_inodes'
[  877.763769][T20940] tipc: Failed to remove unknown binding: 66,0,0/0:215321500/215321502
[  877.788377][   T27] audit: type=1326 audit(884.039:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20937 comm="syz.2.5168" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92bb9ce59 code=0x7fc00000
[  877.833687][T20940] tipc: Failed to remove unknown binding: 66,0,0/0:215321500/215321501
[  877.879419][   T27] audit: type=1326 audit(884.069:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20937 comm="syz.2.5168" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd92bb9ce59 code=0x7fc00000
[  877.893799][T20940] tipc: Failed to remove unknown binding: 66,0,0/0:215321500/215321502
[  878.003707][T20940] tipc: Failed to remove unknown binding: 66,0,0/0:215321500/215321501
[  878.350655][T20953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5173'.
[  878.442508][   T27] audit: type=1326 audit(884.690:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20937 comm="syz.2.5168" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92bb9ce59 code=0x7fc00000
[  879.789635][T20994] netlink: 'syz.4.5185': attribute type 10 has an invalid length.
[  879.915583][T20996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5185'.
[  883.008969][T21012] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  883.105128][T21012] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  883.190096][T21012] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  883.316497][T21012] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  883.436413][T21012] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  883.521075][T21012] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  883.551532][T21012] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  886.940369][T21073] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  887.016060][T21073] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  887.181738][T21073] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  887.400798][T21073] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  887.452308][T21073] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  887.540943][T21073] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  888.179997][T21073] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  891.769243][T21108] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  891.898515][T21108] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  892.675083][T21108] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  892.684626][T21108] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  892.694249][T21108] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  892.704072][T21108] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  897.247612][T21220] x_tables: ip_tables: osf match: only valid for protocol 6
[  900.932081][T21258] netlink: 'syz.6.5253': attribute type 1 has an invalid length.
[  901.030182][   T27] audit: type=1804 audit(907.291:679): pid=21261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.5254" name="bus" dev="ramfs" ino=85369 res=1 errno=0
[  901.129590][T21258] 8021q: adding VLAN 0 to HW filter on device bond3
[  901.237946][T21264] bond3: (slave ip6gretap1): making interface the new active one
[  901.262764][   T27] audit: type=1804 audit(907.341:680): pid=21261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.5254" name="bus" dev="ramfs" ino=85369 res=1 errno=0
[  901.378147][T21264] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  904.063407][T21291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5263'.
[  908.425588][T21354] overlayfs: failed to resolve './file1': -2
[  910.199104][T21382] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5285'.
[  910.266749][T21382] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5285'.
[  910.339547][T21382] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5285'.
[  910.408474][T21382] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5285'.
[  912.336418][T21422] device macvlan0 entered promiscuous mode
[  912.413958][T21422] device bond13 entered promiscuous mode
[  912.464426][T21422] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  912.522109][T21422] device bond13 left promiscuous mode
[  914.880967][T21454] dns_resolver: Unsupported server list version (6)
[  919.264463][T21539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5325'.
[  922.911388][   T27] audit: type=1800 audit(929.192:681): pid=21565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5333" name="bus" dev="ramfs" ino=86011 res=0 errno=0
[  924.435667][T21604] netlink: 'syz.2.5342': attribute type 1 has an invalid length.
[  924.498307][T21604] netlink: 'syz.2.5342': attribute type 2 has an invalid length.
[  925.049751][T21623] tipc: Started in network mode
[  925.054752][T21623] tipc: Node identity 080211000001, cluster identity 4711
[  925.140830][T21623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  925.237693][T21626] device veth13 entered promiscuous mode
[  925.714260][T21636] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5351'.
[  926.754066][T19395] tipc: Node number set to 134418688
[  927.447407][T21661] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5358'.
[  927.929927][T21669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5360'.
[  929.904642][T21713] netlink: 'syz.9.5373': attribute type 4 has an invalid length.
[  931.467636][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  931.475282][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  932.254454][T21751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5380'.
[  933.363228][ T4272] Bluetooth: hci1: Invalid handle: 0xff00 > 0x0eff
[  933.860054][T21784] virtio-fs: tag </dev/md0> not found
[  935.192905][T21797] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5392'.
[  935.228668][T21797] device bond0 left promiscuous mode
[  935.270025][T21798] netlink: 'syz.2.5392': attribute type 4 has an invalid length.
[  935.328945][T21798] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5392'.
[  935.933087][T21815] overlayfs: failed to clone upperpath
[  937.069800][T21824] netlink: 'syz.4.5400': attribute type 1 has an invalid length.
[  937.467101][T21824] 8021q: adding VLAN 0 to HW filter on device bond3
[  937.662740][T21831] bond3: (slave ip6gretap0): making interface the new active one
[  937.748452][T21831] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link
[  941.033314][T21876] x_tables: ip_tables: osf match: only valid for protocol 6
[  942.222797][T21892] netlink: 'syz.2.5420': attribute type 1 has an invalid length.
[  942.356640][T21892] 8021q: adding VLAN 0 to HW filter on device bond14
[  942.619428][T21896] bond14: (slave ip6gretap1): making interface the new active one
[  942.689826][T21896] bond14: (slave ip6gretap1): Enslaving as an active interface with an up link
[  946.949660][T21952] x_tables: ip_tables: osf match: only valid for protocol 6
[  952.381312][   T48] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15
[  955.465751][T22045] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  961.206092][T22091] tmpfs: Bad value for 'nr_blocks'
[  962.458733][T22115] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5481'.
[  971.223962][T22206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5505'.
[  975.812962][T22263] dns_resolver: Unsupported server list version (6)
[  976.309569][T22269] netlink: 'syz.2.5523': attribute type 1 has an invalid length.
[  976.679522][T22274] bond15: (slave bridge5): Enslaving as a backup interface with an up link
[  976.802126][T22287] overlayfs: failed to clone upperpath
[  976.812939][T22280] bond15: (slave bridge6): Enslaving as a backup interface with a down link
[  976.862916][T22291] netlink: 'syz.6.5527': attribute type 10 has an invalid length.
[  976.871651][T22291] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5527'.
[  976.884200][T22291] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  979.026228][T22309] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.5534'.
[  979.199889][T22316] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5536'.
[  979.758275][T22334] netlink: 'syz.9.5541': attribute type 1 has an invalid length.
[  979.914650][T22334] 8021q: adding VLAN 0 to HW filter on device bond7
[  980.035766][T22339] bond7: (slave geneve3): making interface the new active one
[  980.146527][T22339] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  980.207629][T18087] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  984.835303][T22408] fuse: Unknown parameter 'group_id00000000000000000000'
[  984.910424][T22408] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5563'.
[  987.608750][T22472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5573'.
[  987.652629][T22472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5573'.
[  989.539371][T22493] device bridge_slave_0 entered promiscuous mode
[  989.546128][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  989.602009][T22493] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  989.666534][T22498] netlink: 'syz.2.5582': attribute type 1 has an invalid length.
[  989.853890][T22498] 8021q: adding VLAN 0 to HW filter on device bond16
[  990.140923][T22508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5584'.
[  992.373048][T22531] netlink: 'syz.2.5590': attribute type 1 has an invalid length.
[  992.537530][T22534] bond17: (slave vxcan1): The slave device specified does not support setting the MAC address
[  992.550155][T22534] bond17: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  992.570152][T22534] bond17: (slave vxcan1): making interface the new active one
[  992.580468][T22534] bond17: (slave vxcan1): Enslaving as an active interface with an up link
[  992.768684][T22531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5590'.
