last executing test programs:

5m39.924360064s ago: executing program 3 (id=18):
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040f14c89f5b7d366c866e0200000000d7"], 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100003"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000500), 0x8, 0x5042)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x42, &(0x7f0000000100), 0x1, 0x4b6, &(0x7f0000000540)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x1000000000000})
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r2, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x7fff, 0x0, 0x0, 0x18, 0x8, "c44ef8682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba010000004488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "66e443de6543005b310600059a6d0369862b72c1f9f4900a2346c4dd62ad8050", [0x6, 0x1]}})
syz_80211_inject_frame(0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r5], 0x7)

5m35.544280336s ago: executing program 3 (id=28):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f7", 0xb}], 0x1}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3})
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2)
sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c00)={0x1190, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x10ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "e65b2b3874c99dae5fbf7f1a78107d79eb257097a737aa188cc93677819bc5623094508d775facb21e871b0dd48492f8a53f9ff30dd14816753068e89adac759029d9930f8a937829ad5d6ed871ca18f71b486c802ce2dc833bdb108710d9a4fad1007361c1539c5b88021ff57582a09f725de284e3fb65e2c3c904250de303c37391783361996a95a467e2100d0a1b93d00644407cce1752baeead525489e62d580d2c70ffef19e42d4d641c371bcf5bdb1712df210729e5a20c0f7b54b7c0088c3fdcba283acc96fdb185b128b40582a0dfdbdeb0629d8b696fdd9c468dfb4fc4929fb688ea9"}, @ETHTOOL_A_BITSET_VALUE={0xff3, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}]}]}, 0x1190}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000)
r5 = socket$alg(0x26, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

5m26.525015017s ago: executing program 3 (id=40):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000002b40), 0x109040, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r0, 0x0, 0x0, 0x0)

5m25.47990667s ago: executing program 3 (id=43):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4c", 0xe}], 0x1}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x4001)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}], 0x0, 0x0, '\x00', 0x0, 0x2})
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x180, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c46"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c00)={0x1190, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x10ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "e65b2b3874c99dae5fbf7f1a78107d79eb257097a737aa188cc93677819bc5623094508d775facb21e871b0dd48492f8a53f9ff30dd14816753068e89adac759029d9930f8a937829ad5d6ed871ca18f71b486c802ce2dc833bdb108710d9a4fad1007361c1539c5b88021ff57582a09f725de284e3fb65e2c3c904250de303c37391783361996a95a467e2100d0a1b93d00644407cce1752baeead525489e62d580d2c70ffef19e42d4d641c371bcf5bdb1712df210729e5a20c0f7b54b7c0088c3fdcba283acc96fdb185b128b40582a0dfdbdeb0629d8b696fdd9c468dfb4fc4929fb688ea9"}, @ETHTOOL_A_BITSET_VALUE={0xff3, 0x4, "e4989ff47a3eaabab18b41a8baf5f91019f873dd0587195ec709cb5fedcabe494e29d2afcedb528e03f06127b6348d4101c7bbe320ec982582ffcd1d4bbf72a4264e4c77698b5f4e382d1df59ef3416c301722e90cf5a56f54009b220752d1f3164332ac5b9aadbee4e8b363e9c6305cb84b336454f4bdeabac6203c967fb529e46054e5452f3b12c46f666b06ae39b43ffaaf56033602bf5746adf779c770e0f1987c3f389f097eca469b400987c05a5677a517c1c98fcd483ac77e038c627751473fdb345e9da2a0be3c9406385d92195022f4d1b7d3efd737b233aa8538793f335ae19d341804f5ac0250704656f4d25197ddad815f4a0a2329f8c77323f2ecf3608d82779a4715a52402de8590f00b392634f4bdd3df03aa029a74285b94b54429883b68e4d70e67cf087e36d0131f64d0b6e67e547a0cacdb1f570df59b2451f15d16766ca684ba75ea857f75f48093834d4b0558cb00653e48a01d075a83ec1aab44b44b05759cc65941198192a4fd2a8ed7940e775c924773e3043f41da323759d5ec9bf494d352ea730d0150ee4690e836d2a69bbe768ded871482bd46389feef6f643d3076dbbde5f62624aa84a9b19d86998b2b64ce07017f70fddfce5e8599d89cb5dfa116e842f0bfe7011a0f54fe26a7bb2db6676bdb60590b6bd234747d3fa0513a63564eec4edd517aa7b6b94f8216b329a9e0648cf924726958c8f9842f2892b2b804fd8e29d986b914fc9e05f49879839b4e8f9d9204901ad00f6d8a622b0e352a104235b6cdea710b6cded85060b6783d7d6aa21d9485c53788fddb4a3695ba3e563721d31d15e7bd94d3a8612defb507fa7d78959c35a8c1f87fd8cf5c00956420df93d992e2053f6ca1f335d13130f41fbb4240063cfbb76adf86929221267bdbafea870454008951557456e121ef462f19ea9e6b2279f3abefa749520dfc9dc6c2ce1c880b2d56921ace49c6698d4a290c2303155788edaf7f6b485277c9a6aafca364853c7282f4a3d4e5b7386241b4e0403e535e2d166863a7e1e7d3f2142d27d6befbacfb16c7a4a7dd5b95c59542cdeb634cec7af26baa333019f357836de0fd08fed9d9e3aa35161d1bfd266f3fe52654514eab2d02bfd3efdec27577549ef3236b36251cff4c88f7a12871b05d4afa894e51dda6b976a229d0a0013852847f178ce1badea563c5f14ed747ecddd2be54024be52db67d0b1215af4a17582855d1a49ce93b3547cba5fd4c3b458dd8222992de3657d7e05881734227adf4a79ebf41382348c2d9376bea32fbf43dd110b9e0c6a92f9f22ccdb21496d8694c771d1fda33bb22880900cc60214508240c4ae923049fef1466602fa2dc349afcd1dcb2c3f976b868ce8bc2fc830fe2dd92ce76892df95f891f29ea4f085a7605c11205362429624ebc0d25ba3bb6af2f5991eead0008505b7041c1a9c1ca15338c40187f76114b40930dcbb4568159a6f507df6de983869441db2d2fb9e3d5772e5e64b5268aa8200e68b9b0c78ecd33fff5c2ed70869816c7c3958db9bd80f3989c7dab909845ff8f8b8dd0a59e1acef7da399e64a73d83992ee84019f5cda5bfc87eabb50e1bbbc71938ba93a8896f5ba5a61bf7cf8a8cfa9e6b432765b87c39ee00413e99326b030b947fb8f9518a6b53345066fbc36ae237e019471422b6fa43ddfc8843df33793eacad65167f40d6d0e0796753431f14fec0d5b763530162a6780977fa690f47c37442b21d304f21d13f817f7023b1d2f8add56441c9e0860314b691c30fb7cf8d3b08436a4b14aea7c42cd55fe85cc2522e05831822dc112212a1826a2afd3f0da85a7d645bd864bd95900d510841f41934484ec03124dd3d5ba79518cdc3e39c4fb353d431d97b139447868d11e39f2ce5f9d209604a9eefaf929edd00e3949d7df2e70dea5ea9cd6b445bb653e933912bc249db7d2a9e87c7d73c9f4b8fe46aedbaa70cf3200b05dd685e863919fac406601109f178a19259096cc6c3531b74b1f25f2c396824cdd41d1ba9319d8da11694933e22987be3214ffe515200c9f624559814f14d9b3a679b4f63abafe59a98a04edb98059ef01aae0d1aa7bfda74d384891040d523fcd45b6ff4786e985ff896bd9167aa3a15e4c2b60b9eb628919cdc94a71edbec24107e488bb53b8581a2d2e0acb7c232ce82f8e7f7e7f15c8eb34f4a8b3d2f26fa461640727e905e6eb0848e18612cb416818f06c6bad7cdb716b857319ec3f253c788a1f5a2ededcdeb570dc9d9f3eb8049b870e8dbcef1c5e721af8139badc8d9daf9aef38712555463ebdfc40769ec24ce156a6f7e7f6ff458243a28273317ef4b05ac3338c6a1199a79e7c83227f6fba04f306a64782b474cdefdf3df16d637fc98f05dd8b17b1026aafdf20d205a27864b661a8c0291a71bb33ad0c1973b48285f73cd4eb2eb2373e4a66bab1151ae51da96a1f72c91d552c49d84af4ab440b117d98a6a25e45b7fbe9428c79c3233d12f5a2607c7a2cdeb1900e1bd3fd6f664bbd7a7680ed09aae3f1b65d181fc92098c228bf2e7a312f08e860ed8d931248e94b2a16fbf01c646ab29e8d9fd59e04bd10a981c654d2b162a1bf6782fef39700ff2a778ccf7a8c7af9211224c7070a584cb0ac717b29d52ec259de889ab0ad1e1759459e201fca6a3ad15e4bdcef2e1f19c5ec787fcdafc3a318d5a43434535a335fe8eb002b47944275c660b18c258ac928871628b9c5ed7cd055ff3513b6419105ea467468ad47d74f2adce11cf61ea690e9712994a3ea779a3dca9f70e7d31b0a4bdb5154ddba97b1d7aaa03a8cbf2542cbb8551c6dde4b3e86c5b6f38343a3e2841a36d07e66363a51ec86044e78d841ebc2170f38162823aab047984159bb263fed1d90c171efb2a797b71fbf649d0f7a4077125e42f7e203f952866570fc6dd8a4c913d17ee380658c7eaec15503f3eaf170c4a1ee7af373b09ca9fa73b2891819254d686ef40969a297e3b54e0c9ee09f1d6c57202217fdff49d78553e401ec31f31efbb5db791c10571da99415fe4ba22dd46e15f67701844522056e9298554ae72f523edb044489bab5c35a20ed36b5a216e39fc5e138b9b47915c67f6b1675e41311d3b756c3417f7ecc272a6dd3db0b5b8a5dc8110906697ecc910edf010ec76fd360e7b810dc8cec523d7912f141db96d6215d1a25082995eae68358cf35caefc30c5ace60063571f7774a4a2a06ceab9d6d45742cbf5006cedd7db6cd02731979e8f648f5b052bffcf8ba64e768088f4cf51ffccb1a4c3aa5b6a071faa9f2ae50a9a8b194191438a30edb1cdfa2c21e401a572e7511d18ac03feeaa95493728c08a30076d37d4d9bbf0151205924604fff87c0fdd6611fd2e73c9821ecea8c84f48d780301cc86a6f477ba33066632326e316c907af239f06f4bf2cfa3cbe913e21b38317d62249df1618135faa1d9891f3fd4387437d52b6c384987a062f2e90dcc0d806ffc0bfd161772cdc919eb942d32c95df5ef22c9de380700cf4fad6c6c42f265ce6f5979ee656fb5880dc77337678bc5d4510df46859d61fef16d222a1996247bd7954e1fb30f0a6ff7ef8fdc3fdcb0ce961aebb3897c35909e6e7cf275bd70500ddc4625756d6728f6971603f182331295203a931802064039bce54ae4a6f6a76c54d8f9caf96c2a50c5608c9be72f774a0c977c47f15f36167240857755a81afb151f029981da6cac586f3ee8addbb7b4cf1532771754ff23230776eeab23a79586d162cc8344c395e0070b472bda7982a22dda6cb55448fa7a34a10a647c55855ee4f50ae7aa1e6a006080b9152733b37f1dbd91a0302d85f8860785fd66e51e2633a1c26164379873874fb3f4bdd74fd74612b663635ed0af996f1e4d48a6367b9bc1b2e2cc1239c869ecbc3b30aba208fb06307eac463faf2eb50e7bbd4618fbd4396672d316a00750c1f0fbcedd3050aa149f1f257f540a006294969ff14d15e613def650109cf9f8d9bb87c676b98ca9d733546f76ef666a77ebaa93109e8172770d2af4481bcf9306a8ffccffd0013ebe7c23c8a2f440886ce66a4836acbc040ec7921b6604c210aecbeb82686a02e3fc804f4edcdfc6d2583530a38b0a74cc0eeddbfebd08b270fd95eb763df3cf2b87033d7dedb64431b0b4f8bff48ebb463cb58894f60a19ba4ff938d98d27101e23e3b47cf35592c0eab0c0835e088c3b0dd2a4a5c37389f77f8495dbcdf71c55a76b458033e060c2cf263324d9a0ba478e8e5a93cac1f3d57d85e755f8c9d6829081dfdd08d1cb078aa03f5206ceece8121e43dd5663d84122b3520200c36bb198bdfeecda46cf982d82c802ce9eef220b8bccfcb61d0d4cd48f2975fee47ab2ca944e02440b73bfbd08e2e4ac6c512a8f2e2eadef526799e0efa708d8207ec7f8156f28e5b53dfaac9ccc7ba3941e21f2cd8793c091841dc8489639de50976f8e8afc23bad581b4866b3b3b9045b127586ae7774574f6cac4da684238ac4508e410f31c377aedfc55a48c92e292cbc9f6816f68ceb216d0cd97e46f0a0125378e2e15beab694b9e32a5a253d5a34612b7a5bd21294cc5d1a8988c78372e1ebfb22427a4c8e67b00e62aa73c7053c87f212aaf081514e86c0afb01ada77ccd94b343e3a28e45f695e0e1013ddb56aecb8c772bfd4808314bc0a0c7730585eba97ab24e71624ee9e0c7201a372127f70c74f92236844dce1e4b213fa051a6e402d86eef2acc65b77d6a22d7d0ac797f3b65ad60603c0d745f7cf8388d87b568575a0eda74ed9f811da85caded20d3f5b82e6ae985c9ed05ffeba86baaabf43e33c011f306e7ca92e7b15fe88886f337ab4d84da0cbfb4ce5a700d32b2f51cee895aadd95e67acde6eb56f6e79e1b91fbd150e053b37070df4a455708b62e4d18a46194a125d0e3b83b738e01a1cc60534fe20497bc36d79f96a1d280abed787429306f39a00ef1e1d06d93b1883acfa2cac8d23e4ac7b577995d1a0e530407f50825fa89dbf5946982103baf53b63c30a4a3bd8daada7ff458e19bb8f64eb74d2ae41f41e52dbc91bfc8123267b92c1f97c1e5811e5ec4568645dfbe72f3e7c9e78b9795517e5109d457f4619400bed72913202b9ebbf3b34025277cf9982fc10bc448a68310714ffffbb4b3f5b739d7b769eeb30d7c5e1a4d0fa5eadb08b858d762d57c3cc98863281b4aa3a489b164abf8c0da924f5176776dad4e66c00a5013f9b871f1833738b6353f2de1f46477db7885bc9b0ce46bf5d5c77469a608117d28437eaf07502ba9171d014208105c358cead0aa4e12b04cc4e71be6ab33693bffb4304504422ff65a659b84f70fee0ad7b7e390ef7bae3f76f1b73c4c8b4de3da0a95b5f9a78ac1d22648378fb0a75d2f2c77650d52a13300573c4f6609a51385ffa8343f84632eb306c9033aafd2c776c621e6a17ac72b388f95b559a51731da4c221f860ec2c930c9a6c3af8bd9ec827c28f6aff521a98462cee950ea0a0b674d590ffe1551b1604905226474e8987e741d3716353d49fc72f51c5471d172ec5104e7fc1a6a9c4ea327fd4a898f9879964dc119ab7d154c154fce02c9defb9afb7da0fdc7282894daa8160ec3c0aaf9ffcc32c8c92f0849be07994889ea28b91fd486832ecee1b0a4a971a8f18af81bb0a00d8f674ed62fd1b7b085fb5c6d54bd594d536c8dc63b4d6f8b1a25e83189a0803b81e9f920d97584ed53ef9588e86d9e5e6ed656f5265e8fd2de385c9ed42"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}]}]}, 0x1190}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000)
r4 = socket$alg(0x26, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