[  992.874621][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  992.882514][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  992.943090][T22531] bond17 (unregistering): (slave vxcan1): Releasing backup interface
[  993.009221][T22531] bond17 (unregistering): Released all slaves
[  996.321262][T22609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5613'.
[  996.373452][T22609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5613'.
[ 1001.461466][   T27] audit: type=1326 audit(1007.771:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22682 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[ 1001.611073][   T27] audit: type=1326 audit(1007.791:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22682 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[ 1001.806846][   T27] audit: type=1326 audit(1007.791:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22682 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[ 1001.937455][   T27] audit: type=1326 audit(1007.791:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22682 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[ 1002.073386][   T27] audit: type=1326 audit(1007.791:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22682 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[ 1002.230725][   T27] audit: type=1326 audit(1007.791:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22682 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[ 1002.356643][   T27] audit: type=1326 audit(1007.791:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22682 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[ 1003.160800][   T27] audit: type=1326 audit(1007.791:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22682 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[ 1003.843507][   T27] audit: type=1326 audit(1007.801:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22682 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[ 1003.874895][   T27] audit: type=1326 audit(1007.801:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22682 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b99ce59 code=0x7ffc0000
[ 1005.534587][T22726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5642'.
[ 1006.360347][T22734] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1008.705850][T22760] xt_addrtype: ipv6 BLACKHOLE matching not supported
[ 1010.660124][T22787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5656'.
[ 1010.726896][T22787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5656'.
[ 1010.736012][T22787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5656'.
[ 1010.835365][T22787] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5656'.
[ 1010.885765][T22794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5656'.
[ 1010.937062][T22787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5656'.
[ 1010.995864][T22793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5658'.
[ 1011.701567][T22796] device batadv_slave_0 left promiscuous mode
[ 1011.846386][T22796] device veth0_virt_wifi left promiscuous mode
[ 1012.170670][T22796] device bridge1 left promiscuous mode
[ 1012.278946][T22796] device geneve2 left promiscuous mode
[ 1012.311846][T22796] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1012.321839][T22796] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1012.330882][T22796] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1012.339818][T22796] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1012.398366][T22796] device bridge3 left promiscuous mode
[ 1012.437251][T22796] device bond2 left promiscuous mode
[ 1012.466434][T22796] device bridge0 left promiscuous mode
[ 1012.508691][T22796] device bond5 left promiscuous mode
[ 1012.514172][T22796] device bridge4 left promiscuous mode
[ 1012.558905][T22796] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1012.570366][T22796] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1012.581454][T22796] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1012.592343][T22796] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1012.670189][T22814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5662'.
[ 1014.927465][T22848] bond0: (slave bond_slave_0): Releasing backup interface
[ 1015.043714][T22848] bond0: (slave bond_slave_1): Releasing backup interface
[ 1015.103737][T22848] team0: Port device team_slave_1 removed
[ 1015.110264][T22848] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1015.123932][T22848] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1015.133813][T22848] team0: Port device netdevsim0 removed
[ 1015.141810][T22848] bond3: (slave ip6gretap1): Releasing active interface
[ 1015.233657][T22851] team0: Mode changed to "loadbalance"
[ 1016.973924][T22868] xt_hashlimit: max too large, truncated to 1048576
[ 1016.984469][T22868] xt_limit: Overflow, try lower: 0/0
[ 1020.578463][ T6803] libceph: connect (1)[c::]:6789 error -22
[ 1020.609996][ T6803] libceph: mon0 (1)[c::]:6789 connect error
[ 1020.776760][T22899] ceph: No mds server is up or the cluster is laggy
[ 1020.875532][T19395] libceph: connect (1)[c::]:6789 error -22
[ 1020.894751][T19395] libceph: mon0 (1)[c::]:6789 connect error
[ 1022.035159][   T27] kauditd_printk_skb: 23 callbacks suppressed
[ 1022.035175][   T27] audit: type=1326 audit(1028.361:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22914 comm="syz.6.5687" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72fdb9ce59 code=0x0
[ 1025.437769][T22959] netlink: 'syz.4.5698': attribute type 1 has an invalid length.
[ 1025.493515][T22959] device bond4 entered promiscuous mode
[ 1025.509516][T22959] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1026.238359][T22968] SET target dimension over the limit!
[ 1026.464522][T22959] bond4: (slave bridge3): making interface the new active one
[ 1026.600138][T22959] device bridge3 entered promiscuous mode
[ 1026.694569][T22959] bond4: (slave bridge3): Enslaving as an active interface with an up link
[ 1026.844992][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[ 1028.812415][T23001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5709'.
[ 1028.928941][T23004] netlink: 'syz.2.5711': attribute type 15 has an invalid length.
[ 1029.212118][T23010] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5713'.
[ 1029.262556][T23010] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5713'.
[ 1030.365204][T23027] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1032.870456][T23057] netlink: 'syz.4.5719': attribute type 9 has an invalid length.
[ 1032.878599][T23057] netlink: 'syz.4.5719': attribute type 7 has an invalid length.
[ 1032.886667][T23057] netlink: 'syz.4.5719': attribute type 8 has an invalid length.
[ 1033.801364][   T27] audit: type=1326 audit(1040.137:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23062 comm="syz.3.5723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2a19ce59 code=0x7fc00000
[ 1033.914808][   T27] audit: type=1326 audit(1040.167:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23062 comm="syz.3.5723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4c2a19ce59 code=0x7fc00000
[ 1034.222753][T23081] overlayfs: failed to clone upperpath
[ 1036.086206][T23111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5736'.
[ 1037.984989][T23135] tmpfs: Bad value for 'nr_blocks'
[ 1044.987895][T23199] netlink: 'syz.3.5759': attribute type 4 has an invalid length.
[ 1045.082181][T23207] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[ 1047.987596][T23235] xt_recent: hitcount (33554435) is larger than allowed maximum (255)
[ 1052.352581][T23256] netlink: 156 bytes leftover after parsing attributes in process `syz.9.5775'.
[ 1054.715576][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.762734][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.871627][T23314] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1056.880780][T23314] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[ 1056.888653][T23314] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[ 1056.896104][T23314] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[ 1056.903882][T23314] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[ 1056.911476][T23314] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[ 1056.919418][T23314] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[ 1056.931323][T23314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1056.978121][T23314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1058.493917][T23329] autofs4:pid:23329:autofs_fill_super: called with bogus options
[ 1058.682441][T23314] bond3: (slave ip6gretap0): Releasing active interface
[ 1058.894736][T23314] bond4: (slave bridge3): Releasing backup interface
[ 1058.903034][T23314] device bridge3 left promiscuous mode
[ 1059.333255][T23343] netlink: 'syz.3.5793': attribute type 1 has an invalid length.
[ 1059.732883][T23343] device bond10 entered promiscuous mode
[ 1059.767593][T23343] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1060.029257][T23359] bond10: (slave bridge6): making interface the new active one
[ 1060.090894][T23359] device bridge6 entered promiscuous mode
[ 1060.134943][T23359] bond10: (slave bridge6): Enslaving as an active interface with an up link
[ 1060.201338][T23358] netlink: 'syz.4.5795': attribute type 1 has an invalid length.
[ 1060.307226][T23358] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1060.448929][T23360] bond5: (slave veth19): Enslaving as an active interface with a down link
[ 1060.565229][T23362] bond5: (slave dummy0): making interface the new active one
[ 1060.643439][T23362] device dummy0 entered promiscuous mode
[ 1060.649407][T23362] bond5: (slave dummy0): Enslaving as an active interface with an up link
[ 1060.748800][T23363] bond5: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1061.089197][T20055] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready
[ 1061.129856][T20055] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[ 1062.467162][T23398] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼
[ 1063.683926][T23417] netlink: 'syz.2.5811': attribute type 1 has an invalid length.
[ 1063.779901][T23417] device bond17 entered promiscuous mode
[ 1063.883122][T23417] 8021q: adding VLAN 0 to HW filter on device bond17
[ 1064.075567][T23417] bond17: (slave bridge8): making interface the new active one
[ 1064.125997][T23417] device bridge8 entered promiscuous mode
[ 1064.167864][T23417] bond17: (slave bridge8): Enslaving as an active interface with an up link
[ 1064.203159][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond17: link becomes ready
[ 1065.911549][T23439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1065.919340][T23439] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[ 1065.940767][T23439] infiniband syz1: set down
[ 1065.963447][T23439] team0: Port device ip6gre2 removed
[ 1065.969871][T23439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1066.009723][T23439] bond7: (slave bond8): Releasing backup interface
[ 1066.016413][T23439] bond7: (slave bond8): the permanent HWaddr of slave - 16:80:97:e6:6e:75 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1066.034888][T23439] bond7: (slave gretap1): making interface the new active one
[ 1066.064202][T23439] bond7: (slave gretap1): Releasing backup interface
[ 1066.113930][T23439] bond9: (slave geneve3): Releasing active interface
[ 1066.148769][T23439] bond10: (slave bridge6): Releasing backup interface
[ 1066.155860][T23439] device bridge6 left promiscuous mode
[ 1066.192018][T19382] bond0 speed is unknown, defaulting to 1000
[ 1066.265557][T23442] team0: Mode changed to "loadbalance"
[ 1078.783718][T23573] Invalid option length (62363) for dns_resolver key
[ 1079.855138][ T4909] device dummy0 left promiscuous mode
[ 1083.447707][T23624] netlink: 'syz.4.5863': attribute type 1 has an invalid length.
[ 1083.958801][T23624] bond6: (slave bridge4): making interface the new active one
[ 1084.029340][T23624] bond6: (slave bridge4): Enslaving as an active interface with an up link
[ 1084.083660][T23629] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5863'.
[ 1084.169120][T23629] device bond6 entered promiscuous mode
[ 1084.224956][T23629] device bridge4 entered promiscuous mode
[ 1084.256446][T23629] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1084.899769][T18087] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[ 1086.459127][T23656] netlink: 'syz.9.5868': attribute type 4 has an invalid length.
[ 1086.477031][T23656] netlink: 'syz.9.5868': attribute type 4 has an invalid length.
[ 1086.885706][T23660] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1087.051534][T23660] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[ 1087.270320][T23660] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[ 1088.021639][T23660] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[ 1088.247484][T23660] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[ 1088.307111][T23660] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[ 1088.318612][T23660] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[ 1088.340418][T23660] bond5: (slave dummy0): Releasing active interface
[ 1088.429293][T23660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1088.537465][T23660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1088.593902][T23660] bond5: (slave veth19): Releasing active interface
[ 1088.635888][T23660] bond6: (slave bridge4): Releasing active interface
[ 1088.656637][T23660] device bridge4 left promiscuous mode
[ 1088.713408][T23668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5872'.
[ 1089.060060][T23692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5877'.
[ 1094.187181][T23738] syz.2.5892[23738] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1094.187613][T23738] syz.2.5892[23738] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1094.760372][T23747] VFS: Mount too revealing
[ 1097.164651][T23780] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1101.466691][T23819] overlayfs: failed to clone upperpath
[ 1110.291977][T23884] bridge0: port 1(vlan4) entered blocking state
[ 1110.362551][T23884] bridge0: port 1(vlan4) entered disabled state
[ 1110.622541][T23884] device vlan4 entered promiscuous mode
[ 1110.652695][T23884] device bond0 entered promiscuous mode
[ 1112.638421][T23920] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5935'.
[ 1113.717013][   T27] audit: type=1326 audit(1119.697:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23930 comm="syz.6.5939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72fdb9ce59 code=0x0
[ 1114.226406][T23947] netlink: 'syz.9.5941': attribute type 4 has an invalid length.
[ 1114.296394][T23948] netlink: 'syz.9.5941': attribute type 4 has an invalid length.
[ 1114.380729][T23947] netlink: 'syz.9.5941': attribute type 4 has an invalid length.
[ 1114.720683][T23961] syz.3.5944[23961] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1114.720800][T23961] syz.3.5944[23961] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1117.234762][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1117.257989][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.552371][T23989] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5948'.
[ 1118.086689][   T27] audit: type=1107 audit(1124.039:719): pid=23976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1122.458384][T24049] tmpfs: Bad value for 'nr_blocks'
[ 1134.411558][T24155] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5988'.
[ 1134.482471][T24155] device ip6gre3 entered promiscuous mode
[ 1136.600471][   T27] audit: type=1326 audit(1142.979:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24170 comm="syz.2.5992" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92bb9ce59 code=0x7ffc0000
[ 1136.731739][   T27] audit: type=1326 audit(1143.019:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24170 comm="syz.2.5992" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92bb9ce59 code=0x7ffc0000
[ 1136.896435][   T27] audit: type=1326 audit(1143.019:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24170 comm="syz.2.5992" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd92bb9ce59 code=0x7ffc0000
[ 1137.040833][   T27] audit: type=1326 audit(1143.019:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24170 comm="syz.2.5992" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92bb9ce59 code=0x7ffc0000
[ 1137.183116][   T27] audit: type=1326 audit(1143.019:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24170 comm="syz.2.5992" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92bb9ce59 code=0x7ffc0000
[ 1137.312689][   T27] audit: type=1326 audit(1143.019:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24170 comm="syz.2.5992" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd92bb9ce59 code=0x7ffc0000
[ 1138.247228][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6008'.
[ 1138.656537][   T27] audit: type=1326 audit(1143.019:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24170 comm="syz.2.5992" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92bb9ce59 code=0x7ffc0000
[ 1138.900713][   T27] audit: type=1326 audit(1143.019:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24170 comm="syz.2.5992" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92bb9ce59 code=0x7ffc0000
[ 1138.936713][T24191] bond0 speed is unknown, defaulting to 1000
[ 1139.107640][   T27] audit: type=1326 audit(1143.019:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24170 comm="syz.2.5992" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fd92bb9ce59 code=0x7ffc0000
[ 1139.293877][   T27] audit: type=1326 audit(1143.019:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24170 comm="syz.2.5992" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92bb9ce59 code=0x7ffc0000
[ 1145.046426][T24270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6016'.
[ 1150.947096][T21779] Bluetooth: hci3: command 0x2016 tx timeout
[ 1152.842390][T24339] overlayfs: failed to clone upperpath
[ 1154.208282][   T27] kauditd_printk_skb: 1 callbacks suppressed
[ 1154.208330][   T27] audit: type=1326 audit(1160.607:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24365 comm="syz.3.6038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2a19ce59 code=0x7ffc0000
[ 1154.326468][   T27] audit: type=1326 audit(1160.708:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24365 comm="syz.3.6038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2a19ce59 code=0x7ffc0000
[ 1154.426671][T24369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6034'.