5m17.761661421s ago: executing program 3 (id=54):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f7", 0xb}], 0x1}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3})
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x180, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c46"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2)
sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c00)={0x1188, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x10ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "e65b2b3874c99dae5fbf7f1a78107d79eb257097a737aa188cc93677819bc5623094508d775facb21e871b0dd48492f8a53f9ff30dd14816753068e89adac759029d9930f8a937829ad5d6ed871ca18f71b486c802ce2dc833bdb108710d9a4fad1007361c1539c5b88021ff57582a09f725de284e3fb65e2c3c904250de303c37391783361996a95a467e2100d0a1b93d00644407cce1752baeead525489e62d580d2c70ffef19e42d4d641c371bcf5bdb1712df210729e5a20c0f7b54b7c0088c3fdcba283acc96fdb185b128b40582a0dfdbdeb0629d8b696fdd9c468dfb4fc4929fb688ea9"}, @ETHTOOL_A_BITSET_VALUE={0xff3, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}]}]}, 0x1188}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

5m14.556268051s ago: executing program 3 (id=58):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})

5m13.008136692s ago: executing program 4 (id=61):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4c", 0xe}], 0x1}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3})
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2)
sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c00)={0x1188, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x10ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "e65b2b3874c99dae5fbf7f1a78107d79eb257097a737aa188cc93677819bc5623094508d775facb21e871b0dd48492f8a53f9ff30dd14816753068e89adac759029d9930f8a937829ad5d6ed871ca18f71b486c802ce2dc833bdb108710d9a4fad1007361c1539c5b88021ff57582a09f725de284e3fb65e2c3c904250de303c37391783361996a95a467e2100d0a1b93d00644407cce1752baeead525489e62d580d2c70ffef19e42d4d641c371bcf5bdb1712df210729e5a20c0f7b54b7c0088c3fdcba283acc96fdb185b128b40582a0dfdbdeb0629d8b696fdd9c468dfb4fc4929fb688ea9"}, @ETHTOOL_A_BITSET_VALUE={0xff3, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}]}]}, 0x1188}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000)
r5 = socket$alg(0x26, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

5m12.010047542s ago: executing program 4 (id=62):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_io_uring_setup(0x2aa8, &(0x7f0000000140)={0x0, 0x4b5, 0x800}, 0x0, 0x0, &(0x7f0000000000))
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = creat(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c)
fanotify_mark(0xffffffffffffffff, 0x10, 0x40009975, r5, 0x0)
fsopen(&(0x7f0000000300)='debugfs\x00', 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x440400, 0x0)
fchdir(0xffffffffffffffff)
r6 = fanotify_init(0x1a, 0x1)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fanotify_mark(r6, 0x541, 0x1023, r7, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x4c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7fd, 0x70}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x24044884)

5m10.961310511s ago: executing program 4 (id=64):
socket(0x28, 0xa, 0x0)
socket(0x28, 0x5, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x6, {0xc0020006, 0xe7ffffff, 0x5, 0x54ef}})
mq_notify(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xf, 0x0, @thr={0x0, 0x0}})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$kcm(0x10, 0x3, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
sendfile(r1, r1, 0x0, 0x7f03)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7e, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)

5m9.027377149s ago: executing program 4 (id=66):
socket$netlink(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0x88}}, 0x0)

5m8.528384464s ago: executing program 4 (id=68):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x17, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8040d}, 0x94)

5m7.809540935s ago: executing program 4 (id=71):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "626abd460020000000000079a700000040000000000000000000000000002000", "d89bc63b93b6d4092beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71ed1c7bc91dcf39f5550601185fa4a", "fcc815bc21b9e7be1497a9edd45189dacc307c357402a8c5a9c5b5b0", {"6cbc715d9569f2b2ee1cf210c588b607", "23e0cc4e1fdd8d6d18e2e9ee4939689f"}}}}}}}}, 0xc6)

4m58.476899921s ago: executing program 32 (id=58):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})

4m52.598635273s ago: executing program 33 (id=71):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "626abd460020000000000079a700000040000000000000000000000000002000", "d89bc63b93b6d4092beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71ed1c7bc91dcf39f5550601185fa4a", "fcc815bc21b9e7be1497a9edd45189dacc307c357402a8c5a9c5b5b0", {"6cbc715d9569f2b2ee1cf210c588b607", "23e0cc4e1fdd8d6d18e2e9ee4939689f"}}}}}}}}, 0xc6)

19.154580911s ago: executing program 0 (id=862):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0x9}, 0x50)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(r3, 0x5421, 0x0)
clock_getres(0x8, 0x0)
unlink(0x0)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x2040400)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0}, 0x20)

17.714024673s ago: executing program 0 (id=866):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000e00)=ANY=[@ANYBLOB="756e695f786c6174653d302c696f636861727365743d63703836312c726f6469722c756e695f786c6174653d312c696f636861727365743d63703835302c73686f72746e616d653d6d697865642c696f636861727365743d69736f383835392d342c71756965742c73686f72746e616d653d6c6f7765722c696f636861727365743d63703933362c73686f72746e616d653d77696e6e742c726f6469722c757466383d302c666c7573682c00dff6d66f75a91be5f84ca1a787f0bac384746c6713f02d1d47d38af67fc7bf761ec3753e753c6f25ca1f98804a4b35fcc794ec7ba4e9f43d2c964f6f3802d20631fd6bc5fe6fd406f6bae330d1e34b5b2e4f223b765a6caaddc40ebc8b3abacc8d8b13700c0b14f50ac1aa3e38c79dbcd4455f559436cea93494a2e6239a7c95407ea31b3e570faada4251e0d55be21ad7dc4d0b2108f772c1cf062d9dfd7ed18dd9d3ad233767bea1ecb8de67fd46ed"], 0x29, 0x33e, &(0x7f0000000480)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
get_robust_list(r0, &(0x7f0000000300)=&(0x7f0000000240), 0x0)
r4 = fsopen(0x0, 0x1)
fsmount(r4, 0x0, 0x6)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x25)
rename(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000080)={[{@nobh}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@usrjquota}, {@nouid32}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x1, 0x48f, &(0x7f0000000a00)="$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")
inotify_init()

15.393896512s ago: executing program 0 (id=879):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, &(0x7f0000000280))
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = fanotify_init(0x40, 0x80000)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r5, 0x1, 0x40001019, r6, 0x0)
r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x2402, 0x0)
write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000002400)={0x40, 0x6, 0x0, {0x3, 0x3, 0x17, 0x0, '/sys/fs/smackfs/syslog\x00'}}, 0x40)

10.076397778s ago: executing program 0 (id=902):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9, 0x102001d, 0xfffffffb, 0xffffffff}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x543ddcb2c1ce9a4c)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r1, 0x0, 0x0, 0x61, 0x0, 0x0)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180))
connect$pptp(r2, &(0x7f0000000280)={0x18, 0x2, {0x4, @remote}}, 0x1e)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0)
ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000300)=0xc7)
write(r4, &(0x7f00000003c0)="0000f289c3848dfe23eb3eca82d185b6ac515d6fd43b7d44c66176d761a646d62ef34e39ed0fe777918c9f05d7fcaa922ffdeabfe81001911c95c213f6a8543cea2d7e5acbf69022931a1ad0153f9944b2f07696f3da8c436c128bea55b4f21bbdbe71ad56821155ed518c677d48766be5eab0a72d567433febcfa86ffbf0f8b776b84384d85cd77b1d903c02a69eb5686c348d1861455eabb4c16984ee9bc87c69df90998858f336251fd4ceb", 0xad)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)

8.915453834s ago: executing program 0 (id=908):
syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x2001)
io_setup(0x43, &(0x7f0000000140))
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7d)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
read$usbfs(0xffffffffffffffff, &(0x7f0000000440)=""/201, 0xc9)
request_key(&(0x7f0000000340)='user\x00', 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4054}, 0x0)
fsopen(&(0x7f0000000080)='autofs\x00', 0x0)

7.89245657s ago: executing program 1 (id=916):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x29, 0x33e, &(0x7f0000000480)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
get_robust_list(r0, &(0x7f0000000300)=&(0x7f0000000240), 0x0)
r4 = fsopen(0x0, 0x1)
fsmount(r4, 0x0, 0x6)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x25)
rename(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x82000714)

6.370669099s ago: executing program 1 (id=918):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000006000000000000009500000000000000180811eb447043469425717da592382707a2f1178fb11573f5108d00a8ab2046260862d1d801006e81db54f4e821411b0148b1e1281694a2fb26afe6dd6a2152bd5bdc289d62f13e0c9d0d39d960313a942c66072ae783a295cb78157cec7e91fb33474a3de5d2ec17a3"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.988717307s ago: executing program 1 (id=920):
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000100))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.923899195s ago: executing program 1 (id=922):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="7bc141d33655fa723bab3d66d4934b3a037195", @ANYRESHEX=r0, @ANYBLOB="0bf96d29a3624264d581218e23be74e1d2e7dcc0768dcfdd48b36f4723b27219f53f2a01762835e88bf5cbda9a93e89ecf83033181baed1804be74eb5805addefe4d07870c417dc432fe60eefde385471e4a47d5fef3f2cff320ba952a6bae6806", @ANYRESHEX=r0, @ANYBLOB="c9acde7bf797741f2c2b87845f245e617d00aa23219b"], 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1fe}}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
socket$qrtr(0x2a, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = semget$private(0x0, 0x20000000102, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[@ANYRESOCT=r4, @ANYRES16=r1], 0xc8)