[ 1154.460526][   T27] audit: type=1326 audit(1160.728:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24365 comm="syz.3.6038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2a19ce59 code=0x7ffc0000
[ 1154.946492][   T27] audit: type=1326 audit(1160.728:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24365 comm="syz.3.6038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4c2a19ce59 code=0x7ffc0000
[ 1155.719572][   T27] audit: type=1326 audit(1160.728:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24365 comm="syz.3.6038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2a19ce59 code=0x7ffc0000
[ 1157.469949][   T27] audit: type=1326 audit(1160.728:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24365 comm="syz.3.6038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2a19ce59 code=0x7ffc0000
[ 1157.830573][   T27] audit: type=1326 audit(1160.728:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24365 comm="syz.3.6038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2a19ce59 code=0x7ffc0000
[ 1158.726683][   T27] audit: type=1326 audit(1160.728:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24365 comm="syz.3.6038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2a19ce59 code=0x7ffc0000
[ 1158.905297][   T27] audit: type=1326 audit(1160.728:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24365 comm="syz.3.6038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2a19ce59 code=0x7ffc0000
[ 1159.025935][   T27] audit: type=1326 audit(1160.738:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24365 comm="syz.3.6038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4c2a19ce59 code=0x7ffc0000
[ 1165.658428][   T27] kauditd_printk_skb: 46 callbacks suppressed
[ 1165.658445][   T27] audit: type=1326 audit(1172.053:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24451 comm="syz.2.6058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd92bb9ce59 code=0x0
[ 1172.088531][T24512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6070'.
[ 1172.150771][T24515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6070'.
[ 1172.226903][T24515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6070'.
[ 1174.502172][T24541] tipc: Failed to remove unknown binding: 66,1,1/134418688:1003445125/1003445127
[ 1174.511952][T24541] tipc: Failed to remove unknown binding: 66,1,1/134418688:1003445125/1003445127
[ 1176.068039][T24564] fuse: Bad value for 'fd'
[ 1180.213453][T24584] device vlan4 left promiscuous mode
[ 1180.219004][T24584] device bond0 left promiscuous mode
[ 1180.317404][T24584] bridge0: port 1(vlan4) entered disabled state
[ 1183.060471][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1183.067060][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1187.766314][T24646] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6098'.
[ 1187.809308][T24646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6098'.
[ 1195.689758][T24728] device batadv_slave_0 entered promiscuous mode
[ 1195.793860][T24728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6119'.
[ 1196.815983][T24740] netlink: 180 bytes leftover after parsing attributes in process `syz.9.6120'.
[ 1197.218018][T24727] device batadv_slave_0 left promiscuous mode
[ 1198.288125][T24749] xt_NFQUEUE: number of total queues is 0
[ 1199.806950][   T27] audit: type=1326 audit(1206.220:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.9.6127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[ 1199.912615][   T27] audit: type=1326 audit(1206.240:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.9.6127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[ 1200.099496][   T27] audit: type=1326 audit(1206.260:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.9.6127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[ 1200.556753][   T27] audit: type=1326 audit(1206.260:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.9.6127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[ 1201.433539][   T27] audit: type=1326 audit(1206.260:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.9.6127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[ 1201.782927][T24784] netlink: 'syz.6.6132': attribute type 1 has an invalid length.
[ 1201.791259][   T27] audit: type=1326 audit(1206.260:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.9.6127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[ 1201.997647][   T27] audit: type=1326 audit(1206.260:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.9.6127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[ 1202.123669][   T27] audit: type=1326 audit(1206.260:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.9.6127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[ 1202.316135][   T27] audit: type=1326 audit(1206.260:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.9.6127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[ 1202.764256][   T27] audit: type=1326 audit(1206.260:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.9.6127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a459ce59 code=0x7ffc0000
[ 1208.777215][T24824] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6139'.
[ 1210.966347][T24871] netlink: 'syz.6.6151': attribute type 2 has an invalid length.
[ 1214.474592][T24904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6159'.
[ 1220.171399][T24929] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6165'.
[ 1230.131602][T25032] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[ 1230.294588][T25033] sch_tbf: burst 6281 is lower than device lo mtu (11337746) !
[ 1243.281643][T25106] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1243.315874][T25106] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[ 1243.420929][T25106] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[ 1243.447629][T25106] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[ 1243.608035][T25106] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[ 1243.635190][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1243.641789][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1243.700652][T25106] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[ 1243.708422][T25106] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[ 1243.806207][T25106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1244.438594][T25106] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1246.169369][   T27] kauditd_printk_skb: 11 callbacks suppressed
[ 1246.169387][   T27] audit: type=1800 audit(1252.603:809): pid=25121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6201" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0
[ 1246.805832][T25146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6207'.
[ 1249.316112][T25180] team0: Port device ip6gre1 removed
[ 1249.331953][T25180] bond4: (slave ip6gretap1): Releasing backup interface
[ 1249.435628][T25180] bond5: (slave bridge4): Removing an active aggregator
[ 1249.502026][T25180] bond5: (slave bridge4): Releasing backup interface
[ 1249.525442][T25189] xt_hashlimit: invalid rate
[ 1249.592101][T25180] bond7: (slave geneve3): Releasing active interface
[ 1254.172285][T25245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1254.387599][T25243] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6223'.