4.469894312s ago: executing program 0 (id=924):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x20400049, &(0x7f0000000080)={[{@nombcache}, {@data_writeback}, {@nomblk_io_submit}, {@grpid}, {@nolazytime}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@jqfmt_vfsold}]}, 0x84, 0x4b2, &(0x7f0000000580)="$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")
r0 = socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f000020e000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000003c0)={0x1})
poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007)
close_range(r0, 0xffffffffffffffff, 0x0)

1.552593683s ago: executing program 1 (id=927):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9, 0x102001d, 0xfffffffb, 0xffffffff}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x543ddcb2c1ce9a4c)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r1, 0x0, 0x0, 0x61, 0x0, 0x0)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180))
connect$pptp(r2, &(0x7f0000000280)={0x18, 0x2, {0x4, @remote}}, 0x1e)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0)
ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000300)=0xc7)
write(r4, &(0x7f00000003c0)="0000f289c3848dfe23eb3eca82d185b6ac515d6fd43b7d44c66176d761a646d62ef34e39ed0fe777918c9f05d7fcaa922ffdeabfe81001911c95c213f6a8543cea2d7e5acbf69022931a1ad0153f9944b2f07696f3da8c436c128bea55b4f21bbdbe71ad56821155ed518c677d48766be5eab0a72d567433febcfa86ffbf0f8b776b84384d85cd77b1d903c02a69eb5686c348d1861455eabb4c16984ee9bc87c69df90998858f336251fd4ceb", 0xad)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)

1.29204818s ago: executing program 2 (id=928):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe(0x0)
socket$inet(0x2b, 0x801, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000000), 0x0}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80)
epoll_create1(0x0)
io_uring_setup(0x4d3f, &(0x7f0000000140)={0x0, 0xb18d, 0x8, 0x3, 0x105})

883.599345ms ago: executing program 2 (id=929):
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000b40))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
epoll_create1(0x80000)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x33)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f0000000380))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

554.475416ms ago: executing program 2 (id=930):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000280)={0x2000, 0x0, 0x2}, 0x18, 0x2)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, <r2=>0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, r2, 0x4, 0x8, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x1, 0x1]}, {0x100, @struct, 0x0, 0x401, 0x6, 0x2, 0x7ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x8}, 0xc0000000, 0xd, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0xfffffffc)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000c25bb33e54015415a23a584ddbc836f7468b7c3ecb70830c58740accda21c574c1251d41ec0daf2d407ee82088e67e9b6730d971f4d9ca2c2cf6a2bd499ee2dc6c6be445d7e128fbbeeb008c4547b0612fa5b83710643da8aca1019f74f5c508000000000000001d95588a4ffa01e0cf45e9051805afcb4ea5cdfc5b0d3b35dc113b91dd45f994951355eb78a9f98b5f8470fac596aa5d9e8a5416cc6bd231", @ANYRES16=r6, @ANYBLOB="07006000000000000000020000000c0001800600010002000000"], 0x20}}, 0x4040)
r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)=""/190}], 0x1, 0x5fab, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb1)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2000300, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000006a00080029bd7000fbdbdf250a0000000000000008000a000000000008000500", @ANYRES32=0x0, @ANYBLOB="080001000110000004000001000005004c562fcc9f9c45461647a1939b1ec6193fe173d93a6056f969b0f2e76b9d9fc9fda152b9513bc201d63c452f44867ef124b73e0a", @ANYRES32=0x0, @ANYBLOB="04000b00"], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x40)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c04, 0x80)
renameat(r8, &(0x7f0000001400)='./file0/file0\x00', r8, 0x0)

420.376074ms ago: executing program 1 (id=931):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x1}}, {@grpjquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timer_create(0x4, 0x0, &(0x7f0000000700))
sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)

347.359446ms ago: executing program 2 (id=932):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x20400049, &(0x7f0000000080)={[{@nombcache}, {@data_writeback}, {@nomblk_io_submit}, {@grpid}, {@nolazytime}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@jqfmt_vfsold}]}, 0x84, 0x4b2, &(0x7f0000000580)="$eJzs3MtvVFUYAPDv3umDV2lBfIAoo2hsRFsoqCzcaDRhY2KiC1zWUkilgKE1EUKkGINL48K1ujTxL3ClG6OuNG51b0yIYSO6MGPu3Dtl2t6BdqYPYH6/ZDrn3Mec8917Tu+Ze2YmgK5Vzf4kEdsi4reIGMyzCzeo5k83rl+a+Of6pYkkarU3/krq2/19/dJEY9NtxfPW4jWH04j0oyTmSsqduXDx9Pj09OT5Ij86e+bd0ZkLF5+dOjN+avLU5Nmxo0ePHD70wvNjz61KnANZXfd8cG7v7mNvffraRMy9/ePXWf0rxfrmOHJDHZdZjWrUarVa2rywp+OXvSMNRMyHmdyjMd6LKkWT7K33/8GoNDXQwXj1w/K9Nq1fBYE1k12fdixZml8V0yeT+nrgXqWPQ7dqXPGz97+Nx/qOQDbWtZfyN0BZ3DeKR76mp/6GNhmK6Gu6T7DatkXE8bl/P88eUXofAgBgdX2bjX+eKRv/pfFA03bbi7mhoYg4EBE7I+K+iNgVEfdH1Ld9MCIeWmH51UX5peOfXza3FdgyZeO/F4u5rYXjv/npjKFKkRuox9+bnJyqxMHimAxHb//JqenJQ7co47tXfv2k1bpq0/gve2TlH29MmNWf0z97+hfuc2J8dryzqG+6diViT09Z/Mn8TEASEbsjYk8br58ds6mnv9qbpbdvXbq+PP58LHxbqzDPVPsy4qn8/M/FovgbkrykVvOTo5tievLgaNYKDpaW8dPPV19vzvc2pVvEv6Ztvll2/rcsav/5YS3ib3SDxnztzMrLuPr7xy3f09z+/Je3/77kzXq6r1j2/vjs7PlDEX3FggXLx27u28g3ts/iH95f3v93Rvz3RbHfwxGRNeJHIuLRiNhX1P2xiHg8IvaXBVec6B9efuKdWx+hNtv/KsjiP1H6/y9ptIChpHm+vo1E5fT337Qqf3nn/0g9NVwsWc7/v+VWsLOjBwAAAHeHtD4HnaQj8+k0HRnJP8O/K7ak0+dmZg9U472zJ/K56qHoTRt3ugbn74fm9z+HmvJji/KHI2JH/ZNGm+v5kYlz0wMbHTx0ua0t+n/mj7X60Atw51jRPFqydvUA1p/va0KX+qx3o2sAbCDXf+he+j90r7L+fznixgZUBVhnrv/QvUr6/5WNqAew/lz/oXvp/9CVln4lvvHTE+180/9mYuexNvbq77DQuzJR6Wz30YgoXRXNP9qxBolI2959U8el1y7Xaq232XzbH6xIV/+wpCv+lYx9RaI/IlpuXFm46vKantPF7eeWfDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4K/wfAAD//5Fr3NQ=")
r0 = socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f000020e000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
r1 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000003c0)={0x1})
poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007)
close_range(r0, 0xffffffffffffffff, 0x0)

256.915038ms ago: executing program 2 (id=933):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r0, 0x5)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000884, &(0x7f0000000240)=ANY=[@ANYBLOB='codepage=1251,nonumtail=0,shortname=win95,shortname=win95,shortname=lower,utf8=0,shortname=winnt,uni_xlate=0,iocharset=macceltic,nonumtail=0,iocharset=iso8859-5,nonumtail=0,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x28d, &(0x7f0000000e40)="$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")
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
connect$pppl2tp(r1, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0xfffd, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0xfe}, @in6=@local, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x800, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e22, @in=@multicast1}}]}, 0xbc}}, 0x40)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000180)={[{@dax_inode}, {}, {@jqfmt_vfsold}]}, 0x3e, 0x51a, &(0x7f0000001200)="$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")

0s ago: executing program 2 (id=934):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48094}, 0x40480c0)
prlimit64(r0, 0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r4 = gettid()
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
r5 = syz_open_procfs(r4, &(0x7f00000193c0)='net/igmp6\x00')
socket$inet6(0xa, 0x1, 0x0)
pread64(r5, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a)

kernel console output (not intermixed with test programs):

5196][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  161.305309][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  161.325120][ T1525] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  161.325418][ T1525] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  161.330469][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  161.331202][ T1170] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  161.332140][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  161.409240][ T6253] random: crng reseeded on system resumption
[  162.090848][ T5814] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  162.138416][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  162.138520][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  162.144611][   T13] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  162.193310][  T169] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  162.256951][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  162.269617][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  162.273891][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  162.291010][  T153] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  162.301890][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  162.325332][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  162.330770][ T6251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.330911][ T6251] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  162.379749][  T153] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  162.440231][   T38] audit: type=1800 audit(1779249805.864:12): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.104" name="file1" dev="loop0" ino=15 res=0 errno=0
[  162.743312][  T107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.764176][ T5814] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  162.793633][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.833194][   T12] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  162.901557][ T5814] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  162.905847][ T5618] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  163.096526][ T6264] loop0: detected capacity change from 0 to 16
[  163.957900][ T5814] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  163.959475][ T6264] erofs (device loop0): mounted with root inode @ nid 36.
[  163.964854][ T6264] syz.0.107: attempt to access beyond end of device
[  163.964854][ T6264] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  163.978822][ T1525] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  163.985769][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  163.989679][ T6264] syz.0.107: attempt to access beyond end of device
[  163.989679][ T6264] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16
[  163.990047][ T6264] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  163.990078][ T6264] erofs (device loop0): read error -117 @ 1 of nid 89
[  163.990225][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  164.058851][ T6146] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.059143][ T6146] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.059435][ T6146] bridge_slave_0: entered allmulticast mode
[  164.060123][   T38] audit: type=1800 audit(1779249807.464:13): pid=6264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.107" name="file2" dev="loop0" ino=89 res=0 errno=0
[  164.064921][ T6146] bridge_slave_0: entered promiscuous mode
[  164.182522][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.182823][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.183467][ T6146] bridge_slave_1: entered allmulticast mode
[  164.204631][ T6146] bridge_slave_1: entered promiscuous mode
[  164.402416][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  164.411937][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  164.562066][ T5976] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  164.747277][ T6267] loop0: detected capacity change from 0 to 16
[  164.755996][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  164.757858][ T6267] erofs (device loop0): mounted with root inode @ nid 36.
[  164.790822][ T6267] syz.0.108: attempt to access beyond end of device
[  164.790822][ T6267] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  164.791216][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  164.797055][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  164.798196][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  164.799316][ T6267] syz.0.108: attempt to access beyond end of device
[  164.799316][ T6267] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16
[  164.799667][ T6267] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  164.799699][ T6267] erofs (device loop0): read error -117 @ 1 of nid 89
[  164.809868][   T38] audit: type=1800 audit(1779249808.274:14): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.108" name="file2" dev="loop0" ino=89 res=0 errno=0
[  164.949034][ T5618] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  165.261428][  T107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.365444][ T6146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.461854][ T6146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.787611][  T107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.914355][ T6146] team0: Port device team_slave_0 added
[  165.946297][ T6146] team0: Port device team_slave_1 added
[  166.181607][ T6291] loop0: detected capacity change from 0 to 16
[  166.300166][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  166.445544][ T6291] erofs (device loop0): mounted with root inode @ nid 36.
[  166.531216][ T6291] syz.0.114: attempt to access beyond end of device
[  166.531216][ T6291] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  166.847190][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  167.041052][   T38] audit: type=1800 audit(1779249810.514:15): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.114" name="file2" dev="loop0" ino=89 res=0 errno=0
[  167.089332][ T1525] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  167.216819][ T5618] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  167.499359][ T6295] loop0: detected capacity change from 0 to 16
[  167.566211][ T5814] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  167.742515][ T6295] erofs (device loop0): mounted with root inode @ nid 36.
[  168.383138][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  168.478184][ T6146] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.478199][ T6146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  168.478222][ T6146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.510252][ T5976] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  168.657394][ T6146] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.657411][ T6146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  168.657435][ T6146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.704695][ T6298] loop0: detected capacity change from 0 to 1024
[  168.720316][ T6298] ext4: Unknown parameter 'hash'
[  168.726639][ T5814] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  168.945097][ T5814] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  168.973614][ T5814] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  169.006941][  T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  169.007630][  T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  169.018233][  T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  169.025941][  T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  169.028201][  T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  169.033330][  T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  169.050380][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  169.176360][ T6303] netlink: 104 bytes leftover after parsing attributes in process `syz.1.118'.
[  169.209316][ T5976] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  169.962588][ T5713] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  170.495340][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.495611][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.495986][ T6178] bridge_slave_0: entered allmulticast mode
[  170.526189][ T6178] bridge_slave_0: entered promiscuous mode
[  170.621942][ T6146] hsr_slave_0: entered promiscuous mode
[  170.641778][ T5713] usb 2-1: Using ep0 maxpacket: 32
[  170.652539][ T6146] hsr_slave_1: entered promiscuous mode
[  170.659356][ T6146] debugfs: 'hsr0' already exists in 'hsr'
[  170.659379][ T6146] Cannot create hsr debugfs directory
[  170.671424][ T5713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.671448][ T5713] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  170.681608][ T6319] loop0: detected capacity change from 0 to 16
[  170.694152][ T5713] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  170.694179][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.694199][ T5713] usb 2-1: Product: syz
[  170.694213][ T5713] usb 2-1: Manufacturer: syz
[  170.694226][ T5713] usb 2-1: SerialNumber: syz
[  170.765903][ T5713] usb 2-1: config 0 descriptor??
[  170.808389][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  170.812394][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  170.976240][ T6319] erofs (device loop0): mounted with root inode @ nid 36.
[  170.983718][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.983985][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.984276][ T6178] bridge_slave_1: entered allmulticast mode
[  171.010409][ T6178] bridge_slave_1: entered promiscuous mode
[  171.066693][ T6322] loop2: detected capacity change from 0 to 512
[  171.071805][ T5945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.086847][   T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.090895][ T5814] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.091003][ T5814] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.093097][   T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  171.108023][ T6319] syz.0.121: attempt to access beyond end of device
[  171.108023][ T6319] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  171.141578][   T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.141638][   T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.142009][   T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.144389][ T6322] EXT4-fs (loop2): 1 truncate cleaned up
[  171.145950][ T6322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.152442][   T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.152487][   T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.166206][  T199] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.191992][   T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.195942][  T199] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.200481][  T199] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.209218][  T199] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.228647][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  171.247170][ T5945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  171.424308][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.471158][ T6178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.493218][ T5814] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  171.614681][ T5730] usb 2-1: USB disconnect, device number 4
[  171.632939][ T6319] syz.0.121: attempt to access beyond end of device
[  171.632939][ T6319] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16
[  171.633312][ T6319] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  171.633334][ T6319] erofs (device loop0): read error -117 @ 1 of nid 89
[  171.633538][   T38] audit: type=1800 audit(1779249815.114:16): pid=6319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.121" name="file2" dev="loop0" ino=89 res=0 errno=0
[  171.703615][  T199] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  171.703680][  T199] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  171.747468][  T107] bridge_slave_1: left allmulticast mode
[  171.747636][  T107] bridge_slave_1: left promiscuous mode
[  171.767419][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.778999][   T41] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  171.788887][  T107] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.861583][ T5613] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  172.432737][  T107] bridge_slave_0: left allmulticast mode
[  172.432772][  T107] bridge_slave_0: left promiscuous mode
[  172.539735][  T107] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.064218][ T6333] loop2: detected capacity change from 0 to 1024
[  173.075954][ T6333] ext4: Unknown parameter 'hash'
[  173.083599][   T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  173.184620][ T5814] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  173.185756][ T5814] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  173.186370][ T5814] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  173.186962][ T5814] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  173.187556][ T5814] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  173.188142][ T5814] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  173.237490][ T5814] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  173.248817][ T5814] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  173.253276][ T5814] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  173.300615][ T5976] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  173.412500][ T5618] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  175.149202][  T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.209107][  T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.254457][  T107] bond0 (unregistering): Released all slaves
[  175.284899][ T6342] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  175.284946][ T6342] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  175.284965][ T6342] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  175.435094][   T38] audit: type=1800 audit(1779249818.754:17): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.127" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  175.935627][ T6178] team0: Port device team_slave_0 added
[  175.975718][ T6178] team0: Port device team_slave_1 added
[  176.401850][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.401866][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  176.401891][ T6178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.477070][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.477086][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.477110][ T6178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.216400][ T6366] netlink: 'syz.0.133': attribute type 1 has an invalid length.
[  183.002314][ T6382] loop2: detected capacity change from 0 to 1024
[  183.007190][   T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  183.007550][   T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  183.048069][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  183.060484][ T1170] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  183.076483][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  183.097947][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  183.098081][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  183.114365][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  183.115496][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  183.116122][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  183.116831][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  183.117422][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  183.117520][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  183.117608][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  183.212356][   T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  183.212684][   T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  183.233448][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  183.233923][ T6382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.617268][ T1525] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  184.241331][ T5814] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  184.243176][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  184.312053][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  184.364807][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  184.391716][   T38] audit: type=1800 audit(1779249827.864:18): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.135" name="file1" dev="loop2" ino=15 res=0 errno=0
[  184.543519][ T5814] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  185.549155][   T41] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  185.551848][ T5814] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  185.552210][ T5814] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  185.552457][ T5814] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  185.556345][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.636167][   T41] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  185.722833][   T41] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  185.801779][ T5613] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  187.192636][ T6416] loop1: detected capacity change from 0 to 1024
[  187.294033][ T5814] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.325980][  T169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.326660][  T169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.326944][   T67] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  187.327227][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.327323][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.328142][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.336515][  T169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.340720][  T169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.341446][  T169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.342195][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.342451][  T169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.342482][  T169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.342504][  T169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.343201][  T169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.343876][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.349077][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  187.354248][   T67] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  187.354316][   T67] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  187.362251][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  188.006645][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1
[  188.015121][ T6416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.196353][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  188.208976][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  188.285618][ T6178] hsr_slave_0: entered promiscuous mode
[  188.294617][ T6178] hsr_slave_1: entered promiscuous mode
[  188.296484][ T6178] debugfs: 'hsr0' already exists in 'hsr'
[  188.296507][ T6178] Cannot create hsr debugfs directory
[  188.403231][   T38] audit: type=1800 audit(1779249831.734:19): pid=6416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.142" name="file1" dev="loop1" ino=15 res=0 errno=0
[  188.460726][ T6427] loop0: detected capacity change from 0 to 1024
[  188.469240][ T6427] ext4: Unknown parameter 'hash'
[  188.469655][ T6427] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  189.651782][  T153] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  189.654623][   T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  189.654677][   T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  189.654708][   T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  190.435656][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.490853][  T153] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  190.492452][  T153] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  190.497769][ T5620] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  192.143141][  T107] hsr_slave_0: left promiscuous mode
[  192.815957][  T107] hsr_slave_1: left promiscuous mode
[  193.176072][  T107] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.272397][  T107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.283023][  T107] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.283049][  T107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.311945][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  194.312038][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  194.327728][  T823] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  194.520198][  T823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.520223][  T823] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  194.532810][  T823] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  194.532847][  T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.532866][  T823] usb 1-1: Product: syz
[  194.532880][  T823] usb 1-1: Manufacturer: syz
[  194.532893][  T823] usb 1-1: SerialNumber: syz
[  194.654736][  T823] usb 1-1: config 0 descriptor??
[  194.817579][  T107] veth1_macvtap: left promiscuous mode
[  194.817929][  T107] veth0_macvtap: left promiscuous mode
[  195.065666][  T107] veth1_vlan: left promiscuous mode
[  195.067275][  T107] veth0_vlan: left promiscuous mode
[  196.157385][ T5730] usb 1-1: USB disconnect, device number 3
[  196.456944][ T5631] Bluetooth: hci4: command 0x0406 tx timeout
[  196.456983][ T5625] Bluetooth: hci1: command 0x0406 tx timeout
[  196.456994][ T5631] Bluetooth: hci3: command 0x0406 tx timeout
[  202.874469][ T4929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  202.877948][ T4929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  202.916589][ T4929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  202.917895][ T4929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  202.936685][ T4929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  204.489512][  T107] team0 (unregistering): Port device team_slave_1 removed
[  204.550273][  T107] team0 (unregistering): Port device team_slave_0 removed
[  205.018491][ T4929] Bluetooth: hci0: command tx timeout
[  205.019032][  T824] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  205.180417][  T824] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  205.182638][  T824] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  205.182666][  T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.182683][  T824] usb 1-1: Product: syz
[  205.182694][  T824] usb 1-1: Manufacturer: syz
[  205.182705][  T824] usb 1-1: SerialNumber: syz
[  205.236161][  T824] usb 1-1: config 0 descriptor??
[  207.466999][ T4929] Bluetooth: hci0: command tx timeout
[  207.901931][  T824] usb 1-1: USB disconnect, device number 4
[  209.625029][ T4929] Bluetooth: hci0: command tx timeout
[  211.694769][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  211.765929][ T6546] loop2: detected capacity change from 0 to 1024