[ 1254.573732][T25239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1361.503514][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1361.510534][    C0] rcu: 	1-...!: (1 GPs behind) idle=1ce4/1/0x4000000000000000 softirq=87707/87716 fqs=0
[ 1361.523036][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P25162/1:b..l P19395/1:b..l P4895/1:b..l P25267/1:b..l
[ 1361.534794][    C0] 	(detected by 0, t=10502 jiffies, g=146201, q=56 ncpus=2)
[ 1361.542376][    C0] Sending NMI from CPU 0 to CPUs 1:
[ 1361.547784][    C1] NMI backtrace for cpu 1
[ 1361.547793][    C1] CPU: 1 PID: 25266 Comm: syz.4.6229 Not tainted syzkaller #0
[ 1361.547809][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1361.547817][    C1] RIP: 0010:check_preemption_disabled+0x18/0x110
[ 1361.547920][    C1] Code: cc cc 48 c7 c7 40 1b df 8a 48 c7 c6 80 1b df 8a eb 00 55 41 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 <65> 8b 05 01 0f d4 75 65 8b 0d a2 64 d4 75 f7 c1 ff ff ff 7f 74 1f
[ 1361.547932][    C1] RSP: 0018:ffffc900001e0aa8 EFLAGS: 00000082
[ 1361.547945][    C1] RAX: 77183ed1a1a6f800 RBX: ffff88802c95a89c RCX: 77183ed1a1a6f800
[ 1361.547956][    C1] RDX: 0000000000000000 RSI: ffffffff8a8c2680 RDI: ffffffff8adf1ba0
[ 1361.547967][    C1] RBP: ffffc900001e0bf0 R08: ffffffff8e1ffbef R09: 1ffffffff1c3ff7d
[ 1361.547977][    C1] R10: dffffc0000000000 R11: fffffbfff1c3ff7e R12: dffffc0000000000
[ 1361.547988][    C1] R13: dffffc0000000000 R14: ffff88802c959dc0 R15: 1ffff9200003c168
[ 1361.547998][    C1] FS:  00007ff07c7a96c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1361.548012][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1361.548022][    C1] CR2: 0000001b3001cff8 CR3: 0000000045963000 CR4: 00000000003506e0
[ 1361.548037][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1361.548046][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1361.548056][    C1] Call Trace:
[ 1361.548063][    C1]  <IRQ>
[ 1361.548072][    C1]  lock_release+0x176/0x920
[ 1361.548108][    C1]  ? debug_object_activate+0x2f8/0x4f0
[ 1361.548150][    C1]  ? do_raw_spin_lock+0x128/0x2f0
[ 1361.548164][    C1]  ? __lock_acquire+0x7d10/0x7d10
[ 1361.548191][    C1]  ? __rwlock_init+0x140/0x140
[ 1361.548204][    C1]  ? debug_object_activate+0x4f0/0x4f0
[ 1361.548224][    C1]  _raw_spin_unlock_irqrestore+0x6d/0x120
[ 1361.548261][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1361.548278][    C1]  ? advance_sched+0x6cc/0x970
[ 1361.548339][    C1]  debug_object_activate+0x2f8/0x4f0
[ 1361.548359][    C1]  enqueue_hrtimer+0x30/0x3f0
[ 1361.548395][    C1]  __hrtimer_run_queues+0x685/0xd50
[ 1361.548415][    C1]  ? taprio_free_sched_cb+0x190/0x190
[ 1361.548437][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[ 1361.548457][    C1]  hrtimer_interrupt+0x3c5/0x9c0
[ 1361.548484][    C1]  __sysvec_apic_timer_interrupt+0x153/0x5a0
[ 1361.548528][    C1]  sysvec_apic_timer_interrupt+0x9b/0xc0
[ 1361.548545][    C1]  </IRQ>
[ 1361.548550][    C1]  <TASK>
[ 1361.548554][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1361.548573][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[ 1361.548590][    C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 7f ee 20 f7 65 8b 05 80 60 ca 75 85 c0 74 3c 48 c7 04 24 0e 36
[ 1361.548602][    C1] RSP: 0018:ffffc900046f7c80 EFLAGS: 00000206
[ 1361.548615][    C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 77183ed1a1a6f800
[ 1361.548626][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 0000000000000001
[ 1361.548636][    C1] RBP: ffffc900046f7d10 R08: ffffffff8cb470c3 R09: 1ffffffff1968e18
[ 1361.548646][    C1] R10: dffffc0000000000 R11: fffffbfff1968e19 R12: dffffc0000000000
[ 1361.548657][    C1] R13: dffffc0000000000 R14: ffffffff8cb470c0 R15: 1ffff920008def90
[ 1361.548676][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1361.548691][    C1]  ? memcpy+0x3c/0x60
[ 1361.548726][    C1]  ? timekeeping_update+0x3ec/0x460
[ 1361.548761][    C1]  do_settimeofday64+0x5ac/0x760
[ 1361.548781][    C1]  ? resize+0x1478/0x2740
[ 1361.548806][    C1]  ? __x64_sys_clock_settime+0x25a/0x2a0
[ 1361.548821][    C1]  ? get_device_system_crosststamp+0x900/0x900
[ 1361.548840][    C1]  ? resize+0x1478/0x2740
[ 1361.548859][    C1]  ? security_settime64+0x77/0x90
[ 1361.548903][    C1]  ? do_sys_settimeofday64+0x15f/0x250
[ 1361.548940][    C1]  __x64_sys_clock_settime+0x25a/0x2a0
[ 1361.548954][    C1]  ? lock_chain_count+0x20/0x20
[ 1361.548972][    C1]  ? exit_itimers+0x560/0x560
[ 1361.548987][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1361.549004][    C1]  do_syscall_64+0x4c/0xa0
[ 1361.549029][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1361.549046][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1361.549064][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1361.549082][    C1] RIP: 0033:0x7ff07b99ce59
[ 1361.549096][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1361.549107][    C1] RSP: 002b:00007ff07c7a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3
[ 1361.549121][    C1] RAX: ffffffffffffffda RBX: 00007ff07bc15fa0 RCX: 00007ff07b99ce59
[ 1361.549131][    C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000
[ 1361.549141][    C1] RBP: 00007ff07ba32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1361.549150][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1361.549158][    C1] R13: 00007ff07bc16038 R14: 00007ff07bc15fa0 R15: 00007ffe9e53f2a8
[ 1361.549181][    C1]  </TASK>
[ 1361.549779][    C0] task:syz.9.6226      state:R  running task     stack:25232 pid:25267 ppid:11325  flags:0x00004000
[ 1362.042184][    C0] Call Trace:
[ 1362.045496][    C0]  <TASK>
[ 1362.048545][    C0]  __schedule+0x11d1/0x40e0
[ 1362.055817][    C0]  ? mark_lock+0x94/0x320
[ 1362.060220][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1362.066324][    C0]  ? __sched_text_start+0x8/0x8
[ 1362.071210][    C0]  ? lock_chain_count+0x20/0x20
[ 1362.076095][    C0]  ? preempt_schedule_irq+0xb0/0x160
[ 1362.081433][    C0]  preempt_schedule_irq+0xbb/0x160
[ 1362.086668][    C0]  ? preempt_schedule_notrace+0x120/0x120
[ 1362.092439][    C0]  ? rcu_is_watching+0x11/0xa0
[ 1362.097355][    C0]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[ 1362.103224][    C0]  irqentry_exit+0x63/0x70
[ 1362.107687][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1362.113695][    C0] RIP: 0010:lock_acquire+0x240/0x4a0
[ 1362.119052][    C0] Code: 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 4b c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 25 28 00 00 00 <48> 3b 84 24 c0 00 00 00 0f 85 f8 00 00 00 48 8d 65 d8 5b 41 5c 41