[  212.207565][   T60] Bluetooth: hci0: command tx timeout
[  212.309418][  T153] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.314608][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  212.335725][ T1517] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.340097][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.340142][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.340167][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.340189][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.345658][  T153] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.345696][  T153] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.345720][  T153] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.345743][  T153] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.346508][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.346638][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.346662][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.346685][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.347589][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.347619][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.347643][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.347855][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.356293][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.356335][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.356359][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.356383][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  212.396162][   T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  212.397841][   T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  212.403987][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  212.407784][   T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  212.957537][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  213.148438][   T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  213.204982][   T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  213.248859][   T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  213.257316][   T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  213.265109][ T1517] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  213.303125][ T1517] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  213.321919][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  213.324673][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  213.326832][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  213.327866][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  213.330540][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  213.617727][   T41] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  213.723945][   T41] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  213.828917][ T5613] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  214.944373][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2
[  215.390546][   T60] Bluetooth: hci2: command tx timeout
[  217.423102][   T60] Bluetooth: hci2: command tx timeout
[  219.490283][   T60] Bluetooth: hci2: command tx timeout
[  221.570028][   T60] Bluetooth: hci2: command tx timeout
[  222.088029][ T5805] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  222.358563][ T5805] usb 1-1: Using ep0 maxpacket: 32
[  223.128810][ T5805] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  223.128839][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.274205][ T5805] usb 1-1: config 0 descriptor??
[  223.618144][ T5805] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  224.536602][ T6636] loop2: detected capacity change from 0 to 1024
[  224.663832][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.664138][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.664612][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.664825][ T1517] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  224.675816][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.675881][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.677395][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.680518][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.682009][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.682983][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.684614][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.684759][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.684792][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.686867][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.687963][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.689930][ T1170] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.691157][ T1170] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  224.716316][ T6367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.840296][ T5805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  224.843198][ T5805] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  224.843312][ T5805] usb 1-1: media controller created
[  224.891976][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  224.963551][ T1170] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  224.985474][ T6367] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  225.997931][ T6636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.044866][  T169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  226.045078][  T169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  226.121731][   T38] audit: type=1800 audit(1779249869.594:20): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.183" name="file1" dev="loop2" ino=15 res=0 errno=0
[  226.170426][ T5805] az6027: usb out operation failed. (-71)
[  226.201536][ T5805] az6027: usb out operation failed. (-71)
[  226.201554][ T5805] stb0899_attach: Driver disabled by Kconfig
[  226.201563][ T5805] az6027: no front-end attached
[  226.201563][ T5805] 
[  226.203065][ T5805] az6027: usb out operation failed. (-71)
[  226.203081][ T5805] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  226.254690][ T5805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10
[  226.295360][ T5805] dvb-usb: schedule remote query interval to 400 msecs.
[  226.295381][ T5805] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  226.322850][ T5805] usb 1-1: USB disconnect, device number 5
[  226.516205][   T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  226.516495][   T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  226.541398][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.295125][   T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  227.381162][   T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  227.399537][ T5805] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  227.456209][ T5613] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  227.635873][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3
[  233.431829][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.432106][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.432767][ T6492] bridge_slave_0: entered allmulticast mode
[  233.449481][ T6492] bridge_slave_0: entered promiscuous mode
[  233.633675][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.633942][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.634251][ T6492] bridge_slave_1: entered allmulticast mode
[  233.666445][ T6492] bridge_slave_1: entered promiscuous mode
[  234.664610][ T6412] Bluetooth: (null): Invalid header checksum
[  234.771430][ T1517] Bluetooth: (null): Invalid header checksum
[  235.026918][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.033034][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.308196][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'.
[  236.385449][ T6710] loop1: detected capacity change from 0 to 512
[  236.400553][  T169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  236.400779][ T6710] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  236.400793][ T6710] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  236.400953][  T169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  236.401442][ T6710] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal
[  236.481057][ T6710] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  236.523582][ T6492] team0: Port device team_slave_0 added
[  237.535690][ T6492] team0: Port device team_slave_1 added
[  239.643961][ T6727] loop0: detected capacity change from 0 to 512
[  239.663272][ T6412] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  239.667912][ T6727] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  239.669754][  T153] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  239.670413][ T6727] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal
[  239.731494][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  239.734848][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  239.798123][ T6412] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  239.810243][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.810259][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  239.810285][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.876089][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.876106][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  239.876133][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.960846][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  239.963249][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  239.965602][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  239.966397][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  239.974282][   T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  239.976508][   T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  240.623555][ T5976] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  242.108752][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'.
[  246.738192][ T6763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'.
[  246.773152][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4
[  249.110022][ T6768] loop2: detected capacity change from 0 to 512
[  249.137916][   T41] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  249.140784][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  249.140919][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  249.142761][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  249.147858][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  249.147920][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  249.149253][ T6768] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  249.149411][ T6768] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal
[  249.153998][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  249.155487][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  249.231969][  T153] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  249.244771][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  249.254882][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  249.259769][  T169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  249.265007][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  249.272038][ T6412] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  249.580360][ T6492] hsr_slave_0: entered promiscuous mode
[  249.595474][ T6492] hsr_slave_1: entered promiscuous mode
[  249.597443][ T5976] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  249.620994][ T6492] debugfs: 'hsr0' already exists in 'hsr'
[  249.621019][ T6492] Cannot create hsr debugfs directory
[  255.684307][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  255.684438][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  257.229134][  T107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.258846][ T5730] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  258.562859][ T6812] loop0: detected capacity change from 0 to 1024
[  258.563904][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.577097][ T5730] usb 2-1: Using ep0 maxpacket: 16
[  258.580081][ T5730] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  258.580110][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  258.582699][ T5730] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  258.582724][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.582743][ T5730] usb 2-1: Product: syz
[  258.582757][ T5730] usb 2-1: Manufacturer: syz
[  258.582771][ T5730] usb 2-1: SerialNumber: syz
[  258.591863][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.626601][ T5730] usb 2-1: config 0 descriptor??
[  258.676995][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.677041][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.677064][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.677087][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.677118][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.682113][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.682254][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.682364][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.683388][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.684491][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.685175][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.685777][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.686359][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.687007][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.687849][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.689277][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.689996][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.690940][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.694048][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.694237][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.757040][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.757079][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.757095][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.757108][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.758904][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.758938][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.758953][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.758966][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.788440][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.788495][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.788520][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.788542][   T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  258.820483][   T67] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  258.838979][ T5730] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  258.839011][ T5730] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  259.159056][  T169] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  259.164972][  T169] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  259.206341][  T107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.222571][ T5618] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  259.372322][ T6816] loop0: detected capacity change from 0 to 1024
[  259.387843][ T5976] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  259.392394][ T5730] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  259.427356][ T5730] em28xx 2-1:0.0: Config register raw data: 0x41
[  259.779875][  T823] usb 2-1: USB disconnect, device number 5
[  259.782604][  T823] em28xx 2-1:0.0: Disconnecting em28xx
[  259.790023][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.790302][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.790682][ T6539] bridge_slave_0: entered allmulticast mode
[  259.858045][ T6539] bridge_slave_0: entered promiscuous mode
[  260.013245][  T823] em28xx 2-1:0.0: Freeing device
[  260.515420][  T107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.664650][ T6841] loop1: detected capacity change from 0 to 512
[  260.695255][ T6412] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  260.696452][ T6841] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  260.696629][   T41] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  260.696832][ T6841] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal
[  260.698030][   T41] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  260.698071][   T41] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  260.720041][ T6412] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  260.724622][ T6412] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  260.725308][ T6412] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  260.727031][ T6412] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  260.727645][ T6412] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  260.735282][ T6412] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  260.748083][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.748785][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.749090][ T6539] bridge_slave_1: entered allmulticast mode
[  260.754671][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  260.762150][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  260.765803][ T6412] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  260.779813][ T6539] bridge_slave_1: entered promiscuous mode
[  260.881034][ T5976] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  261.725902][ T6539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.772392][ T6539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.064925][ T4929] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  262.090171][ T4929] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  262.092554][ T4929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  262.199568][ T4929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  262.200847][ T4929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  263.194557][  T107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.712004][ T6877] random: crng reseeded on system resumption
[  264.169991][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5
[  264.508392][   T60] Bluetooth: hci5: command tx timeout
[  264.757002][ T6539] team0: Port device team_slave_0 added
[  266.298969][ T6539] team0: Port device team_slave_1 added
[  266.529200][   T60] Bluetooth: hci5: command tx timeout
[  267.401222][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.401277][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  267.401312][ T6539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.601116][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.601165][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  267.601225][ T6539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.609163][   T60] Bluetooth: hci5: command tx timeout
[  270.688399][   T60] Bluetooth: hci5: command tx timeout
[  274.061880][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'.
[  276.202501][ T4929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  277.263429][ T4929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  277.291931][ T4929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  277.293453][ T4929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  277.303521][ T4929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  279.570042][  T107] bridge_slave_1: left allmulticast mode
[  279.570078][  T107] bridge_slave_1: left promiscuous mode
[  279.570351][  T107] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.814399][ T4929] Bluetooth: hci0: command tx timeout
[  279.956732][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'.
[  281.891938][ T4929] Bluetooth: hci0: command tx timeout
[  282.356608][  T107] bridge_slave_0: left allmulticast mode
[  282.356631][  T107] bridge_slave_0: left promiscuous mode
[  282.356805][  T107] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.791266][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'.
[  284.226572][ T4929] Bluetooth: hci0: command tx timeout
[  286.289148][ T4929] Bluetooth: hci0: command tx timeout
[  287.399460][  T107] bridge_slave_1: left allmulticast mode
[  287.399496][  T107] bridge_slave_1: left promiscuous mode
[  287.399755][  T107] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.679951][  T107] bridge_slave_0: left allmulticast mode
[  288.679984][  T107] bridge_slave_0: left promiscuous mode
[  288.680222][  T107] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.812323][ T7100] loop0: detected capacity change from 0 to 16
[  290.853542][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  290.863121][ T7100] erofs (device loop0): mounted with root inode @ nid 36.
[  290.864402][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  290.945617][ T7100] syz.0.310: attempt to access beyond end of device
[  290.945617][ T7100] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  290.962595][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  290.985355][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  291.150642][ T7100] syz.0.310: attempt to access beyond end of device
[  291.150642][ T7100] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16
[  291.156730][ T7100] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  291.156766][ T7100] erofs (device loop0): read error -117 @ 1 of nid 89
[  291.157049][   T38] audit: type=1800 audit(1779249934.624:21): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.310" name="file2" dev="loop0" ino=89 res=0 errno=0
[  291.168549][  T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.342185][  T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.420663][  T107] bond0 (unregistering): Released all slaves
[  292.069201][  T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  292.156710][  T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  292.192362][  T107] bond0 (unregistering): Released all slaves
[  292.393652][ T5618] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  295.008401][  T824] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  295.288355][  T824] usb 1-1: Using ep0 maxpacket: 32
[  295.296840][  T824] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  295.296886][  T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.323304][  T824] usb 1-1: config 0 descriptor??
[  295.530275][  T824] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  295.568684][  T824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  295.569676][  T824] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  295.569728][  T824] usb 1-1: media controller created
[  295.616693][  T824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  295.666954][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6
[  295.929068][  T824] az6027: usb out operation failed. (-71)
[  295.929426][  T824] az6027: usb out operation failed. (-71)
[  295.929439][  T824] stb0899_attach: Driver disabled by Kconfig
[  295.929449][  T824] az6027: no front-end attached
[  295.929449][  T824] 
[  295.929798][  T824] az6027: usb out operation failed. (-71)
[  295.929811][  T824] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  295.979938][  T824] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11
[  295.985476][  T824] dvb-usb: schedule remote query interval to 400 msecs.
[  295.985495][  T824] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  296.044371][  T824] usb 1-1: USB disconnect, device number 6
[  296.188541][ T5713] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  296.348336][ T5713] usb 2-1: Using ep0 maxpacket: 32
[  296.350616][ T5713] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  296.350643][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.533169][ T5713] usb 2-1: config 0 descriptor??
[  296.642682][  T824] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  296.762557][ T5713] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  296.820426][ T5713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  296.821510][ T5713] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  296.821562][ T5713] usb 2-1: media controller created
[  296.888822][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  296.994106][ T7178] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  296.994129][ T7178] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  296.994141][ T7178] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  297.051977][ T5713] az6027: usb out operation failed. (-71)
[  297.054628][ T5713] az6027: usb out operation failed. (-71)
[  297.054644][ T5713] stb0899_attach: Driver disabled by Kconfig
[  297.054655][ T5713] az6027: no front-end attached
[  297.054655][ T5713] 
[  297.055061][ T5713] az6027: usb out operation failed. (-71)
[  297.055076][ T5713] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  297.225802][ T5713] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12
[  297.261963][ T5713] dvb-usb: schedule remote query interval to 400 msecs.
[  297.261986][ T5713] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  297.311326][ T5713] usb 2-1: USB disconnect, device number 6
[  297.642355][ T5713] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  298.520564][ T7213] loop0: detected capacity change from 0 to 16
[  299.270505][  T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  299.470776][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  299.472921][ T7213] erofs (device loop0): mounted with root inode @ nid 36.
[  299.484366][ T7207] syz.0.353: attempt to access beyond end of device
[  299.484366][ T7207] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  299.487746][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  299.517686][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  299.520761][ T7207] syz.0.353: attempt to access beyond end of device
[  299.520761][ T7207] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16
[  299.521109][ T7207] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  299.521164][ T7207] erofs (device loop0): read error -117 @ 1 of nid 89
[  299.570357][   T38] audit: type=1800 audit(1779249942.994:22): pid=7207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.353" name="file2" dev="loop0" ino=89 res=0 errno=0
[  299.674267][ T5806] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  304.423015][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7
[  304.435712][ T7234] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  304.435734][ T7234] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  304.435745][ T7234] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  305.025169][ T7270] loop1: detected capacity change from 0 to 1024
[  305.026734][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.027627][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.034202][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.034339][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.034431][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.034519][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.039462][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.042529][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.050607][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.050735][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.051788][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.051888][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.051977][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.052063][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.053343][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.053443][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.053532][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.053637][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.055534][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.055636][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.055865][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.056882][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.061293][ T1170] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  305.065783][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.089781][  T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.121780][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.124312][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.129268][ T1170] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.131942][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.135815][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.140436][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.153098][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.154977][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.163301][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.166206][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  305.451945][ T7274] loop0: detected capacity change from 0 to 256
[  305.534033][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  305.540552][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  305.543103][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  305.549251][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  305.550252][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  305.565261][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  305.598722][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  305.600124][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  305.604646][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  305.647994][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  305.655427][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  305.663262][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  305.663447][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  305.680328][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  305.772473][ T5945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  306.118528][  T107] hsr_slave_0: left promiscuous mode
[  306.315733][ T7288] netlink: 68 bytes leftover after parsing attributes in process `syz.0.374'.
[  306.660463][ T5945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  306.882121][ T5945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  306.882413][ T5945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  306.882639][ T5945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  306.882839][ T5945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  306.883048][ T5945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  306.883248][ T5945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  306.883455][ T5945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  306.883661][ T5945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  306.885781][ T5945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  307.025714][  T107] hsr_slave_1: left promiscuous mode
[  307.037520][  T107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  307.069610][  T107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  307.129023][  T153] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  307.145717][ T1170] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  307.159790][ T5618] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  307.588463][  T107] hsr_slave_0: left promiscuous mode
[  310.332404][  T107] hsr_slave_1: left promiscuous mode
[  310.333560][  T107] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.333585][  T107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.336349][   T67] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  310.341355][   T67] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  310.384150][ T5620] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  310.405898][  T107] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.405923][  T107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.435797][ T7325] loop0: detected capacity change from 0 to 256
[  310.461057][  T153] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  310.469110][  T153] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  310.469628][  T153] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  310.472377][  T153] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  310.714571][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  310.770723][   T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  310.771946][   T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  310.774789][   T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  310.776960][   T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  310.777693][   T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  310.780450][  T107] veth1_macvtap: left promiscuous mode
[  310.780540][  T107] veth0_macvtap: left promiscuous mode
[  310.780859][  T107] veth1_vlan: left promiscuous mode
[  310.781028][  T107] veth0_vlan: left promiscuous mode
[  311.014807][ T7333] netlink: 68 bytes leftover after parsing attributes in process `syz.0.396'.
[  311.301140][ T6367] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  311.763728][   T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  311.765961][   T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  311.785240][ T6367] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  311.785305][ T6367] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  311.785336][ T6367] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  311.785366][ T6367] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  311.785396][ T6367] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  311.785425][ T6367] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  311.785454][ T6367] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  311.785483][ T6367] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  311.856646][   T57] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  312.015372][ T1170] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  312.027745][   T41] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  312.118385][ T5979] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  312.505365][ T5730] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  312.678550][ T5730] usb 1-1: Using ep0 maxpacket: 32
[  312.691695][ T5730] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.691721][ T5730] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  312.704985][ T5730] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  312.705015][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.705035][ T5730] usb 1-1: Product: syz
[  312.705049][ T5730] usb 1-1: Manufacturer: syz
[  312.705063][ T5730] usb 1-1: SerialNumber: syz
[  312.787164][ T5730] usb 1-1: config 0 descriptor??
[  313.026634][  T824] usb 1-1: USB disconnect, device number 7
[  314.895970][  T107] team0 (unregistering): Port device team_slave_1 removed
[  315.057683][  T107] team0 (unregistering): Port device team_slave_0 removed
[  315.727426][ T7420] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0)
[  316.814258][ T7432] loop1: detected capacity change from 0 to 512
[  316.828460][ T5945] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  316.838592][ T7432] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  316.838790][ T5945] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  316.839032][ T7432] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal
[  316.843445][ T5945] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  316.843487][ T5945] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  316.845956][ T5945] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  316.860761][ T5945] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  316.865687][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  316.872029][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  316.874714][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  316.885712][   T41] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  316.895941][   T41] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  316.900274][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  316.971920][ T5979] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  317.124422][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  317.125655][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  318.519009][  T107] team0 (unregistering): Port device team_slave_1 removed
[  318.609193][  T107] team0 (unregistering): Port device team_slave_0 removed
[  318.652549][ T4929] Bluetooth: hci4: unexpected event for opcode 0x007f
[  320.733929][ T6851] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.735856][ T6851] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.736154][ T6851] bridge_slave_0: entered allmulticast mode
[  320.768247][ T6851] bridge_slave_0: entered promiscuous mode
[  320.849934][ T6851] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.854911][ T6851] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.855228][ T6851] bridge_slave_1: entered allmulticast mode
[  320.881899][ T6851] bridge_slave_1: entered promiscuous mode
[  321.994449][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  322.033366][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  322.034684][   T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  322.100487][   T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  322.103681][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  322.950488][ T7523] netlink: 68 bytes leftover after parsing attributes in process `syz.1.475'.
[  323.058511][ T7523] loop1: detected capacity change from 0 to 512
[  323.340813][  T153] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.507253][  T153] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.508756][ T7523] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  323.538718][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.584153][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.685158][ T1525] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  323.699659][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.703107][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.703142][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.704974][ T1525] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  323.705799][ T1525] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  323.729134][ T6367] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.733889][ T6367] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.735966][ T6367] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.749076][ T6367] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.757238][  T153] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  323.761382][  T153] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.768346][  T153] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.849783][ T6367] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.852901][ T6367] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.875181][   T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.887509][ T6367] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.889717][ T6367] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.910938][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  323.963232][ T7523] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.475: corrupted inode contents
[  323.963443][ T7523] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  323.969288][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  323.969309][    C0] EXT4-fs (loop1): initial error at time 1779249967: ext4_do_update_inode:5690: inode 16
[  323.969348][    C0] EXT4-fs (loop1): last error at time 1779249967: ext4_do_update_inode:5690: inode 16
[  324.016348][  T153] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  324.027531][ T7523] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.475: mark_inode_dirty error
[  324.027562][ T7523] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  324.051489][  T153] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  324.068924][ T7523] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.475: corrupted inode contents
[  324.068956][ T7523] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  324.071749][  T153] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  324.072189][ T7523] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.475: mark_inode_dirty error
[  324.072217][ T7523] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  324.072483][   T67] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  324.081855][ T7523] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.475: corrupted inode contents
[  324.081884][ T7523] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  324.086088][   T67] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  324.106411][ T7523] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  324.106626][ T7523] loop1: lost filesystem error report for type 5 error -117
[  324.108275][   T67] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  324.128381][ T7523] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.475: corrupted inode contents
[  324.128410][ T7523] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  324.128745][   T67] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  324.138386][ T7523] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.475: mark_inode_dirty error
[  324.138415][ T7523] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  324.140148][   T67] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  324.185231][ T7523] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  324.185259][ T7523] loop1: lost filesystem error report for type 5 error -117
[  324.223094][ T6367] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  324.247107][ T6367] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  324.252063][ T6367] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  324.253825][ T7523] EXT4-fs (loop1): 1 truncate cleaned up
[  324.259236][ T7523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.259371][ T7523] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.320683][ T4929] Bluetooth: hci2: command tx timeout
[  325.440774][ T1170] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  325.440879][ T1170] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 1
[  325.647261][ T6930] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.647539][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.647848][ T6930] bridge_slave_0: entered allmulticast mode
[  325.669564][ T6930] bridge_slave_0: entered promiscuous mode
[  325.698117][ T6930] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.700160][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.700472][ T6930] bridge_slave_1: entered allmulticast mode
[  325.721191][ T6930] bridge_slave_1: entered promiscuous mode
[  325.978003][ T6930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.998774][ T6930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  326.334166][ T6930] team0: Port device team_slave_0 added
[  326.345141][ T6930] team0: Port device team_slave_1 added
[  326.396858][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_0
[  326.396875][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.396900][ T6930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  326.453206][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_1
[  326.453222][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.453248][ T6930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  326.548481][  T153] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  326.576870][   T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  326.576950][   T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  326.576994][   T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  326.577038][   T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  326.636654][ T4929] Bluetooth: hci2: command tx timeout
[  326.762626][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.788721][ T5945] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  326.808435][ T5945] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  326.813001][ T5620] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  327.912158][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8
[  328.013233][ T6930] hsr_slave_0: entered promiscuous mode
[  328.020085][ T6930] hsr_slave_1: entered promiscuous mode
[  328.688746][ T4929] Bluetooth: hci2: command tx timeout
[  330.585187][ T7593] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  330.585225][ T7593] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  330.585236][ T7593] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  330.770194][ T4929] Bluetooth: hci2: command tx timeout
[  331.273368][   T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  331.335389][   T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  331.364298][   T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  331.365679][   T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  331.366349][   T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  333.027194][ T7648] loop0: detected capacity change from 0 to 1024
[  333.395416][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.501091][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.527074][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.527120][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.527144][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.527165][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.528264][ T1492] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.528303][ T1492] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.528373][ T1492] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.528397][ T1492] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.529761][  T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.529793][  T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.529845][  T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.529868][  T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.530517][ T1517] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.530555][ T1517] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.530577][ T1517] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.530594][ T1517] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.532262][ T1517] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.533453][ T1517] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.533621][ T1517] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.533653][ T1517] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.537533][ T1517] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  333.588720][  T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.596843][ T5814] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.602048][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9