[ 1362.138791][    C0] RSP: 0018:ffffc90004c6ec00 EFLAGS: 00000206
[ 1362.144991][    C0] RAX: 51bf125256bc5900 RBX: 0000000000000000 RCX: 51bf125256bc5900
[ 1362.152997][    C0] RDX: 0000000000000000 RSI: ffffffff8a8c2b20 RDI: ffffffff8adf1ba0
[ 1362.161000][    C0] RBP: ffffc90004c6ed10 R08: dffffc0000000000 R09: 1ffffffff215f448
[ 1362.169006][    C0] R10: dffffc0000000000 R11: fffffbfff215f449 R12: 0000000000000000
[ 1362.177176][    C0] R13: 1ffff9200098dd8c R14: 0000000000000246 R15: dffffc0000000000
[ 1362.185377][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1362.190794][    C0]  ? verify_lock_unused+0x140/0x140
[ 1362.196024][    C0]  ? folio_lock_anon_vma_read+0x22/0x590
[ 1362.201777][    C0]  folio_lock_anon_vma_read+0x3e/0x590
[ 1362.207261][    C0]  ? folio_lock_anon_vma_read+0x22/0x590
[ 1362.212917][    C0]  ? folio_get_anon_vma+0x360/0x360
[ 1362.218156][    C0]  rmap_walk_anon+0x7e/0x6b0
[ 1362.222881][    C0]  folio_referenced+0x39c/0x580
[ 1362.227760][    C0]  ? mm_find_pmd+0x130/0x130
[ 1362.232380][    C0]  ? __might_sleep+0xd0/0xd0
[ 1362.237062][    C0]  ? folio_referenced+0x580/0x580
[ 1362.242217][    C0]  ? folio_get_anon_vma+0x360/0x360
[ 1362.247701][    C0]  ? folio_evictable+0x1c/0x320
[ 1362.252619][    C0]  ? folio_mapped+0xd3/0x4d0
[ 1362.257254][    C0]  shrink_folio_list+0xfed/0x7aa0
[ 1362.262340][    C0]  ? reclaim_clean_pages_from_list+0xb30/0xb30
[ 1362.268602][    C0]  ? __lock_acquire+0x13cf/0x7d10
[ 1362.273781][    C0]  ? verify_lock_unused+0x140/0x140
[ 1362.279109][    C0]  ? memcg_rstat_updated+0x49/0x100
[ 1362.284376][    C0]  ? __mod_memcg_lruvec_state+0x1a7/0x270
[ 1362.290133][    C0]  reclaim_folio_list+0x85/0x2e0
[ 1362.295123][    C0]  reclaim_pages+0x569/0x680
[ 1362.299747][    C0]  ? folio_isolate_lru+0xed0/0xed0
[ 1362.304890][    C0]  ? do_raw_spin_unlock+0x11d/0x230
[ 1362.310230][    C0]  madvise_cold_or_pageout_pte_range+0x1859/0x1ec0
[ 1362.316866][    C0]  ? folio_put+0xd0/0xd0
[ 1362.321136][    C0]  ? __lock_acquire+0x7d10/0x7d10
[ 1362.326198][    C0]  walk_pgd_range+0xbbc/0x13c0
[ 1362.331022][    C0]  __walk_page_range+0x133/0x590
[ 1362.335988][    C0]  ? __vma_adjust+0x1cd0/0x1cd0
[ 1362.340924][    C0]  walk_page_range+0x3b9/0x590
[ 1362.345721][    C0]  ? page_mapped_in_vma+0x7e0/0x7e0
[ 1362.351041][    C0]  ? __vma_adjust+0x1cd0/0x1cd0
[ 1362.357336][    C0]  ? mlock_page_drain_local+0x75/0x490
[ 1362.362934][    C0]  do_madvise+0x1c3a/0x3490
[ 1362.367490][    C0]  ? do_vfs_ioctl+0x1be7/0x1d40
[ 1362.372425][    C0]  ? madvise_set_anon_name+0x420/0x420
[ 1362.378057][    C0]  ? __lock_acquire+0x7d10/0x7d10
[ 1362.383175][    C0]  ? slab_free_freelist_hook+0x131/0x1a0
[ 1362.388976][    C0]  ? verify_lock_unused+0x140/0x140
[ 1362.394205][    C0]  ? tomoyo_path_number_perm+0x4fb/0x650
[ 1362.400113][    C0]  ? __kmem_cache_free+0xb6/0x1f0
[ 1362.405204][    C0]  ? tomoyo_path_number_perm+0x205/0x650
[ 1362.411002][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1362.417021][    C0]  ? lock_chain_count+0x20/0x20
[ 1362.421998][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 1362.427926][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1362.433159][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1362.439182][    C0]  ? lock_chain_count+0x20/0x20
[ 1362.444157][    C0]  __x64_sys_madvise+0xa2/0xb0
[ 1362.448977][    C0]  do_syscall_64+0x4c/0xa0
[ 1362.453451][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1362.458174][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1362.462900][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1362.468916][    C0] RIP: 0033:0x7fa7a459ce59
[ 1362.473366][    C0] RSP: 002b:00007fa7a5502028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[ 1362.481994][    C0] RAX: ffffffffffffffda RBX: 00007fa7a4816180 RCX: 00007fa7a459ce59
[ 1362.489991][    C0] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000
[ 1362.497989][    C0] RBP: 00007fa7a4632d6f R08: 0000000000000000 R09: 0000000000000000
[ 1362.505983][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1362.513984][    C0] R13: 00007fa7a4816218 R14: 00007fa7a4816180 R15: 00007ffd11bed268
[ 1362.522004][    C0]  </TASK>
[ 1362.525053][    C0] task:kworker/u4:13   state:R  running task     stack:24368 pid:4895  ppid:2      flags:0x00004000
[ 1362.535961][    C0] Workqueue: bat_events batadv_nc_worker
[ 1362.541822][    C0] Call Trace:
[ 1362.545171][    C0]  <TASK>
[ 1362.548214][    C0]  __schedule+0x11d1/0x40e0
[ 1362.552756][    C0]  ? mark_lock+0x94/0x320
[ 1362.557215][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1362.563229][    C0]  ? __sched_text_start+0x8/0x8
[ 1362.568193][    C0]  ? lock_chain_count+0x20/0x20
[ 1362.573095][    C0]  ? preempt_schedule_irq+0xb0/0x160
[ 1362.578436][    C0]  preempt_schedule_irq+0xbb/0x160
[ 1362.583588][    C0]  ? preempt_schedule_notrace+0x120/0x120
[ 1362.589343][    C0]  ? rcu_is_watching+0x11/0xa0
[ 1362.594144][    C0]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[ 1362.599990][    C0]  irqentry_exit+0x63/0x70
[ 1362.604432][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1362.610436][    C0] RIP: 0010:lock_acquire+0xde/0x4a0
[ 1362.615657][    C0] Code: 0c 0f 83 a2 01 00 00 45 89 f4 41 c1 ee 06 4a 8d 3c f5 e8 fb 1f 8e be 08 00 00 00 e8 0c 46 6f 00 4c 0f a3 25 6c ad bb 0c 73 0d <e8> 9d 32 08 00 84 c0 0f 84 2e 02 00 00 48 c7 c0 a4 30 20 8e 48 c1
[ 1362.635289][    C0] RSP: 0018:ffffc90003667ac0 EFLAGS: 00000257
[ 1362.641383][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81644e74
[ 1362.649377][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e1ffbe8
[ 1362.657373][    C0] RBP: ffffc90003667bc8 R08: ffffffff8e1ffbef R09: 1ffffffff1c3ff7d
[ 1362.665453][    C0] R10: dffffc0000000000 R11: fffffbfff1c3ff7e R12: 0000000000000000
[ 1362.673450][    C0] R13: 1ffff920006ccf64 R14: 0000000000000000 R15: dffffc0000000000
[ 1362.681541][    C0]  ? lock_acquire+0xd4/0x4a0
[ 1362.686216][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1362.691619][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1362.697811][    C0]  ? batadv_nc_worker+0xce/0x600
[ 1362.702780][    C0]  batadv_nc_worker+0xeb/0x600
[ 1362.707573][    C0]  ? batadv_nc_worker+0xce/0x600
[ 1362.712717][    C0]  ? process_one_work+0x7b0/0x1160
[ 1362.718023][    C0]  process_one_work+0x8a2/0x1160
[ 1362.723002][    C0]  ? worker_detach_from_pool+0x240/0x240
[ 1362.728846][    C0]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1362.734087][    C0]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1362.739840][    C0]  ? kthread_data+0x4b/0xc0