[  333.612138][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.648774][ T4929] Bluetooth: hci5: command tx timeout
[  333.663436][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.667732][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.674855][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.716831][  T153] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.725069][  T153] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.744113][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.745782][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.756767][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.760697][   T41] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  333.967535][ T5945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  333.979983][ T5945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  334.061598][ T5618] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  335.432724][ T7664] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  335.432747][ T7664] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  335.432758][ T7664] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  335.680259][ T4929] Bluetooth: hci3: unexpected event for opcode 0x007f
[  335.728329][ T4929] Bluetooth: hci5: command tx timeout
[  336.219419][ T7699] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0)
[  337.504372][ T7500] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.504579][ T7500] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.506147][ T7500] bridge_slave_0: entered allmulticast mode
[  337.544821][ T7500] bridge_slave_0: entered promiscuous mode
[  337.562455][ T7500] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.566190][ T7500] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.566492][ T7500] bridge_slave_1: entered allmulticast mode
[  337.631537][ T7500] bridge_slave_1: entered promiscuous mode
[  338.387402][ T7723] loop1: detected capacity change from 0 to 1024
[  338.674561][ T4929] Bluetooth: hci5: command tx timeout
[  338.681723][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  338.701648][ T6412] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  338.728161][ T6412] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  338.964284][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.685436][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.685486][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.685512][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.685536][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.686668][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.686775][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.686886][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.686975][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.687589][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.687694][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.687786][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.687875][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.691038][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.691077][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.691102][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.691125][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.693772][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.693805][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.693830][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.693854][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.694511][   T57] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  339.758972][ T5814] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.759808][ T5814] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.760555][ T5814] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.761310][ T5814] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.761980][ T5814] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.762719][ T5814] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.763451][ T5814] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.765265][ T5814] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.766283][ T5814] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.777916][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.779712][ T5945] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  339.810614][ T5945] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  340.688477][ T4929] Bluetooth: hci5: command tx timeout
[  341.082551][ T1525] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  341.107155][  T199] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  341.193784][ T5620] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  342.277717][ T7768] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0)
[  343.184967][ T7500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.278720][ T7500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.303648][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'.
[  343.303681][ T7774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.547'.
[  343.535583][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  344.719781][ T7500] team0: Port device team_slave_0 added
[  344.807762][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  344.913216][ T7500] team0: Port device team_slave_1 added
[  344.913300][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  344.977480][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  346.466760][ T7815] loop0: detected capacity change from 0 to 512
[  346.477174][ T7500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.477189][ T7500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.477214][ T7500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.503267][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10
[  346.507283][ T6412] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  346.510527][ T7815] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  346.528930][  T169] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  346.570380][ T7815] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal
[  346.594754][ T4979] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  346.595348][ T7500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.595361][ T7500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.595386][ T7500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.886863][ T7500] hsr_slave_0: entered promiscuous mode
[  347.899645][ T7500] hsr_slave_1: entered promiscuous mode
[  347.919955][ T7500] debugfs: 'hsr0' already exists in 'hsr'
[  347.919981][ T7500] Cannot create hsr debugfs directory
[  355.804532][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.572'.
[  365.256602][ T7609] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.256877][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.257158][ T7609] bridge_slave_0: entered allmulticast mode
[  365.291989][ T7609] bridge_slave_0: entered promiscuous mode
[  365.413619][ T7609] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.413981][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.414275][ T7609] bridge_slave_1: entered allmulticast mode
[  365.445649][ T7609] bridge_slave_1: entered promiscuous mode
[  366.469826][ T7933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'.
[  366.488577][  T107] bridge_slave_1: left allmulticast mode
[  366.488611][  T107] bridge_slave_1: left promiscuous mode
[  366.488902][  T107] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.655641][  T107] bridge_slave_0: left allmulticast mode
[  366.655682][  T107] bridge_slave_0: left promiscuous mode
[  366.655929][  T107] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.928388][  T107] bridge_slave_1: left allmulticast mode
[  366.928421][  T107] bridge_slave_1: left promiscuous mode
[  366.928668][  T107] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.090431][  T107] bridge_slave_0: left allmulticast mode
[  367.090462][  T107] bridge_slave_0: left promiscuous mode
[  367.090701][  T107] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.348401][  T107] bridge_slave_1: left allmulticast mode
[  367.348436][  T107] bridge_slave_1: left promiscuous mode
[  367.348692][  T107] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.528363][  T107] bridge_slave_0: left allmulticast mode
[  367.528398][  T107] bridge_slave_0: left promiscuous mode
[  367.528655][  T107] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.798411][  T107] bridge_slave_1: left allmulticast mode
[  367.798444][  T107] bridge_slave_1: left promiscuous mode
[  367.798704][  T107] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.965125][  T107] bridge_slave_0: left allmulticast mode
[  367.965161][  T107] bridge_slave_0: left promiscuous mode
[  367.988328][  T107] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.259157][  T107] bridge_slave_1: left allmulticast mode
[  368.259192][  T107] bridge_slave_1: left promiscuous mode
[  368.259458][  T107] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.420707][  T107] bridge_slave_0: left allmulticast mode
[  368.420740][  T107] bridge_slave_0: left promiscuous mode
[  368.422008][  T107] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.009859][  T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  373.098390][ T5805] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  373.110374][  T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  373.202142][  T107] bond0 (unregistering): Released all slaves
[  373.248353][ T5805] usb 1-1: Using ep0 maxpacket: 32
[  373.256229][ T5805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  373.256254][ T5805] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  373.279130][ T5805] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  373.279159][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.279177][ T5805] usb 1-1: Product: syz
[  373.279190][ T5805] usb 1-1: Manufacturer: syz
[  373.279204][ T5805] usb 1-1: SerialNumber: syz
[  373.339672][ T5805] usb 1-1: config 0 descriptor??
[  373.584857][ T5805] usb 1-1: USB disconnect, device number 8
[  373.707786][  T107] bond0 (unregistering): Released all slaves
[  374.149619][  T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  374.269028][  T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  374.351937][  T107] bond0 (unregistering): Released all slaves
[  375.949739][  T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.288893][  T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.362864][ T8150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.686'.
[  377.370940][  T107] bond0 (unregistering): Released all slaves
[  377.416187][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.686'.
[  377.829824][  T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.949357][  T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  378.033473][  T107] bond0 (unregistering): Released all slaves
[  378.554040][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  378.554141][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  378.582647][ T7609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  378.622259][ T4929] Bluetooth: hci4: unexpected event for opcode 0x007f
[  378.711681][ T7609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.972958][ T7609] team0: Port device team_slave_0 added
[  381.257523][ T7609] team0: Port device team_slave_1 added
[  381.284035][ T5274] 8021q: adding VLAN 0 to HW filter on device eth11
[  381.454748][  T107] hsr_slave_0: left promiscuous mode
[  381.488486][  T107] hsr_slave_1: left promiscuous mode
[  381.490460][  T107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.549241][  T107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.589502][  T107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.629384][  T107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.766852][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  381.802973][   T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  381.804366][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  381.805429][   T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  381.806443][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  382.838586][  T107] hsr_slave_0: left promiscuous mode
[  382.887206][  T107] hsr_slave_1: left promiscuous mode
[  383.209257][  T107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  383.804705][  T107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  383.999044][  T107] hsr_slave_0: left promiscuous mode
[  384.038401][  T107] hsr_slave_1: left promiscuous mode
[  384.039094][  T107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.083123][  T107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.532106][ T4929] Bluetooth: hci0: command tx timeout
[  384.919059][  T107] team0 (unregistering): Port device team_slave_1 removed
[  385.010063][  T107] team0 (unregistering): Port device team_slave_0 removed
[  386.309694][  T107] team0 (unregistering): Port device team_slave_1 removed
[  386.350479][  T107] team0 (unregistering): Port device team_slave_0 removed
[  386.615743][ T4929] Bluetooth: hci0: command tx timeout
[  386.848921][  T107] team0 (unregistering): Port device team_slave_1 removed
[  386.898865][  T107] team0 (unregistering): Port device team_slave_0 removed
[  387.309484][  T107] team0 (unregistering): Port device team_slave_1 removed
[  387.350832][  T107] team0 (unregistering): Port device team_slave_0 removed
[  387.750630][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.750646][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  387.750672][ T7609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.774539][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.774555][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  387.774581][ T7609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  388.690180][ T4929] Bluetooth: hci0: command tx timeout
[  389.766848][ T8394] qrtr: Invalid version 48
[  390.768540][ T4929] Bluetooth: hci0: command tx timeout
[  393.773043][   T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  393.820949][   T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  393.832287][   T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  393.833337][   T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  393.834318][   T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  395.895002][   T60] Bluetooth: hci6: command tx timeout
[  396.475279][ T8448] loop0: detected capacity change from 0 to 512
[  396.490182][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  396.490342][ T8448] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  396.490550][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  396.490756][ T8448] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal
[  396.495397][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  396.495711][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  396.496645][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  396.497693][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  396.566267][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  396.567554][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  396.585119][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  396.585817][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  396.587194][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  396.587880][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  397.538427][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  397.590874][ T8406] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  397.968393][   T60] Bluetooth: hci6: command tx timeout
[  399.982182][ T5274] 8021q: adding VLAN 0 to HW filter on device eth12
[  400.055988][   T60] Bluetooth: hci6: command tx timeout
[  402.293881][   T60] Bluetooth: hci6: command tx timeout
[  409.957054][ T8251] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.957312][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.957572][ T8251] bridge_slave_0: entered allmulticast mode
[  409.961232][ T8251] bridge_slave_0: entered promiscuous mode
[  409.963597][ T8251] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.963775][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.963922][ T8251] bridge_slave_1: entered allmulticast mode
[  409.965766][ T8251] bridge_slave_1: entered promiscuous mode
[  413.270884][ T8251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  414.669023][ T8251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  416.152594][ T8251] team0: Port device team_slave_0 added
[  416.206888][ T8251] team0: Port device team_slave_1 added
[  417.304691][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.305927][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.306193][ T8404] bridge_slave_0: entered allmulticast mode
[  418.206880][ T8404] bridge_slave_0: entered promiscuous mode
[  418.286264][ T8251] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.286280][ T8251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.286305][ T8251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.288647][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.288979][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.289238][ T8404] bridge_slave_1: entered allmulticast mode
[  418.308603][ T8404] bridge_slave_1: entered promiscuous mode
[  418.338722][ T8251] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.338738][ T8251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.338763][ T8251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.720513][ T8404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.751559][ T8404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  419.995076][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13
[  420.350754][ T8678] loop0: detected capacity change from 0 to 256
[  420.382389][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.415313][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.415361][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.415385][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.415408][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.415431][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.415453][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.415474][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.475813][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.499188][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.516521][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.517757][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.535316][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.546599][ T1525] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.557595][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.570452][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.582327][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.710184][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.715659][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.723240][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.725145][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.728359][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.732399][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.732441][ T1170] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.734347][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.734849][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.736704][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.738097][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.746808][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.751240][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.752829][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.760346][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.760681][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.761336][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.769082][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.775884][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.776331][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.776779][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.777282][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.780247][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.780609][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.780951][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.781240][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.781580][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.784084][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.816333][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.816772][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.817112][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.817345][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.817673][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.817900][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.818281][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.819185][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.819520][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.819922][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.820357][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.820653][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.820989][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.826242][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.826782][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.829569][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.829947][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.830221][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.830553][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.830786][ T6367] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  420.831277][ T8678] FAT-fs (loop0): Directory bread(block 64) failed
[  420.831306][ T8678] FAT-fs (loop0): Directory bread(block 65) failed
[  420.831468][ T8678] FAT-fs (loop0): Directory bread(block 66) failed
[  420.831498][ T8678] FAT-fs (loop0): Directory bread(block 67) failed
[  420.831584][ T8678] FAT-fs (loop0): Directory bread(block 68) failed
[  420.831604][ T8678] FAT-fs (loop0): Directory bread(block 69) failed
[  420.831689][ T8678] FAT-fs (loop0): Directory bread(block 70) failed
[  420.831709][ T8678] FAT-fs (loop0): Directory bread(block 71) failed
[  420.831795][ T8678] FAT-fs (loop0): Directory bread(block 72) failed
[  420.831816][ T8678] FAT-fs (loop0): Directory bread(block 73) failed
[  420.845668][ T6367] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  421.752061][   T38] audit: type=1326 audit(1779250065.164:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8676 comm="syz.0.866" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf1dce59 code=0x7ffc0000
[  421.752116][   T38] audit: type=1326 audit(1779250065.164:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8676 comm="syz.0.866" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf1dce59 code=0x7ffc0000
[  421.752156][   T38] audit: type=1326 audit(1779250065.184:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8676 comm="syz.0.866" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafbf19d68e code=0x7ffc0000
[  421.752197][   T38] audit: type=1326 audit(1779250065.194:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8676 comm="syz.0.866" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf1dce59 code=0x7ffc0000
[  421.752235][   T38] audit: type=1326 audit(1779250065.204:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8676 comm="syz.0.866" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf1dce59 code=0x7ffc0000
[  421.760787][ T1525] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  421.882037][ T8689] loop1: detected capacity change from 0 to 16
[  421.890355][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  421.891014][ T8689] erofs (device loop1): mounted with root inode @ nid 36.
[  421.893561][ T8689] syz.1.868: attempt to access beyond end of device
[  421.893561][ T8689] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  421.901265][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  421.914562][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  421.915777][ T8689] syz.1.868: attempt to access beyond end of device
[  421.915777][ T8689] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16
[  421.916130][ T8689] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  421.916162][ T8689] erofs (device loop1): read error -117 @ 1 of nid 89
[  421.916403][   T38] audit: type=1800 audit(1779250065.384:28): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.868" name="file2" dev="loop1" ino=89 res=0 errno=0
[  421.933496][ T5945] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  422.173485][ T5945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  422.397107][ T8251] hsr_slave_0: entered promiscuous mode
[  422.411826][ T8251] hsr_slave_1: entered promiscuous mode
[  422.432189][ T8404] team0: Port device team_slave_0 added
[  422.433821][  T199] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  422.453829][ T8404] team0: Port device team_slave_1 added
[  422.510951][ T5618] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  422.720804][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.720821][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.720847][ T8404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  422.747401][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_1
[  422.747417][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.747443][ T8404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  422.832296][ T5620] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  423.134022][ T8722] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0)
[  423.678103][ T8404] hsr_slave_0: entered promiscuous mode
[  423.689855][ T8404] hsr_slave_1: entered promiscuous mode
[  423.697547][ T8404] debugfs: 'hsr0' already exists in 'hsr'
[  423.697573][ T8404] Cannot create hsr debugfs directory
[  427.759902][  T107] bridge_slave_1: left allmulticast mode
[  427.759938][  T107] bridge_slave_1: left promiscuous mode
[  427.760267][  T107] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.040053][  T107] bridge_slave_0: left allmulticast mode
[  428.046560][  T107] bridge_slave_0: left promiscuous mode
[  428.076061][  T107] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.753063][  T107] bridge_slave_1: left allmulticast mode
[  428.753088][  T107] bridge_slave_1: left promiscuous mode
[  428.753260][  T107] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.881062][  T107] bridge_slave_0: left allmulticast mode
[  428.881085][  T107] bridge_slave_0: left promiscuous mode
[  428.881253][  T107] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.967396][ T8814] loop1: detected capacity change from 0 to 256
[  429.978351][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.979424][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.980322][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.980742][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.981073][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.981489][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.981793][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.982192][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.982512][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.982906][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.983224][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.983522][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.985818][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.986217][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.986565][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.986868][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.987222][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.987614][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.987861][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.988359][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.995735][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.996120][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.996372][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.996691][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.996939][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.997401][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.997647][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.997977][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.998300][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.998668][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  429.998963][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.001660][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.001897][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.004237][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.004442][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.004704][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.004876][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.005158][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.005291][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.005537][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.005692][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.005929][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.008594][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.008879][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.009044][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.009302][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.009434][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.009677][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.009811][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.014456][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.015687][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.026762][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.032466][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.032864][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.033016][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.033278][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.033441][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.033675][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.033817][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.034167][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.034299][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.034449][ T8814] FAT-fs (loop1): Directory bread(block 64) failed
[  430.034475][ T8814] FAT-fs (loop1): Directory bread(block 65) failed
[  430.034577][ T8814] FAT-fs (loop1): Directory bread(block 66) failed
[  430.034599][ T8814] FAT-fs (loop1): Directory bread(block 67) failed
[  430.034706][ T8814] FAT-fs (loop1): Directory bread(block 68) failed
[  430.034728][ T8814] FAT-fs (loop1): Directory bread(block 69) failed
[  430.034837][ T8814] FAT-fs (loop1): Directory bread(block 70) failed
[  430.034858][ T8814] FAT-fs (loop1): Directory bread(block 71) failed
[  430.034950][ T8814] FAT-fs (loop1): Directory bread(block 72) failed
[  430.034972][ T8814] FAT-fs (loop1): Directory bread(block 73) failed
[  430.044657][ T1492] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  430.254011][  T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.264734][  T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  430.293893][ T1492] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  431.142055][   T38] audit: type=1326 audit(1779250074.224:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.1.916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56e77ce59 code=0x7ffc0000
[  431.142109][   T38] audit: type=1326 audit(1779250074.224:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.1.916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56e77ce59 code=0x7ffc0000
[  431.142149][   T38] audit: type=1326 audit(1779250074.254:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.1.916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe56e73d68e code=0x7ffc0000
[  431.142189][   T38] audit: type=1326 audit(1779250074.264:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.1.916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56e77ce59 code=0x7ffc0000
[  431.142230][   T38] audit: type=1326 audit(1779250074.264:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.1.916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56e77ce59 code=0x7ffc0000
[  431.142270][   T38] audit: type=1326 audit(1779250074.294:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.1.916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe56e77ce59 code=0x7ffc0000
[  431.142311][   T38] audit: type=1326 audit(1779250074.294:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.1.916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56e77ce59 code=0x7ffc0000
[  431.142350][   T38] audit: type=1326 audit(1779250074.294:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.1.916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56e77ce59 code=0x7ffc0000
[  431.142391][   T38] audit: type=1326 audit(1779250074.304:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.1.916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fe56e77ce59 code=0x7ffc0000
[  431.142431][   T38] audit: type=1326 audit(1779250074.314:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.1.916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56e77ce59 code=0x7ffc0000
[  431.270013][   T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  431.485917][ T5945] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  431.495145][   T41] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  431.951643][ T8616] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  433.592233][  T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  433.865192][ T8834] qrtr: Invalid version 48
[  434.585331][ T8839] loop0: detected capacity change from 0 to 512
[  434.660323][  T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  434.713329][ T8839] EXT4-fs: Ignoring removed nomblk_io_submit option
[  434.744713][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  434.762674][ T5814] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  434.772122][ T8839] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  435.597476][  T107] bond0 (unregistering): Released all slaves
[  435.673714][ T8839] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  437.376565][ T8859] loop1: detected capacity change from 0 to 512
[  437.410861][  T153] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  437.415382][ T8859] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  437.419341][ T5814] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  437.437499][ T8859] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal
[  437.446963][ T8859] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  437.783428][ T8848] ==================================================================
[  437.783450][ T8848] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240
[  437.783482][ T8848] Read of size 8 at addr ffff8880296b5b40 by task syz.0.924/8848
[  437.783500][ T8848] 
[  437.783524][ T8848] CPU: 1 UID: 0 PID: 8848 Comm: syz.0.924 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  437.783549][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  437.783570][ T8848] Call Trace:
[  437.783579][ T8848]  <TASK>
[  437.783591][ T8848]  dump_stack_lvl+0xe8/0x150
[  437.783620][ T8848]  print_address_description+0x55/0x1e0
[  437.783647][ T8848]  ? reverse_path_check_proc+0x5b/0x240
[  437.783669][ T8848]  print_report+0x58/0x70
[  437.783692][ T8848]  kasan_report+0x117/0x150
[  437.783712][ T8848]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  437.783736][ T8848]  ? reverse_path_check_proc+0x5b/0x240
[  437.783760][ T8848]  ? ep_insert+0xbbb/0x1820
[  437.783789][ T8848]  reverse_path_check_proc+0x5b/0x240
[  437.783813][ T8848]  ? ep_insert+0xbbb/0x1820
[  437.783847][ T8848]  ep_insert+0xc6c/0x1820
[  437.783882][ T8848]  ? __pfx_ep_insert+0x10/0x10
[  437.783916][ T8848]  ? lockdep_hardirqs_on+0x7a/0x110
[  437.783938][ T8848]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  437.783960][ T8848]  ? mutex_lock_nested+0x152/0x1d0
[  437.783987][ T8848]  ? do_epoll_ctl_file+0xc69/0xed0
[  437.784018][ T8848]  do_epoll_ctl_file+0x8bb/0xed0
[  437.784049][ T8848]  ? do_epoll_ctl_file+0xac3/0xed0
[  437.784081][ T8848]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  437.784113][ T8848]  ? __fget_files+0x3a6/0x420
[  437.784140][ T8848]  ? __fget_files+0x2a/0x420
[  437.784172][ T8848]  __se_sys_epoll_ctl+0x14e/0x210
[  437.784193][ T8848]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  437.784216][ T8848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.784238][ T8848]  do_syscall_64+0x15f/0xf80
[  437.784260][ T8848]  ? trace_irq_disable+0x3b/0x140
[  437.784288][ T8848]  ? clear_bhb_loop+0x40/0x90
[  437.784311][ T8848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.784332][ T8848] RIP: 0033:0x7fafbf1dce59
[  437.784356][ T8848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.784374][ T8848] RSP: 002b:00007fafbd3ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  437.784398][ T8848] RAX: ffffffffffffffda RBX: 00007fafbf456180 RCX: 00007fafbf1dce59
[  437.784415][ T8848] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000007
[  437.784428][ T8848] RBP: 00007fafbf272d6f R08: 0000000000000000 R09: 0000000000000000
[  437.784441][ T8848] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000
[  437.784456][ T8848] R13: 00007fafbf456218 R14: 00007fafbf456180 R15: 00007ffc04e1be38
[  437.784479][ T8848]  </TASK>
[  437.784487][ T8848] 
[  437.784492][ T8848] Allocated by task 8844:
[  437.784502][ T8848]  kasan_save_track+0x3e/0x80
[  437.784530][ T8848]  __kasan_slab_alloc+0x6c/0x80
[  437.784547][ T8848]  kmem_cache_alloc_noprof+0x33b/0x680
[  437.784577][ T8848]  ep_insert+0x512/0x1820
[  437.784604][ T8848]  do_epoll_ctl_file+0x8bb/0xed0
[  437.784632][ T8848]  __se_sys_epoll_ctl+0x14e/0x210
[  437.784649][ T8848]  do_syscall_64+0x15f/0xf80
[  437.784669][ T8848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.784688][ T8848] 
[  437.784693][ T8848] Freed by task 8844:
[  437.784702][ T8848]  kasan_save_track+0x3e/0x80
[  437.784729][ T8848]  kasan_save_free_info+0x46/0x50
[  437.784753][ T8848]  __kasan_slab_free+0x5c/0x80
[  437.784769][ T8848]  kmem_cache_free+0x187/0x6c0
[  437.784788][ T8848]  eventpoll_release_file+0xc2/0x240
[  437.784815][ T8848]  __fput+0x83c/0xa70
[  437.784840][ T8848]  task_work_run+0x1d9/0x270
[  437.784862][ T8848]  get_signal+0x11eb/0x1330
[  437.784888][ T8848]  arch_do_signal_or_restart+0xbc/0x840
[  437.784909][ T8848]  exit_to_user_mode_loop+0x8c/0x4d0
[  437.784928][ T8848]  do_syscall_64+0x33e/0xf80
[  437.784948][ T8848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.784966][ T8848] 
[  437.784971][ T8848] The buggy address belongs to the object at ffff8880296b5b40
[  437.784971][ T8848]  which belongs to the cache ep_head of size 16
[  437.784988][ T8848] The buggy address is located 0 bytes inside of
[  437.784988][ T8848]  freed 16-byte region [ffff8880296b5b40, ffff8880296b5b50)
[  437.785009][ T8848] 
[  437.785014][ T8848] The buggy address belongs to the physical page:
[  437.785033][ T8848] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880296b53c0 pfn:0x296b5
[  437.785057][ T8848] memcg:ffff888033e35001
[  437.785066][ T8848] flags: 0x80000000000200(workingset|node=0|zone=1)
[  437.785086][ T8848] page_type: f5(slab)
[  437.785108][ T8848] raw: 0080000000000200 ffff888140ae3000 ffffea0000d23a10 ffff8880202aff88
[  437.785128][ T8848] raw: ffff8880296b53c0 0000000800800076 00000000f5000000 ffff888033e35001
[  437.785139][ T8848] page dumped because: kasan: bad access detected
[  437.785152][ T8848] page_owner tracks the page as allocated
[  437.785160][ T8848] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4982, tgid 4982 (udevd), ts 37436923806, free_ts 37303966759
[  437.785196][ T8848]  post_alloc_hook+0x1f9/0x250
[  437.785226][ T8848]  get_page_from_freelist+0x28c1/0x2940
[  437.785249][ T8848]  __alloc_frozen_pages_noprof+0x18d/0x380
[  437.785278][ T8848]  allocate_slab+0x74/0x5e0
[  437.785302][ T8848]  refill_objects+0x33c/0x3d0
[  437.785324][ T8848]  __pcs_replace_empty_main+0x373/0x720
[  437.785349][ T8848]  kmem_cache_alloc_noprof+0x433/0x680
[  437.785378][ T8848]  ep_insert+0x512/0x1820
[  437.785405][ T8848]  do_epoll_ctl_file+0x8bb/0xed0
[  437.785433][ T8848]  __se_sys_epoll_ctl+0x14e/0x210
[  437.785449][ T8848]  do_syscall_64+0x15f/0xf80
[  437.785469][ T8848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.785488][ T8848] page last free pid 5154 tgid 5154 stack trace:
[  437.785499][ T8848]  __free_frozen_pages+0x10af/0x1190
[  437.785516][ T8848]  __slab_free+0x252/0x2a0
[  437.785534][ T8848]  qlist_free_all+0x99/0x100
[  437.785560][ T8848]  kasan_quarantine_reduce+0x148/0x160
[  437.785587][ T8848]  __kasan_slab_alloc+0x22/0x80
[  437.785603][ T8848]  kmem_cache_alloc_noprof+0x33b/0x680
[  437.785632][ T8848]  ptlock_alloc+0x20/0x70
[  437.785649][ T8848]  pte_alloc_one+0x7e/0x380
[  437.785675][ T8848]  __pte_alloc+0x25/0x1a0
[  437.785695][ T8848]  move_page_tables+0x16a2/0x1b90
[  437.785720][ T8848]  relocate_vma_down+0x3ab/0x590
[  437.785745][ T8848]  setup_arg_pages+0x70a/0xbd0
[  437.785772][ T8848]  load_elf_binary+0xc67/0x29b0
[  437.785796][ T8848]  bprm_execve+0x94a/0x1510
[  437.785812][ T8848]  do_execveat_common+0x50d/0x690
[  437.785830][ T8848]  __x64_sys_execve+0x97/0xc0
[  437.785848][ T8848] 
[  437.785852][ T8848] Memory state around the buggy address:
[  437.785864][ T8848]  ffff8880296b5a00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  437.785878][ T8848]  ffff8880296b5a80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  437.785891][ T8848] >ffff8880296b5b00: 00 00 fc fc fa fb fc fc fa fb fc fc 00 00 fc fc
[  437.785902][ T8848]                                            ^
[  437.785913][ T8848]  ffff8880296b5b80: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc
[  437.785927][ T8848]  ffff8880296b5c00: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  437.785937][ T8848] ==================================================================
[  437.852434][ T8848] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  437.852460][ T8848] CPU: 0 UID: 0 PID: 8848 Comm: syz.0.924 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  437.852484][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  437.852497][ T8848] Call Trace:
[  437.852505][ T8848]  <TASK>
[  437.852513][ T8848]  vpanic+0x56c/0xa60
[  437.852553][ T8848]  ? __pfx_vpanic+0x10/0x10
[  437.852586][ T8848]  panic+0xc5/0xd0
[  437.852609][ T8848]  ? __pfx_panic+0x10/0x10
[  437.852633][ T8848]  ? preempt_schedule_thunk+0x16/0x40
[  437.852655][ T8848]  ? preempt_schedule_thunk+0x16/0x40
[  437.852674][ T8848]  ? reverse_path_check_proc+0x5b/0x240
[  437.852696][ T8848]  check_panic_on_warn+0x89/0xb0
[  437.852721][ T8848]  ? reverse_path_check_proc+0x5b/0x240
[  437.852744][ T8848]  end_report+0x73/0x170
[  437.852764][ T8848]  ? reverse_path_check_proc+0x5b/0x240
[  437.852783][ T8848]  kasan_report+0x128/0x150
[  437.852800][ T8848]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  437.852822][ T8848]  ? reverse_path_check_proc+0x5b/0x240
[  437.852844][ T8848]  ? ep_insert+0xbbb/0x1820
[  437.852871][ T8848]  reverse_path_check_proc+0x5b/0x240
[  437.852892][ T8848]  ? ep_insert+0xbbb/0x1820
[  437.852918][ T8848]  ep_insert+0xc6c/0x1820
[  437.852949][ T8848]  ? __pfx_ep_insert+0x10/0x10
[  437.852979][ T8848]  ? lockdep_hardirqs_on+0x7a/0x110
[  437.852999][ T8848]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  437.853020][ T8848]  ? mutex_lock_nested+0x152/0x1d0
[  437.853046][ T8848]  ? do_epoll_ctl_file+0xc69/0xed0
[  437.853075][ T8848]  do_epoll_ctl_file+0x8bb/0xed0
[  437.853103][ T8848]  ? do_epoll_ctl_file+0xac3/0xed0
[  437.853136][ T8848]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  437.853165][ T8848]  ? __fget_files+0x3a6/0x420
[  437.853193][ T8848]  ? __fget_files+0x2a/0x420
[  437.853225][ T8848]  __se_sys_epoll_ctl+0x14e/0x210
[  437.853246][ T8848]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  437.853270][ T8848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.853290][ T8848]  do_syscall_64+0x15f/0xf80
[  437.853312][ T8848]  ? trace_irq_disable+0x3b/0x140
[  437.853332][ T8848]  ? clear_bhb_loop+0x40/0x90
[  437.853355][ T8848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.853375][ T8848] RIP: 0033:0x7fafbf1dce59
[  437.853394][ T8848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.853412][ T8848] RSP: 002b:00007fafbd3ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  437.853435][ T8848] RAX: ffffffffffffffda RBX: 00007fafbf456180 RCX: 00007fafbf1dce59
[  437.853451][ T8848] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000007
[  437.853464][ T8848] RBP: 00007fafbf272d6f R08: 0000000000000000 R09: 0000000000000000
[  437.853478][ T8848] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000
[  437.853492][ T8848] R13: 00007fafbf456218 R14: 00007fafbf456180 R15: 00007ffc04e1be38
[  437.853515][ T8848]  </TASK>
[  437.853885][ T8848] Kernel Offset: disabled