[ 1362.744380][    C0]  worker_thread+0xaa2/0x1270
[ 1362.749298][    C0]  kthread+0x29d/0x330
[ 1362.753455][    C0]  ? worker_clr_flags+0x1a0/0x1a0
[ 1362.758522][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1362.763159][    C0]  ret_from_fork+0x1f/0x30
[ 1362.767703][    C0]  </TASK>
[ 1362.770764][    C0] task:kworker/0:12    state:R  running task     stack:23536 pid:19395 ppid:2      flags:0x00004000
[ 1362.781673][    C0] Workqueue: events_power_efficient gc_worker
[ 1362.787912][    C0] Call Trace:
[ 1362.791220][    C0]  <TASK>
[ 1362.794176][    C0]  __schedule+0x11d1/0x40e0
[ 1362.798818][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1362.804834][    C0]  ? __sched_text_start+0x8/0x8
[ 1362.809715][    C0]  ? lock_chain_count+0x20/0x20
[ 1362.814603][    C0]  ? preempt_schedule_irq+0xb0/0x160
[ 1362.819926][    C0]  preempt_schedule_irq+0xbb/0x160
[ 1362.825162][    C0]  ? preempt_schedule_notrace+0x120/0x120
[ 1362.831044][    C0]  ? rcu_is_watching+0x11/0xa0
[ 1362.835865][    C0]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[ 1362.841799][    C0]  irqentry_exit+0x63/0x70
[ 1362.846332][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1362.852348][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2c/0x60
[ 1362.858599][    C0] Code: 04 24 65 48 8b 0d 84 e8 7f 7e 65 8b 15 85 e8 7f 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c <8b> 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48
[ 1362.878240][    C0] RSP: 0018:ffffc9000da3fad8 EFLAGS: 00000246
[ 1362.884339][    C0] RAX: ffffffff8872497a RBX: 0000000000024ff3 RCX: ffff8880304d1dc0
[ 1362.892337][    C0] RDX: 0000000000000000 RSI: ffffffff8adf1b80 RDI: ffffffff8adf1b40
[ 1362.900421][    C0] RBP: ffffc9000da3fc30 R08: ffffffff90afa2cf R09: 1ffffffff215f459
[ 1362.908461][    C0] R10: dffffc0000000000 R11: fffffbfff215f45a R12: dffffc0000000000
[ 1362.916499][    C0] R13: ffff8880748023c0 R14: 0000000000000001 R15: 1ffffffff1901e40
[ 1362.924603][    C0]  ? gc_worker+0xbfa/0x13c0
[ 1362.929152][    C0]  gc_worker+0xbfa/0x13c0
[ 1362.933528][    C0]  ? gc_worker+0x25e/0x13c0
[ 1362.938064][    C0]  ? init_conntrack+0x11a0/0x11a0
[ 1362.943289][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1362.948520][    C0]  ? process_one_work+0x7b0/0x1160
[ 1362.953756][    C0]  process_one_work+0x8a2/0x1160
[ 1362.958739][    C0]  ? worker_detach_from_pool+0x240/0x240
[ 1362.964418][    C0]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1362.969561][    C0]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1362.975132][    C0]  ? kthread_data+0x4b/0xc0
[ 1362.979682][    C0]  worker_thread+0xaa2/0x1270
[ 1362.984500][    C0]  ? __kthread_parkme+0x162/0x1c0
[ 1362.989565][    C0]  kthread+0x29d/0x330
[ 1362.993653][    C0]  ? worker_clr_flags+0x1a0/0x1a0
[ 1362.998703][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1363.003319][    C0]  ret_from_fork+0x1f/0x30
[ 1363.007870][    C0]  </TASK>
[ 1363.010997][    C0] task:syz.6.6209      state:R  running task     stack:24368 pid:25162 ppid:18256  flags:0x00004000
[ 1363.021813][    C0] Call Trace:
[ 1363.025114][    C0]  <TASK>
[ 1363.028072][    C0]  __schedule+0x11d1/0x40e0
[ 1363.032723][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1363.038733][    C0]  ? __sched_text_start+0x8/0x8
[ 1363.043613][    C0]  ? lock_chain_count+0x20/0x20
[ 1363.048489][    C0]  ? folio_put+0xd0/0xd0
[ 1363.052836][    C0]  ? folio_alloc+0x51/0x60
[ 1363.057719][    C0]  ? preempt_schedule_irq+0xb0/0x160
[ 1363.063038][    C0]  preempt_schedule_irq+0xbb/0x160
[ 1363.068187][    C0]  ? preempt_schedule_notrace+0x120/0x120
[ 1363.074023][    C0]  ? rcu_is_watching+0x11/0xa0
[ 1363.078819][    C0]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[ 1363.084653][    C0]  irqentry_exit+0x63/0x70
[ 1363.089271][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1363.095280][    C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x2c/0x80
[ 1363.102172][    C0] Code: 04 24 65 48 8b 15 24 e5 7f 7e 65 8b 0d 25 e5 7f 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 <8b> 8a f8 15 00 00 83 f9 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc
[ 1363.122236][    C0] RSP: 0018:ffffc90004686fd8 EFLAGS: 00000246
[ 1363.128413][    C0] RAX: ffffffff8a1b1f6a RBX: 0000000000000000 RCX: 0000000000000000
[ 1363.136405][    C0] RDX: ffff8880750d3b80 RSI: 0000000000000003 RDI: 0000000000000003
[ 1363.144398][    C0] RBP: ffffc90004687110 R08: ffff8880750d3b80 R09: 0000000000000003
[ 1363.152389][    C0] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f72fbdf7fff
[ 1363.160485][    C0] R13: 0000000000000001 R14: 0000000000000003 R15: 0000000000000000
[ 1363.168490][    C0]  ? mtree_load+0x5ea/0xa70
[ 1363.173053][    C0]  mtree_load+0x5ea/0xa70
[ 1363.177411][    C0]  ? folio_mark_dirty+0x13/0x330
[ 1363.182467][    C0]  ? mtree_load+0x100/0xa70
[ 1363.187092][    C0]  ? mas_alloc_nodes+0x890/0x890
[ 1363.192054][    C0]  ? simple_write_end+0x264/0x500
[ 1363.197229][    C0]  __get_user_pages+0x268/0xec0
[ 1363.202354][    C0]  ? populate_vma_page_range+0x2b0/0x2b0
[ 1363.208043][    C0]  ? up_write+0x1bb/0x420
[ 1363.212415][    C0]  ? get_dump_page+0xe7/0x680
[ 1363.217134][    C0]  ? down_read_killable+0x1cc/0x340
[ 1363.222364][    C0]  ? generic_file_write_iter+0x1d9/0x2e0
[ 1363.228044][    C0]  get_dump_page+0x190/0x680
[ 1363.232684][    C0]  ? fault_in_readable+0x1f0/0x1f0
[ 1363.238095][    C0]  ? dump_user_range+0x1b4/0x850
[ 1363.243141][    C0]  ? iov_iter_bvec+0x4a/0x1f0
[ 1363.247888][    C0]  dump_user_range+0x123/0x850
[ 1363.252698][    C0]  ? dump_skip+0x40/0x40
[ 1363.257069][    C0]  ? dump_emit+0x74/0xe0
[ 1363.261563][    C0]  ? dump_emit+0xa2/0xe0
[ 1363.265851][    C0]  ? elf_core_dump+0x2a8b/0x35d0
[ 1363.270843][    C0]  elf_core_dump+0x30a6/0x35d0
[ 1363.275678][    C0]  ? load_elf_binary+0x2800/0x2800
[ 1363.280921][    C0]  ? verify_lock_unused+0x140/0x140
[ 1363.286245][    C0]  ? mas_next_entry+0xe41/0xed0
[ 1363.291253][    C0]  ? rcu_read_lock_any_held+0xb0/0x130
[ 1363.296744][    C0]  ? 0xffffffffff600000
[ 1363.300935][    C0]  ? getname_kernel+0x142/0x2f0
[ 1363.305825][    C0]  do_coredump+0x165b/0x22f0
[ 1363.310479][    C0]  ? nfs_stat_to_errno+0x190/0x190
[ 1363.315701][    C0]  ? lock_chain_count+0x20/0x20
[ 1363.320762][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1363.325999][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1363.331232][    C0]  get_signal+0x10aa/0x1350
[ 1363.335874][    C0]  arch_do_signal_or_restart+0xc4/0x1350
[ 1363.341584][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1363.346473][    C0]  ? get_sigframe_size+0x10/0x10
[ 1363.351448][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1363.357471][    C0]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1363.362966][    C0]  exit_to_user_mode_loop+0x70/0x110
[ 1363.368462][    C0]  exit_to_user_mode_prepare+0xee/0x180
[ 1363.374134][    C0]  irqentry_exit_to_user_mode+0x5/0x30
[ 1363.379617][    C0]  exc_page_fault+0x88/0x100
[ 1363.384236][    C0]  asm_exc_page_fault+0x22/0x30
[ 1363.389119][    C0] RIP: 0033:0x7f72fda52b27
[ 1363.393564][    C0] RSP: 002b:00007f72fe9c7120 EFLAGS: 00010202
[ 1363.399663][    C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f72fdb9ce59
[ 1363.407665][    C0] RDX: 00007f72fe9c7140 RSI: 00007f72fe9c7270 RDI: 000000000000000b
[ 1363.415657][    C0] RBP: 00007f72fdc32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1363.423737][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1363.432078][    C0] R13: 00007f72fde16038 R14: 00007f72fde15fa0 R15: 00007ffe6a419688
[ 1363.440527][    C0]  </TASK>
[ 1363.443574][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g146201 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1363.454962][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1363.464949][    C0] rcu: RCU grace-period kthread stack dump:
[ 1363.470854][    C0] task:rcu_preempt     state:R  running task     stack:26864 pid:16    ppid:2      flags:0x00004000
[ 1363.482045][    C0] Call Trace:
[ 1363.485433][    C0]  <TASK>
[ 1363.488477][    C0]  __schedule+0x11d1/0x40e0
[ 1363.493056][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 1363.499067][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1363.505154][    C0]  ? __sched_text_start+0x8/0x8
[ 1363.510133][    C0]  ? __mod_timer+0x91e/0xd00
[ 1363.514755][    C0]  schedule+0xb9/0x180
[ 1363.518852][    C0]  schedule_timeout+0x184/0x2d0
[ 1363.523829][    C0]  ? console_conditional_schedule+0x40/0x40
[ 1363.529842][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1363.535849][    C0]  ? update_process_times+0x1b0/0x1b0
[ 1363.541258][    C0]  ? prepare_to_swait_event+0x335/0x350
[ 1363.546895][    C0]  rcu_gp_fqs_loop+0x303/0x1340
[ 1363.551799][    C0]  ? rcu_gp_kthread+0x3b0/0x3b0
[ 1363.556675][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1363.562886][    C0]  ? rcu_gp_init+0x14e0/0x14e0
[ 1363.567690][    C0]  ? rcu_gp_cleanup+0xb41/0xc90
[ 1363.572585][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1363.577822][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1363.583311][    C0]  rcu_gp_kthread+0x99/0x3b0
[ 1363.587935][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1363.593097][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1363.599068][    C0]  ? __kthread_parkme+0x162/0x1c0
[ 1363.604227][    C0]  kthread+0x29d/0x330
[ 1363.608499][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1363.613722][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1363.618336][    C0]  ret_from_fork+0x1f/0x30
[ 1363.622809][    C0]  </TASK>
[ 1363.625941][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1363.632284][    C0] CPU: 0 PID: 18089 Comm: kworker/u4:5 Not tainted syzkaller #0
[ 1363.639941][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1363.650195][    C0] Workqueue: events_unbound toggle_allocation_gate
[ 1363.656732][    C0] RIP: 0010:smp_call_function_many_cond+0xea2/0x1290
[ 1363.663497][    C0] Code: 00 00 00 41 8b 1f 89 de 83 e6 01 31 ff e8 f6 f6 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 82 f3 0a 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 67 f3 0a
[ 1363.683334][    C0] RSP: 0018:ffffc9000398f800 EFLAGS: 00000293
[ 1363.689524][    C0] RAX: ffffffff81779349 RBX: dffffc0000000000 RCX: ffff88802b8e3b80
[ 1363.697675][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1363.705763][    C0] RBP: ffffc9000398f960 R08: ffffffff90afa247 R09: 1ffffffff215f448
[ 1363.713843][    C0] R10: dffffc0000000000 R11: fffffbfff215f449 R12: 1ffff110171e81d9
[ 1363.721935][    C0] R13: ffff8880b8e3bbc0 R14: 0000000000000001 R15: ffff8880b8f40ec8
[ 1363.729940][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1363.739001][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1363.745610][    C0] CR2: 00007ffe9e53eff8 CR3: 000000000c88e000 CR4: 00000000003506f0
[ 1363.753702][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1363.761698][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1363.769692][    C0] Call Trace:
[ 1363.772996][    C0]  <TASK>
[ 1363.775946][    C0]  ? kmem_cache_alloc_bulk+0x11a/0x4e0
[ 1363.781455][    C0]  ? text_poke_sync+0x20/0x20
[ 1363.786250][    C0]  ? smp_call_function_many+0x30/0x30
[ 1363.791752][    C0]  ? kmem_cache_alloc_bulk+0x11a/0x4e0
[ 1363.797255][    C0]  ? text_poke+0x90/0x90
[ 1363.801536][    C0]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1363.807738][    C0]  ? text_poke_loc_init+0x10f/0x5b0
[ 1363.813077][    C0]  ? text_poke_sync+0x20/0x20
[ 1363.817782][    C0]  on_each_cpu_cond_mask+0x3b/0x80
[ 1363.823018][    C0]  ? kmem_cache_alloc_bulk+0x11a/0x4e0
[ 1363.828503][    C0]  text_poke_bp_batch+0x2b7/0x850
[ 1363.833819][    C0]  ? arch_jump_label_transform_apply+0xe/0x20
[ 1363.839916][    C0]  ? text_poke_loc_init+0x5b0/0x5b0
[ 1363.845144][    C0]  ? arch_jump_label_transform_queue+0x76/0xd0
[ 1363.851330][    C0]  text_poke_finish+0x16/0x30
[ 1363.856121][    C0]  arch_jump_label_transform_apply+0x13/0x20
[ 1363.862127][    C0]  static_key_enable_cpuslocked+0x11f/0x240
[ 1363.868133][    C0]  static_key_enable+0x16/0x20
[ 1363.872915][    C0]  toggle_allocation_gate+0xba/0x470
[ 1363.878225][    C0]  ? show_object+0xa0/0xa0
[ 1363.882664][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1363.888700][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1363.894313][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1363.899559][    C0]  ? process_one_work+0x7b0/0x1160
[ 1363.904699][    C0]  process_one_work+0x8a2/0x1160
[ 1363.909676][    C0]  ? worker_detach_from_pool+0x240/0x240
[ 1363.915425][    C0]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1363.920477][    C0]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1363.926485][    C0]  ? kthread_data+0x4b/0xc0
[ 1363.931030][    C0]  worker_thread+0xaa2/0x1270
[ 1363.935938][    C0]  kthread+0x29d/0x330
[ 1363.940036][    C0]  ? worker_clr_flags+0x1a0/0x1a0
[ 1363.945172][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1363.949789][    C0]  ret_from_fork+0x1f/0x30
[ 1363.954256][    C0]  </TASK>